Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.2.9200.16384 (win8_rtm.120725-1247) 2.58%
6.2.9200.16384 (win8_rtm.120725-1247) 13.73%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.07%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.07%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.02%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.07%
6.1.7600.16385 (win7_rtm.090713-1255) 23.81%
6.1.7600.16385 (win7_rtm.090713-1255) 42.28%
6.0.6000.16386 (vista_rtm.061101-2205) 6.91%
6.0.6000.16386 (vista_rtm.061101-2205) 1.38%
6.0.6000.16386 (vista_rtm.061101-2205) 0.39%
5.2.3790.1830 (srv03_sp1_rtm.050324-1447) 0.05%
5.1.2600.5512 (xpsp.080413-2111) 5.37%
5.1.2600.5512 (xpsp.080413-2111) 0.41%
5.1.2600.5512 (xpsp.080413-2111) 0.30%
5.1.2600.5512 (xpsp.080413-2111) 0.05%
5.1.2600.5512 (xpsp.080413-2111) 0.28%
5.1.2600.5512 (xpsp.080413-2111) 0.02%
5.1.2600.5512 (xpsp.080413-2111) 0.02%
5.1.2600.5512 (xpsp.080413-2111) 0.18%
5.1.2600.5512 (xpsp.080413-2111) 0.05%
5.1.2600.5512 (xpsp.080413-2111) 0.02%
5.1.2600.5512 (xpsp.080413-2111) 0.09%
5.1.2600.5512 (xpsp.080413-2111) 0.14%
5.1.2600.5512 (xpsp.080413-2111) 0.14%
View more

Relationships

Parent processes
Child processes

PE structurePE file structure
Show functions
Import table
csrsrv.dll
CsrUnhandledExceptionFilter, CsrServerInitialization
ntdll.dll
RtlSetHeapInformation, RtlSetProcessIsCritical, NtTerminateThread, NtSetInformationProcess, RtlSetUnhandledExceptionFilter, NtTerminateProcess, RtlFreeAnsiString, RtlAllocateHeap, isspace, RtlUnicodeStringToAnsiString, RtlNormalizeProcessParams, DbgBreakPoint, RtlUnhandledExceptionFilter, RtlUnwind, _aullshr

csrss.exe

Client Server Runtime Process by Microsoft

Remove csrss.exe
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   342271f6142e7c70805b8a81e1ba5f5c
SHA1:   53bc9b2ae89fcad6197ec519ae588f926c88e460
SHA256:   f9112b88fec5ef10a7aedf88dcee61956d1fcde7cb42197216e8265578713786
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is csrss.exe?

Client/Server Runtime Subsystem, or csrss.exe, is a component of the Microsoft Windows NT operating system that provides the user mode side of the Win32 subsystem and is included in Windows 2000, XP, 2003, Vista, Server 2008 and 7. Because most of the Win32 subsystem operations have been moved to kernel mode drivers, in Windows NT 4 and later CSRSS is mainly responsible for Win32 console handling and GUI shutdown.

About csrss.exe (from Microsoft)

“CSRSS runs as a user-mode system service. When a user-mode process calls a function involving console windows, process/thread creation, or Side-by-Side support, instead of issuing a system call, the W”

DetailsDetails

File name:csrss.exe
Publisher:Microsoft Corporation
Product name:Client Server Runtime Process
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\csrss.exe
Original name:CSRSS.Exe.MUI
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:6 KB (6,144 bytes)
Digital DNA
Entropy:4.291245
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Scheduled task
  • Entry path '\{1B908455-E233-4AF6-9EA8-FB47FE9E21E2}'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01111741%
0.028634%
Kernel CPU:0.00751908%
0.013761%
User CPU:0.00359833%
0.014873%
Kernel CPU time:65,888,984 ms/min
100,923,805ms/min
CPU cycles:3,033,609/sec
17,470,203/sec
Context switches:129/sec
284/sec
Memory
Private memory:3.74 MB
21.59 MB
Private (maximum):11.16 MB
Private (minimum):4.24 MB
Non-paged memory:3.74 MB
21.59 MB
Virtual memory:89.39 MB
140.96 MB
Virtual memory (peak):141.34 MB
169.69 MB
Working set:7.31 MB
18.61 MB
Working set (peak):15.24 MB
37.95 MB
Page faults:95,934/min
2,039/min
I/O
I/O read transfer:9.83 KB/sec
1.02 MB/min
I/O read operations:323/sec
343/min
I/O other transfer:361 Bytes/sec
448.09 KB/min
I/O other operations:21/sec
1,671/min
Resource allocations
Threads:11
12
Handles:656
600
GUI GDI count:174
103
GUI GDI peak:236
142
GUI USER count:83
49
GUI USER peak:90
71

