: Unexplained spikes in background processing power.
The naming similarity appears coincidental. The legitimate Edraw executables have different filenames, file sizes, and digital signatures compared to the suspicious edrwkgn.exe.
Investigations into the origins of EDRWKGN.exe have yielded several possible sources: edrwkgn.exe
If your CPU usage spikes or your internet connection slows down significantly when this process is running, it may be performing background tasks like data mining or botnet activity.
Edrwkgn.exe is an executable file that is often associated with computer-aided design (CAD) software, particularly with the popular AutoCAD program developed by Autodesk. The file is typically located in the installation directory of AutoCAD or other CAD software, and its presence is usually accompanied by other related files. : Unexplained spikes in background processing power
The primary non-malicious identity for edrwkgn.exe is as a software component associated with various versions of the , developed by a company called EdrawSoft . It is typically found in an officeviewer folder (e.g., C:\Program Files\officeviewer ). Several distinct versions of the Edraw software are known to have included this file:
If you are a security researcher, perform within an isolated sandbox environment like Hatching Triage to observe its behavior safely. Investigations into the origins of EDRWKGN
It uses Windows Management Instrumentation (WMI) queries to target Win32_Processor and extract your exact ProcessorId .