How to remove csrss.exe
csrss.exe
The module csrss.exe has been detected as Ransom.STOP
File Details
| Product Name: | Badabum |
| MD5: | 76ac0b2fea835cfb175ea8ab61cdd849 |
| Size: | 4 MB |
| First Published: | 2024-04-26 23:00:41 (2 years ago) |
| Latest Published: | 2024-04-26 23:00:42 (2 years ago) |
| Status: | Ransom.STOP (on last analysis) | |
| Analysis Date: | 2024-04-26 23:00:42 (2 years ago) |
Overview
| Signed By: | 522a29533d3f200e2d1728300c141021081631313626321023042b113f2d26353224 |
| Status: | Valid |
Common Places:
| %windir% |
| %windir% |
| %localappdata%\microsoft\windows\inetcache\ie |
Geography:
| 100.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000040e7 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 72192 | ce4346f96dbf929ba1de55d4ebafa0f7 |
| .rdata | 28160 | de64b4e5c8a395f2a13b0959015bf462 |
| .data | 4189184 | bcb89aa779e8ee3f965b2264ee02ad76 |
| .rsrc | 92672 | 092271c720ebc05c2fc8b9a64e471575 |
| .reloc | 5632 | 06d9df0607ff072d25846fbe964bc562 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for csrss.exe