Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, Even Balance publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
Parent process
Related files
pnkbstra.exe
By Even Balance (Signed)
| MD5: | 205e1b699fd3f2f9b036eea2ec30c620 |
| SHA1: | fcadc0ec2d8cb74802358b002efe412896cd1485 |
| SHA256: | 9d5c8009bc3f6f76438fc82c3daaa3e9cc87f74cde841a0add9ef00e98db6890 |
Overview
pnkbstra.exe runs as a service under the name PnkBstrA with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Even Balance which was issued by the VeriSign certificate authority (CA).
Details
| File name: | pnkbstra.exe |
| Typical file path: | C:\windows\syswow64\pnkbstra.exe |
| Size: | 75.09 KB (76,888 bytes) |
| Certificate |
| Issued to: | Even Balance |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, July 1, 2012 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\WINDOWS\system32\PnkBstrA.exe'
- Firewall exception for 'C:\WINDOWS\system32\PnkBstrA.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 44301
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00051361% | |
| Kernel CPU: | 0.00024884% | |
| User CPU: | 0.00026477% | |
| Kernel CPU time: | 206,157 ms/min | |
| CPU cycles: | 863,241/sec | |
| Context switches: | 4/sec | |
| Memory |
| Private memory: | 1.77 MB | |
| Private (maximum): | 4.16 MB | |
| Private (minimum): | 2.73 MB | |
| Non-paged memory: | 1.77 MB | |
| Virtual memory: | 45.59 MB | |
| Virtual memory (peak): | 48.9 MB | |
| Working set: | 3.09 MB | |
| Working set (peak): | 4.84 MB | |
| Page faults: | 5,877/min | |
| I/O |
| I/O read transfer: | 2.05 KB/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 514 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 17 Bytes/sec | |
| I/O other operations: | 3/sec | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 107 | |
| GUI GDI count: | 4 | |
| GUI USER count: | 1 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command lines: |
- C:\windows\syswow64\pnkbstra.exe
- C:\Windows\System32\pnkbstra.exe
|
| Owner: | SYSTEM |
| Windows Service |
| Service name: | PnkBstrA |
| Description: | “PunkBuster Service Component [v1029] http://www.evenbalance.com” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| sechost.dll |
| Total CPU: | 0.00581928% | |
| Kernel CPU: | 0.00129381% | |
| User CPU: | 0.00452547% | |
| CPU cycles: | 317,854/sec | |
| Context switches: | 5/sec | |
| Memory: | 100 KB | |
| wow64.dll |
| Total CPU: | 0.00177781% | |
| Kernel CPU: | 0.00022798% | |
| User CPU: | 0.00154983% | |
| CPU cycles: | 281,694/sec | |
| Context switches: | 5/sec | |
| Memory: | 252 KB | |
| advapi32.dll (Advanced Windows 32 Base API by Microsoft) |
| Total CPU: | 0.00132121% | |
| Kernel CPU: | 0.00057546% | |
| User CPU: | 0.00074575% | |
| Context switches: | 5/sec | |
| Memory: | 620 KB | |
| PnkBstrA.exe (main module) |
| Total CPU: | 0.00054079% | |
| Kernel CPU: | 0.00040839% | |
| User CPU: | 0.00013240% | |
| CPU cycles: | 44,968/sec | |
| Memory: | 88 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
28.89% |
|
| Windows 7 Ultimate |
24.44% |
|
| Microsoft Windows XP |
12.78% |
|
| Windows 7 Professional |
7.78% |
|
| Windows 8 Pro |
5.00% |
|
| Windows 7 Home Basic |
3.89% |
|
| Windows Vista Home Premium |
3.89% |
|
| Windows 8 |
3.33% |
|
| Windows 8.1 Pro |
2.22% |
|
| Windows Vista Home Basic |
2.22% |
|
| Windows 8 Pro with Media Center |
1.67% |
|
| Windows Developer Preview |
1.11% |
|
| Windows Vista Business |
1.11% |
|
| Windows 8.1 |
0.56% |
|
| Windows 7 Enterprise |
0.56% |
|
| Windows Vista Ultimate |
0.56% |
|
Distribution by country
United States installs about 22.78% of pnkbstra.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
16.42% |
|
| Hewlett-Packard |
12.69% |
|
| Acer |
11.94% |
|
| Dell |
10.45% |
|
| Lenovo |
10.45% |
|
| GIGABYTE |
8.21% |
|
| Toshiba |
7.46% |
|
| Sony |
5.97% |
|
| MSI |
5.97% |
|
| Samsung |
2.99% |
|
| Gateway |
2.99% |
|
| American Megatrends |
1.49% |
|
| Intel |
1.49% |
|
| Alienware |
1.49% |
|
