csrss.exe
Client Server Runtime Process by Microsoft
| Version: | 6.2.8250.0 (winmain_win8beta.120217-1520) |
| MD5: | ab53085cc1fa4b9bcde56e3fc67bfd3d |
| SHA1: | f284eee59cc28201aba33dd1dbc3c3a4e8d84a9b |
| SHA256: | 5e37fef9ecf50a815d76e3920cbc24ef2804fc0593b26f1712c5d1aa6a74827e |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is csrss.exe?
Client/Server Runtime Subsystem, or csrss.exe, is a component of the Microsoft Windows NT operating system that provides the user mode side of the Win32 subsystem and is included in Windows 2000, XP, 2003, Vista, Server 2008 and 7. Because most of the Win32 subsystem operations have been moved to kernel mode drivers, in Windows NT 4 and later CSRSS is mainly responsible for Win32 console handling and GUI shutdown.
About csrss.exe (from Microsoft)
“CSRSS runs as a user-mode system service. When a user-mode process calls a function involving console windows, process/thread creation, or Side-by-Side support, instead of issuing a system call, the W”
Details
| File name: | csrss.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Client Server Runtime Process |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\csrss.exe |
| Original name: | CSRSS.Exe.MUI |
| File version: | 6.2.8250.0 (winmain_win8beta.120217-1520) |
| Product version: | 6.2.8250.0 |
| Size: | 6 KB (6,144 bytes) |
| Digital DNA |
| Entropy: | 4.291245 |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Scheduled task
- Entry path '\{1B908455-E233-4AF6-9EA8-FB47FE9E21E2}'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00870161% | |
| Kernel CPU: | 0.00817445% | |
| User CPU: | 0.00052717% | |
| Kernel CPU time: | 2,605 ms/min | |
| Context switches: | 258/sec | |
| Memory |
| Private memory: | 1.7 MB | |
| Private (maximum): | 12.39 MB | |
| Private (minimum): | 3.9 MB | |
| Non-paged memory: | 1.7 MB | |
| Virtual memory: | 109.25 MB | |
| Virtual memory (peak): | 111.37 MB | |
| Working set: | 12.63 MB | |
| Working set (peak): | 12.75 MB | |
| Resource allocations |
| Threads: | 10 | |
| Handles: | 209 | |
| GUI GDI count: | 174 | |
| GUI GDI peak: | 228 | |
| GUI USER count: | 83 | |
| GUI USER peak: | 84 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | %systemroot%\system32\csrss.exe objectdirectory=\windows sharedsection=1024,12288,512 windows=on subsystemtype=windows serverdll=basesrv,1 serverdll=winsrC:userserverdllinitialization,3 serverdll=sxssrv,4 profilecontrol=off maxrequestthreads=16 |
| Owner: | SYSTEM |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.05389547% | |
| Kernel CPU: | 0.05389547% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 2,450,770/sec | |
| Context switches: | 53/sec | |
| Memory: | 1.41 MB | |
| winsrv.DLL |
| Total CPU: | 0.02489801% | |
| Kernel CPU: | 0.02489801% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,597,743/sec | |
| Context switches: | 68/sec | |
| Memory: | 208 KB | |
| CSRSRV.dll |
| Total CPU: | 0.00113293% | |
| Kernel CPU: | 0.00077872% | |
| User CPU: | 0.00035421% | |
| CPU cycles: | 47,634/sec | |
| Memory: | 52 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
58.00% |
|
| Windows 7 Ultimate |
23.00% |
|
| Windows 7 Professional |
12.00% |
|
| Windows 7 Home Basic |
5.00% |
|
| Windows Seven Black Edition |
1.00% |
|
| Windows Vista Home Premium |
1.00% |
|
Distribution by country
United States installs about 49.49% of Client Server Runtime Process.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
26.56% |
|
| Hewlett-Packard |
19.14% |
|
| Acer |
15.23% |
|
| ASUS |
14.06% |
|
| Toshiba |
12.50% |
|
| Sony |
6.25% |
|
| Alienware |
1.56% |
|
| Samsung |
1.56% |
|
| GIGABYTE |
1.56% |
|
| Lenovo |
1.56% |
|
