How to remove csrss.exe
csrss.exe
The module csrss.exe has been detected as Risk.CoinMiner

File Details
Product Name: | Процесс исполнения клиент-сервер |
Company Name: | Процесс исполнения клиент-сервер |
MD5: | d2b6ee99a59d1688a0bd54696a4dffdd |
Size: | 342 KB |
First Published: | 2017-05-29 16:04:25 (8 years ago) |
Latest Published: | 2022-05-05 23:50:58 (3 years ago) |
Status: | Risk.CoinMiner (on last analysis) | |
Analysis Date: | 2022-05-05 23:50:58 (3 years ago) |
Common Places:
%windir%\microsoftu |
%windir% |
%windir% |
%windir% |
Geography:
37.5% | ||
15.0% | ||
10.0% | ||
7.5% | ||
7.5% | ||
5.0% | ||
5.0% | ||
2.5% | ||
2.5% | ||
2.5% | ||
2.5% | ||
2.5% |
OS Version:
Windows 10 | 50.0% | |
Windows 7 | 47.5% | |
Windows 8.1 | 2.5% |
Analysis
Subsystem: | Windows CUI |
PE Type: | pe |
OS Bitness: | 64 |
Image Base: | 0x0000000140000000 |
Entry Address: | 0x0001e864 |
PE Sections:
Name | Size of data | MD5 |
.text | 163328 | 76ad6c7e6cd9ab781c1ffbb55251e974 |
.rdata | 37888 | 117e0746f5e9fb0da9b603108b608615 |
.data | 8704 | 669c0f7bd1cd965c9f968a44bdf8c74a |
.pdata | 8704 | 4ca2c0790951ce6b947d2b887219ac86 |
.rsrc | 130560 | ab21979f423c2b196ffafab27db4cdff |
More information:
Download GridinSoft
Anti-Malware - Removal tool for csrss.exe
