How to remove csrs.exe
csrs.exe
The module csrs.exe has been detected as Trojan.Downloader
File Details
| Product Name: | Microsoft® Windows® Operating System4ProductVersion1.0.0.1DVarFil |
| Company Name: | Microsoft CorporationH FileDescriptionR |
| MD5: | ed43f6043f51fba6b2a8a4062256154d |
| Size: | 6 MB |
| First Published: | 2021-05-07 20:28:44 (4 years ago) |
| Latest Published: | 2025-11-11 23:01:56 (5 days ago) |
| Status: | Trojan.Downloader (on last analysis) | |
| Analysis Date: | 2025-11-11 23:01:56 (5 days ago) |
Common Places:
| %system% |
| %system% |
| %system% |
| %system% |
| %system%\config\systemprofile\appdata\local\microsoft\windows\inetcache |
Geography:
| 50.0% | ||
| 33.3% | ||
| 16.7% |
OS Version:
| Windows Server 2008 R2 | 50.0% | |
| Windows Server 2012 R2 | 33.3% | |
| Windows Server 2003 | 16.7% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000779a |
PE Sections:
| Name | Size of data | MD5 |
| .text | 128000 | 83d209c1cb42f196076b0b806d37f6ee |
| .rdata | 45568 | 7881067ccbd6c373e2a388de0ee98b35 |
| .data | 2560 | 9feaed8c93f4a5b5b9a365d49e7facd3 |
| .gfids | 512 | 45c9e970b68ba03dad926e5dc49f1d09 |
| .rsrc | 61440 | 4fb18aec29bf98fb530af090cb849575 |
| .reloc | 6144 | c3aec152305abf246078fa5b1e108c45 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for csrs.exe
