Should I block it?

No, this file is 100% safe to run.

Additional versions

6.2.9200.16384 (win8_rtm.120725-1247)	2.58%
6.2.9200.16384 (win8_rtm.120725-1247)	13.73%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.07%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.07%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.02%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.07%
6.1.7600.16385 (win7_rtm.090713-1255)	23.81%
6.1.7600.16385 (win7_rtm.090713-1255)	42.28%
6.0.6000.16386 (vista_rtm.061101-2205)	6.91%
6.0.6000.16386 (vista_rtm.061101-2205)	1.38%
6.0.6000.16386 (vista_rtm.061101-2205)	0.39%
5.2.3790.1830 (srv03_sp1_rtm.050324-1447)	0.05%
5.1.2600.5512 (xpsp.080413-2111)	5.37%
5.1.2600.5512 (xpsp.080413-2111)	0.41%
5.1.2600.5512 (xpsp.080413-2111)	0.30%
5.1.2600.5512 (xpsp.080413-2111)	0.05%
5.1.2600.5512 (xpsp.080413-2111)	0.28%
5.1.2600.5512 (xpsp.080413-2111)	0.02%
5.1.2600.5512 (xpsp.080413-2111)	0.02%
5.1.2600.5512 (xpsp.080413-2111)	0.18%
5.1.2600.5512 (xpsp.080413-2111)	0.05%
5.1.2600.5512 (xpsp.080413-2111)	0.02%
5.1.2600.5512 (xpsp.080413-2111)	0.09%
5.1.2600.5512 (xpsp.080413-2111)	0.14%
5.1.2600.5512 (xpsp.080413-2111)	0.14%
View more
5.1.2600.5512 (xpsp.080413-2111)	0.05%
5.1.2600.5512 (xpsp.080413-2111)	0.02%
5.1.2600.5512 (xpsp.080413-2111)	0.02%
5.1.2600.5512 (xpsp.080413-2111)	0.02%
5.1.2600.3311 (xpsp.080212-0005)	0.05%
5.1.2600.3300 (xpsp.080125-2028)	0.02%
5.1.2600.3244 (xpsp.071030-1537)	0.02%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	1.17%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.05%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.02%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.02%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.02%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.02%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.02%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.02%

Relationships

Parent processes

Child processes

conhost.exe (Console Window Host by Microsoft)

csrss.exe

Client Server Runtime Process by Microsoft

Remove csrss.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	60c2862b4bf0fd9f582ef344c2b1ec72
SHA1:	17542707a3d9fa13c569450fd978272ef7070a77
SHA256:	cb1c6018fc5c15483ac5bb96e5c2e2e115bb0c0e1314837d77201bab37e8c03a

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is csrss.exe?

Client/Server Runtime Subsystem, or csrss.exe, is a component of the Microsoft Windows NT operating system that provides the user mode side of the Win32 subsystem and is included in Windows 2000, XP, 2003, Vista, Server 2008 and 7. Because most of the Win32 subsystem operations have been moved to kernel mode drivers, in Windows NT 4 and later CSRSS is mainly responsible for Win32 console handling and GUI shutdown.

About csrss.exe (from Microsoft)

“CSRSS runs as a user-mode system service. When a user-mode process calls a function involving console windows, process/thread creation, or Side-by-Side support, instead of issuing a system call, the W”

Details

File name:	csrss.exe
Publisher:	Microsoft Corporation
Product name:	Client Server Runtime Process
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\csrss.exe
Original name:	CSRSS.Exe.MUI
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	7.5 KB (7,680 bytes)
Digital DNA
Entropy:	4.291245
File packed:	No
.NET CLR:	No

More details

Behaviors

Scheduled task

Entry path '\{1B908455-E233-4AF6-9EA8-FB47FE9E21E2}'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00342963%	0.028634%
Kernel CPU:	0.00229725%	0.013761%
User CPU:	0.00113238%	0.014873%
Kernel CPU time:	66,363,242 ms/min	100,923,805ms/min
CPU cycles:	3,509,474/sec	17,470,203/sec
Context switches:	148/sec	284/sec
Memory
Private memory:	4.58 MB	21.59 MB
Private (maximum):	17.63 MB
Private (minimum):	6.33 MB
Non-paged memory:	4.58 MB	21.59 MB
Virtual memory:	117.28 MB	140.96 MB
Virtual memory (peak):	161.78 MB	169.69 MB
Working set:	12.09 MB	18.61 MB
Working set (peak):	21.88 MB	37.95 MB
Page faults:	193,690/min	2,039/min
I/O
I/O read transfer:	8.74 KB/sec	1.02 MB/min
I/O read operations:	317/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	2.37 KB/sec	448.09 KB/min
I/O other operations:	167/sec	1,671/min
Resource allocations
Threads:	11	12
Handles:	748	600
GUI GDI count:	155	103
GUI GDI peak:	220	142
GUI USER count:	76	49
GUI USER peak:	84	71

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	%systemroot%\system32\csrss.exe objectdirectory=\windows sharedsection=1024,20480,768 windows=on subsystemtype=windows serverdll=basesrv,1 serverdll=winsrC:userserverdllinitialization,3 serverdll=winsrC:conserverdllinitialization,2 serverdll=sxssrv,4 profilecontrol=off maxrequestthreads=16
Owner:	SYSTEM
Parent processes:	svchost.exe (Host Process for Windows Services by Microsoft Corporation) itype.exe (Microsoft Mouse and Keyboard Center by Microsoft Corporation) stacsv64.exe (IDT PC Audio by IDT) syntphelper.exe (Synaptics Pointing Device Driver by Synaptics Incorporated)

Threads

Averages

RPCRT4.dll
Total CPU:	0.20056877%	0.272967%
Kernel CPU:	0.20056877%	0.107585%
User CPU:	0.00000000%	0.165382%
CPU cycles:	7,302,769/sec	5,741,424/sec
Context switches:	18/sec	79/sec
Memory:	1.18 MB	1.16 MB
sechost.dll
Total CPU:	0.19404306%
Kernel CPU:	0.19404306%
User CPU:	0.00000000%
CPU cycles:	5,933,631/sec
Context switches:	11/sec
Memory:	124 KB
LPK.dll
Total CPU:	0.09949722%
Kernel CPU:	0.09949722%
User CPU:	0.00000000%
CPU cycles:	3,606,671/sec
Context switches:	11/sec
Memory:	56 KB
USP10.dll
Total CPU:	0.08828659%
Kernel CPU:	0.08828659%
User CPU:	0.00000000%
CPU cycles:	3,718,602/sec
Context switches:	18/sec
Memory:	804 KB
msvcrt.dll (Windows NT CRT DLL by Microsoft)
Total CPU:	0.08206317%
Kernel CPU:	0.08206317%
User CPU:	0.00000000%
CPU cycles:	4,310,392/sec
Context switches:	37/sec
Memory:	636 KB
ADVAPI32.dll
Total CPU:	0.07818544%
Kernel CPU:	0.07818544%
User CPU:	0.00000000%
CPU cycles:	2,731,818/sec
Context switches:	10/sec
Memory:	876 KB
GDI32.dll
Total CPU:	0.04202145%
Kernel CPU:	0.04202145%
User CPU:	0.00000000%
CPU cycles:	2,838,754/sec
Context switches:	12/sec
Memory:	412 KB
winsrv.DLL
Total CPU:	0.03958970%
Kernel CPU:	0.03958969%
User CPU:	0.00000001%
CPU cycles:	2,353,713/sec
Context switches:	54/sec
Memory:	224 KB
CSRSRV.dll
Total CPU:	0.00931142%
Kernel CPU:	0.00570754%
User CPU:	0.00360388%
CPU cycles:	265,477/sec
Memory:	76 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

msvcrt.dll (Windows NT CRT DLL by Microsoft)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	58.00%
Windows 7 Ultimate	23.00%
Windows 7 Professional	12.00%
Windows 7 Home Basic	5.00%
Windows Seven Black Edition	1.00%
Windows Vista Home Premium	1.00%

Distribution by country

United States installs about 49.49% of Client Server Runtime Process.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	26.56%
Hewlett-Packard	19.14%
Acer	15.23%
ASUS	14.06%
Toshiba	12.50%
Sony	6.25%
Alienware	1.56%
Samsung	1.56%
GIGABYTE	1.56%
Lenovo	1.56%

Remove Adware and Spyware Programs, FREE Download!