ekrn.exe
ESET Smart Security by ESET (Signed)
| Version: | 4.2.64.12 |
| MD5: | efa198f8983d064a81052851f7bb80c2 |
| SHA1: | 725af47f143e9a2729eba7ecf41b5c288a75ab9c |
| SHA256: | 09ef9f0572092cf4839cc0de54078df9d37d06bbf0d46b1b5b4a94c1650344f4 |
What is ekrn.exe?
ESET NOD32 Antivirus, commonly known as NOD32, is an antivirus software package from ESET. ESET's use of assembly language in its products contributes to their low system requirements and disk space utilization. ESET calls its scanning engine ThreatSense, and makes extensive use of generic signatures and heuristics.
About ekrn.exe (from ESET)
“Protect your family with ESET’s complete Internet security suite, built on the award-winning ThreatSense antivirus and antispyware engine. Our proactive heuristic technology intercepts and eliminates ”
Details
| File name: | ekrn.exe |
| Publisher: | ESET |
| Product name: | ESET Smart Security |
| Description: | ESET Service |
| Typical file path: | C:\Program Files\eset\eset nod32 antivirus\ekrn.exe |
| File version: | 4.2.64.12 |
| Size: | 791.16 KB (810,144 bytes) |
| Certificate |
| Issued to: | ESET |
| Authority (CA): | VeriSign |
| Expiration date: | Wednesday, June 12, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'ekrn' (ESET Service)
- ekrn
Network connections
[TCP] bk-in-f120.1e100.net (173.194.69.120:443)
[TCP] 65.55.184.15:443
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.04538481% | |
| Kernel CPU: | 0.02718292% | |
| User CPU: | 0.01820189% | |
| Kernel CPU time: | 332,527,580 ms/min | |
| Context switches: | 231/sec | |
| Memory |
| Private memory: | 80.62 MB | |
| Private (maximum): | 87.8 MB | |
| Private (minimum): | 52.23 MB | |
| Non-paged memory: | 80.62 MB | |
| Virtual memory: | 175.99 MB | |
| Virtual memory (peak): | 248.14 MB | |
| Working set: | 59.78 MB | |
| Working set (peak): | 125.21 MB | |
| Page faults: | 2,753,240/min | |
| I/O |
| I/O read transfer: | 10.12 MB/sec | |
| I/O read operations: | 494/sec | |
| I/O write transfer: | 1.11 MB/sec | |
| I/O write operations: | 37/sec | |
| I/O other transfer: | 392.56 KB/sec | |
| I/O other operations: | 2,139/sec | |
| Resource allocations |
| Threads: | 22 | |
| Handles: | 372 | |
| GUI GDI count: | 9 | |
| GUI USER count: | 10 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command lines: |
- "C:\Program Files\eset\eset nod32 antivirus\ekrn.exe"
- "C:\Program Files\eset\eset smart security\ekrn.exe"
- "C:\Program Files\eset\eset smart security\x86\ekrn.exe"
|
| Owner: | SYSTEM |
| Windows Service |
| Service name: | ekrn |
| Display name: | ESET Service |
| Description: | “ESET Service” |
| Type: | Win32OwnProcess, InteractiveProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ekrnamon.dll (ESET Smart Security by ESET) |
| Total CPU: | 1.05152578% | |
| Kernel CPU: | 0.16230388% | |
| User CPU: | 0.88922190% | |
| CPU cycles: | 5,320,926/sec | |
| Context switches: | 19/sec | |
| Memory: | 180 KB | |
| ADVAPI32.dll |
| Total CPU: | 0.72553645% | |
| Kernel CPU: | 0.05836718% | |
| User CPU: | 0.66716927% | |
| Context switches: | 1/sec | |
| Memory: | 620 KB | |
| sechost.dll |
| Total CPU: | 0.40297847% | |
| Kernel CPU: | 0.03043136% | |
| User CPU: | 0.37254711% | |
| CPU cycles: | 9,438,889/sec | |
| Context switches: | 4/sec | |
| Memory: | 100 KB | |
| ekrnepfw.dll (ESET Smart Security by ESET) |
| Total CPU: | 0.19951628% | |
| Kernel CPU: | 0.11510686% | |
| User CPU: | 0.08440942% | |
| CPU cycles: | 2,089,983/sec | |
| Context switches: | 19/sec | |
| Memory: | 544 KB | |
| ekrn.exe (main module) |
| Total CPU: | 0.00675151% | |
| Kernel CPU: | 0.00578915% | |
| User CPU: | 0.00096235% | |
| CPU cycles: | 78,598/sec | |
| Context switches: | 1/sec | |
| Memory: | 780 KB | |
| ntdll.dll |
| Total CPU: | 0.00235548% | |
| Kernel CPU: | 0.00235548% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 10,299/sec | |
| Memory: | 1.23 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
40.50% |
|
| Microsoft Windows XP |
23.50% |
|
| Windows 7 Home Premium |
11.50% |
|
| Windows 8 Pro |
7.00% |
|
| Windows 7 Professional |
6.50% |
|
| Windows 7 Ultimate N |
2.50% |
|
| Windows 7 Home Basic |
1.50% |
|
| Windows 8.1 N |
1.00% |
|
| Windows 8.1 Single Language |
1.00% |
|
| Windows 8.1 |
1.00% |
|
| Windows 8 Enterprise |
1.00% |
|
| Windows 8 |
1.00% |
|
| Windows Vista Home Premium |
1.00% |
|
| Windows 8 Consumer Preview |
0.50% |
|
| Windows 8 Pro with Media Center |
0.50% |
|
Distribution by country
Ireland installs about 14.50% of ESET Smart Security.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
18.54% |
|
| Hewlett-Packard |
13.17% |
|
| Dell |
12.68% |
|
| Intel |
11.71% |
|
| Acer |
9.27% |
|
| Lenovo |
8.78% |
|
| Sony |
8.78% |
|
| GIGABYTE |
7.32% |
|
| Toshiba |
6.83% |
|
| Sahara |
0.98% |
|
| Samsung |
0.98% |
|
| American Megatrends |
0.98% |
|
