Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

205e1 34.43%
3a2e8 25.14%
19e83 4.37%
3a2bd 12.57%
1713d 5.46%
0e01d 3.83%
681da 1.09%
83188 5.46%
a1dd3 7.10%
c183b 0.55%
(Note, Even Balance publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

pnkbstra.exe

By Even Balance (Signed)

Remove pnkbstra.exe
MD5:   3a2bdd76e7d2a5f40a7174793d1ba794
SHA1:   687353237c3d31300f33946b136afb916c2019e2
SHA256:   029ee2c2f71aec7906600eec4f855dc5648c1ecf53f11426079b04591f24d067

Overview

pnkbstra.exe runs as a service under the name PnkBstrA with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Even Balance which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:pnkbstra.exe
Typical file path:C:\windows\syswow64\pnkbstra.exe
Size:73.38 KB (75,136 bytes)
Certificate
Issued to:Even Balance
Authority (CA):VeriSign
Effective date:Sunday, July 1, 2012
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'PnkBstrA'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\WINDOWS\system32\PnkBstrA.exe'
  • Firewall exception for 'C:\WINDOWS\system32\PnkBstrA.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 44301

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00010597%
    0.028634%
    Kernel CPU:0.00006937%
    0.013761%
    User CPU:0.00003660%
    0.014873%
    Kernel CPU time:304,020 ms/min
    100,923,805ms/min
    CPU cycles:116,839/sec
    17,470,203/sec
    Context switches:4/sec
    284/sec
    Memory
    Private memory:1.69 MB
    21.59 MB
    Private (maximum):4.09 MB
    Private (minimum):3.03 MB
    Non-paged memory:1.69 MB
    21.59 MB
    Virtual memory:47.65 MB
    140.96 MB
    Virtual memory (peak):50.75 MB
    169.69 MB
    Working set:3.36 MB
    18.61 MB
    Working set (peak):4.57 MB
    37.95 MB
    Page faults:1,897/min
    2,039/min
    I/O
    I/O read transfer:0 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:0 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:13 Bytes/sec
    448.09 KB/min
    I/O other operations:1/sec
    1,671/min
    Resource allocations
    Threads:4
    12
    Handles:91
    600
    GUI GDI count:4
    103
    GUI USER count:1
    49

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command lines:
    • C:\windows\syswow64\pnkbstra.exe
    • C:\Windows\System32\pnkbstra.exe
    Owner:SYSTEM
    Windows Service
    Service name:PnkBstrA
    Description:“PunkBuster Service Component [v1029] http://www.evenbalance.com”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    ADVAPI32.dll
    Total CPU:0.00142064%
    0.272967%
    Kernel CPU:0.00065349%
    0.107585%
    User CPU:0.00076714%
    0.165382%
    CPU cycles:181,203/sec
    5,741,424/sec
    Context switches:4/sec
    79/sec
    Memory:792 KB
    1.16 MB
    sechost.dll
    Total CPU:0.00126756%
    Kernel CPU:0.00126756%
    User CPU:0.00000000%
    CPU cycles:394,771/sec
    Context switches:5/sec
    Memory:100 KB
    wow64.dll
    Total CPU:0.00042963%
    Kernel CPU:0.00018262%
    User CPU:0.00024701%
    CPU cycles:205,279/sec
    Context switches:2/sec
    Memory:252 KB
    PnkBstrA.exe (main module)
    Total CPU:0.00002960%
    Kernel CPU:0.00001733%
    User CPU:0.00001227%
    CPU cycles:28,129/sec
    Memory:88 KB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 28.89%
    Windows 7 Ultimate 24.44%
    Microsoft Windows XP 12.78%
    Windows 7 Professional 7.78%
    Windows 8 Pro 5.00%
    Windows 7 Home Basic 3.89%
    Windows Vista Home Premium 3.89%
    Windows 8 3.33%
    Windows 8.1 Pro 2.22%
    Windows Vista Home Basic 2.22%
    Windows 8 Pro with Media Center 1.67%
    Windows Developer Preview 1.11%
    Windows Vista Business 1.11%
    Windows 8.1 0.56%
    Windows 7 Enterprise 0.56%
    Windows Vista Ultimate 0.56%

    Distribution by countryDistribution by country

    United States installs about 22.78% of pnkbstra.exe.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    ASUS 16.42%
    Hewlett-Packard 12.69%
    Acer 11.94%
    Dell 10.45%
    Lenovo 10.45%
    GIGABYTE 8.21%
    Toshiba 7.46%
    Sony 5.97%
    MSI 5.97%
    Samsung 2.99%
    Gateway 2.99%
    American Megatrends 1.49%
    Intel 1.49%
    Alienware 1.49%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE