How to remove csrss.exe
csrss.exe
The module csrss.exe has been detected as Ransom.Wacatac
File Details
| MD5: | a59b6178979a69c35e1d97b7bba77fb2 |
| Size: | 3 MB |
| First Published: | 2020-03-26 03:26:04 (5 years ago) |
| Latest Published: | 2021-01-02 07:16:23 (4 years ago) |
| Status: | Ransom.Wacatac (on last analysis) | |
| Analysis Date: | 2021-01-02 07:16:23 (4 years ago) |
Common Places:
| %system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
Geography:
| 33.3% | ||
| 33.3% | ||
| 33.3% |
OS Version:
| Windows 10 | 66.7% | |
| Windows 7 | 33.3% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00002c3d |
PE Sections:
| Name | Size of data | MD5 |
| .text | 3885056 | b5354fc8aaf7b6e1824803772645efd5 |
| .rdata | 17408 | d8e7831c755d6d3fc0e381d49f7c95df |
| .data | 6656 | febf8f13dce5eabcbe176accce25e7f3 |
| .rsrc | 37376 | 236192463f45aea6c46252b5e8585173 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for csrss.exe
