Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

ed857 33.33%
707c5 33.33%
344b6 33.33%
(Note, YANDEX LLC publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, RegCloseKey, RegCreateKeyExW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegOpenKeyExW
kernel32.dll
LoadLibraryA, SizeofResource, LockResource, LoadResource, FindResourceW, GetUserDefaultUILanguage, GetThreadLocale, LocalFree, GetModuleHandleW, CreateEventW, SetEvent, QueueUserWorkItem, DeleteFileW, Sleep, InterlockedDecrement, InterlockedIncrement, LocalAlloc, GetCommandLineW, SetEnvironmentVariableA, CreateMutexW, SetFilePointer, CreateProcessW, WaitForSingleObject, GetTickCount, WriteFile, GetModuleFileNameW, CreateFileW, GetLastError, SetLastError, OutputDebugStringA, ReleaseMutex, CloseHandle, GetCurrentProcessId, MapViewOfFile, UnmapViewOfFile, MoveFileExW, GetCurrentProcess, CreateDirectoryW, GetFileAttributesW, ReadFile, GetTempPathW, GetCurrentDirectoryW, CreateFileMappingW, InitializeCriticalSectionAndSpinCount, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, QueryPerformanceCounter, InterlockedCompareExchange, GetSystemTimeAsFileTime, GetNativeSystemInfo, GetVersionExW, GetProcAddress, GetEnvironmentVariableW, SetEnvironmentVariableW, RaiseException, IsDebuggerPresent, GetCurrentThreadId, GetProcessTimes, OpenProcess, TerminateProcess, GetStdHandle, HeapSetInformation, DuplicateHandle, InterlockedExchangeAdd, SetEndOfFile, FlushFileBuffers, ExpandEnvironmentStringsW, GetSystemDirectoryW, GetWindowsDirectoryW, TlsGetValue, TlsSetValue, TlsAlloc, TlsFree, SetUnhandledExceptionFilter, RegisterWaitForSingleObject, UnregisterWaitEx, InterlockedExchange, ResetEvent, UnregisterWait, ConnectNamedPipe, GetOverlappedResult, DisconnectNamedPipe, InitializeCriticalSection, CreateNamedPipeW, ReadProcessMemory, LoadLibraryW, FreeLibrary, GetSystemTime, MultiByteToWideChar, WideCharToMultiByte, GetStringTypeW, EncodePointer, DecodePointer, UnhandledExceptionFilter, HeapFree, GetCPInfo, GetStartupInfoW, GetConsoleCP, GetConsoleMode, HeapAlloc, GetProcessHeap, ExitProcess, HeapReAlloc, RtlUnwind, LCMapStringW, IsProcessorFeaturePresent, HeapCreate, GetLocaleInfoW, SetHandleCount, GetFileType, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetACP, GetOEMCP, IsValidCodePage, GetTimeZoneInformation, WriteConsoleW, SetStdHandle, HeapSize, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, CreateFileA, CompareStringW
ole32.dll
CoTaskMemFree, CoCreateInstance, CoSetProxyBlanket
user32.dll
TranslateMessage, MessageBoxW, CharUpperW, PostQuitMessage, DefWindowProcW, UpdateWindow, CreateWindowExW, GetMessageW, RegisterClassExW, DispatchMessageW, PostMessageW
wininet.dll
InternetReadFile, InternetQueryDataAvailable, HttpQueryInfoW, HttpSendRequestW, InternetSetOptionW, HttpAddRequestHeadersW, HttpOpenRequestW, InternetConnectW, InternetOpenW, InternetCrackUrlW, InternetCloseHandle
winmm.dll
timeGetTime

crash_service.exe

By YANDEX LLC (Signed)

Remove crash_service.exe
MD5:   ed857891e9eb27abbe20979c6df8a18a
SHA1:   eb8abe5d15f922923b5da1b5897dcb63ba447e29
SHA256:   8f950539ea15ecba2452dd6f96d6a2877f09664bf4be782149370743a48692c9

Overview

crash_service.exe executes as a process with the local user's privileges typically within the context of its parent browser.exe (Yandex by YANDEX LLC). The file is digitally signed by YANDEX LLC which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:crash_service.exe
Typical file path:C:\Documents and Settings\user\Application data\yandex\yandexbrowser\application\25.0.1364.22076\crash_service.exe
Size:845.8 KB (866,096 bytes)
Build date:9/3/2013 8:19 PM
Certificate
Issued to:YANDEX LLC
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00078349%
0.028634%
Kernel CPU:0.00040605%
0.013761%
User CPU:0.00037744%
0.014873%
Kernel CPU time:9,375 ms/min
100,923,805ms/min
Memory
Private memory:1.03 MB
21.59 MB
Private (maximum):2.11 MB
Private (minimum):74 KB
Non-paged memory:1.03 MB
21.59 MB
Virtual memory:53.32 MB
140.96 MB
Virtual memory (peak):75.68 MB
169.69 MB
Working set:140 KB
18.61 MB
Working set (peak):3.46 MB
37.95 MB
Resource allocations
Threads:3
12
Handles:74
600
GUI GDI count:11
103
GUI USER count:5
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:crash_service.exe --max-reports=10
Owner:User
Parent process:browser.exe (Yandex by YANDEX LLC)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 33.33%
Windows 7 Professional 33.33%
Microsoft Windows XP 33.33%

Distribution by countryDistribution by country

Turkey installs about 33.33% of crash_service.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE