Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, Even Balance publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
Parent process
Related files
pnkbstrb.exe
By Even Balance (Signed)
MD5: | 0e4c4fcae8646c62362fde5f1281245c |
SHA1: | 845b85ba901adf369839bdec876a6bf89936fbdf |
SHA256: | 114411f54a9a65d2adc8b181a43d06bfe793fef28e394c9a01da206178cf3ed2 |
Overview
pnkbstrb.exe runs as a service under the name PnkBstrB with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Even Balance which was issued by the VeriSign certificate authority (CA). Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).
Details
File name: | pnkbstrb.exe |
Typical file path: | C:\windows\syswow64\pnkbstrb.exe |
Size: | 275.49 KB (282,104 bytes) |
Certificate |
Issued to: | Even Balance |
Authority (CA): | VeriSign |
Digital DNA |
File packed: | No |
.NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\WINDOWS\system32\PnkBstrB.exe'
- Firewall exception for 'C:\WINDOWS\system32\PnkBstrB.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 45301
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00271801% | |
Kernel CPU: | 0.00111577% | |
User CPU: | 0.00160224% | |
Kernel CPU time: | 15,266 ms/min | |
CPU cycles: | 18,334,748/sec | |
Memory |
Private memory: | 3.38 MB | |
Private (maximum): | 6.03 MB | |
Private (minimum): | 5.38 MB | |
Non-paged memory: | 3.38 MB | |
Virtual memory: | 45.33 MB | |
Virtual memory (peak): | 48.33 MB | |
Working set: | 5.45 MB | |
Working set (peak): | 6.05 MB | |
Page faults: | 2,041/min | |
I/O |
I/O read transfer: | 2.35 KB/sec | |
I/O read operations: | 1/sec | |
I/O write transfer: | 752 Bytes/sec | |
I/O write operations: | 1/sec | |
I/O other transfer: | 59.99 MB/sec | |
I/O other operations: | 15,360/sec | |
Resource allocations |
Threads: | 5 | |
Handles: | 181 | |
Process properties
Integrety level: | System |
Platform: | 32-bit |
Command line: | C:\Windows\System32\pnkbstrb.exe |
Owner: | SYSTEM |
Windows Service |
Service name: | PnkBstrB |
Description: | “PunkBuster Service Component [v2.304 BFP4F] http://www.evenbalance.com” |
Type: | Win32OwnProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
sechost.dll |
Total CPU: | 1.60171065% | |
Kernel CPU: | 0.13609943% | |
User CPU: | 1.46561121% | |
CPU cycles: | 124,054,572/sec | |
Context switches: | 364/sec | |
Memory: | 100 KB | |
PnkBstrB.exe (main module) |
Total CPU: | 0.00013930% | |
Kernel CPU: | 0.00000000% | |
User CPU: | 0.00013930% | |
CPU cycles: | 1,943/sec | |
Memory: | 272 KB | |
Distribution by Windows OS
OS version | distribution |
Microsoft Windows XP |
27.50% |
|
Windows 7 Home Premium |
20.00% |
|
Windows 7 Ultimate |
15.00% |
|
Windows 7 Professional |
12.50% |
|
Windows 7 Home Basic |
7.50% |
|
Windows Developer Preview |
5.00% |
|
Windows Vista Home Premium |
5.00% |
|
Windows Vista Home Basic |
5.00% |
|
Windows 8 Pro |
2.50% |
|
Distribution by country
United States installs about 30.00% of pnkbstrb.exe.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Toshiba |
20.00% |
|
GIGABYTE |
20.00% |
|
ASUS |
20.00% |
|
Acer |
15.00% |
|
Lenovo |
10.00% |
|
Dell |
10.00% |
|
Hewlett-Packard |
5.00% |
|