How to remove csrss.exe
csrss.exe
The module csrss.exe has been detected as Trojan.CoinMiner
File Details
| MD5: | 416c43aeb17252ee33048bd1f277d2a5 |
| Size: | 31 KB |
| First Published: | 2017-07-07 21:09:01 (8 years ago) |
| Latest Published: | 2025-06-09 23:01:10 (2 months ago) |
| Status: | Trojan.CoinMiner (on last analysis) | |
| Analysis Date: | 2025-06-09 23:01:10 (2 months ago) |
Common Places:
| %programfiles%\pcpitstop\pc matic |
| %commonappdata%\msbuild\updates |
| %commonappdata%\msbuild |
| %programfiles%\pcpitstop |
| %commonappdata%\package |
| %commonappdata%\appsource |
| %appdata% |
| %commonappdata%\package |
| %commonappdata%\package |
| %commonappdata%\package |
File Names:
| ntrights.exe |
| csrss.exe |
Geography:
| Russia | 49.8% | |
| Ukraine | 8.2% | |
| Peru | 7.8% | |
| Brazil | 7.4% | |
| Mexico | 4.5% | |
| Colombia | 4.1% | |
| Argentina | 2.6% | |
| United States | 2.2% | |
| Ecuador | 2.2% | |
| Spain | 1.9% | |
| Belarus | 1.1% | |
| Costa Rica | 0.7% | |
| Chile | 0.7% | |
| Uruguay | 0.7% | |
| Germany | 0.4% | |
| Japan | 0.4% | |
| Uzbekistan | 0.4% | |
| Poland | 0.4% | |
| Kazakhstan | 0.4% | |
| Azerbaijan | 0.4% | |
| Kyrgyzstan | 0.4% | |
| Latvia | 0.4% | |
| Georgia | 0.4% | |
| South Korea | 0.4% | |
| Bolivia | 0.4% | |
| Panama | 0.4% | |
| Honduras | 0.4% | |
| Guatemala | 0.4% | |
| Italy | 0.4% | |
| El Salvador | 0.4% |
OS Version:
| Windows 10 | 74.7% | |
| Windows 7 | 17.5% | |
| Windows 8.1 | 5.6% | |
| Windows 8 | 2.2% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x01000000 |
| Entry Address: | 0x00002d03 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 29184 | 1f013d575cbd3a91498ae06e967b964f |
| .data | 2048 | aedd1279a3b016d46b31eed4faaf3528 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for csrss.exe