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command lines:
  • %systemroot%\system32\csrss.exe objectdirectory=\windows sharedsection=1024,12288,512 windows=on subsystemtype=windows serverdll=basesrv,1 serverdll=winsrC:userserverdllinitialization,3 serverdll=winsrC:conserverdllinitialization,2 serverdll=sxssrv,4 profilecontrol=off maxrequestthreads=16
Owner:SYSTEM
Parent processes:

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:6.88113089%
0.272967%
Kernel CPU:6.88113089%
0.107585%
User CPU:0.00000000%
0.165382%
CPU cycles:210,149,830/sec
5,741,424/sec
Memory:1.24 MB
1.16 MB
kernel32.dll
Total CPU:0.73957067%
Kernel CPU:0.73957067%
User CPU:0.00000000%
CPU cycles:17,647,376/sec
Context switches:23/sec
Memory:848 KB
ADVAPI32.dll
Total CPU:0.46094808%
Kernel CPU:0.46094808%
User CPU:0.00000000%
CPU cycles:11,472,831/sec
Context switches:24/sec
Memory:640 KB
LPK.dll
Total CPU:0.13591083%
Kernel CPU:0.13591083%
User CPU:0.00000000%
CPU cycles:4,996,505/sec
Context switches:12/sec
Memory:40 KB
USP10.dll
Total CPU:0.09552189%
Kernel CPU:0.09552189%
User CPU:0.00000000%
CPU cycles:3,765,734/sec
Context switches:14/sec
Memory:628 KB
sechost.dll
Total CPU:0.08451359%
Kernel CPU:0.08451359%
User CPU:0.00000000%
CPU cycles:3,945,815/sec
Context switches:8/sec
Memory:100 KB
USER32.dll
Total CPU:0.08087163%
Kernel CPU:0.08087163%
User CPU:0.00000000%
CPU cycles:3,800,549/sec
Context switches:6/sec
Memory:804 KB
winsrv.DLL
Total CPU:0.07102479%
Kernel CPU:0.07102479%
User CPU:0.00000000%
CPU cycles:3,936,202/sec
Context switches:82/sec
Memory:176 KB
msvcrt.dll
Total CPU:0.05970307%
Kernel CPU:0.05970307%
User CPU:0.00000000%
CPU cycles:2,785,801/sec
Context switches:7/sec
Memory:688 KB
GDI32.dll
Total CPU:0.05059654%
Kernel CPU:0.05059654%
User CPU:0.00000000%
CPU cycles:2,293,666/sec
Context switches:11/sec
Memory:312 KB
RPCRT4.dll
Total CPU:0.04732139%
Kernel CPU:0.04732139%
User CPU:0.00000000%
CPU cycles:2,398,939/sec
Context switches:8/sec
Memory:644 KB
CSRSRV.dll
Total CPU:0.01593108%
Kernel CPU:0.01189701%
User CPU:0.00403407%
CPU cycles:326,184/sec
Context switches:2/sec
Memory:52 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 58.00%
Windows 7 Ultimate 23.00%
Windows 7 Professional 12.00%
Windows 7 Home Basic 5.00%
Windows Seven Black Edition 1.00%
Windows Vista Home Premium 1.00%

Distribution by countryDistribution by country

United States installs about 49.49% of Client Server Runtime Process.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 26.56%
Hewlett-Packard 19.14%
Acer 15.23%
ASUS 14.06%
Toshiba 12.50%
Sony 6.25%
Alienware 1.56%
Samsung 1.56%
GIGABYTE 1.56%
Lenovo 1.56%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE