What does the csrss.exe process do?

What is the purpose of csrss.exe (Runtime Server Client / Server Subsystem) on Windows?

Can someone give a good explanation or a pointer to the documentation? Unfortunately, Google’s results are quite noisy when searching for the main Windows process.

The reason I ask is because I got the BSOD from my service application, which seems to be related to the csrss.exe process, at least this shows a memory dump analysis:

PROCESS_OBJECT: 85eeeb70

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0
MODULE_NAME: csrss
FAULTING_MODULE: 00000000 
PROCESS_NAME:  PreviewService.
BUGCHECK_STR:  0xF4_PreviewService.
DEFAULT_BUCKET_ID:  DRIVER_FAULT
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 80998221 to 80876b40

STACK_TEXT:  
f5175d00 80998221 000000f4 00000003 85eeeb70 nt!KeBugCheckEx+0x1b
f5175d24 8095b1be 8095b1fa 85eeeb70 85eeecd4 nt!PspCatchCriticalBreak+0x75
f5175d54 8082350b 00000494 ffffffff 051bf114 nt!NtTerminateProcess+0x7a
f5175d54 7c8285ec 00000494 ffffffff 051bf114 nt!KiFastCallEntry+0xf8
051bf114 00000000 00000000 00000000 00000000 ntdll!KiFastSystemCallRet

STACK_COMMAND:  kb
FOLLOWUP_NAME:  MachineOwner
FAILURE_BUCKET_ID:  0xF4_PreviewService._IMAGE_csrss.exe
BUCKET_ID:  0xF4_PreviewService._IMAGE_csrss.exe

Followup: MachineOwner

EDIT: Thanks for the good answers, but I really don't need help regarding my service, I just would like to get a basic idea of ​​what the purpose of this service is.

+5
source share
3

CSRSS Win32. , - , . , , - csrss - .

Windows Internals - . Wikipedia CSRSS.

+5

csrss - Win32 - win32.sys . , , - , .

+1

- , cmd.exe. , jdeBP:

Windows, ?

It seems that when a console application process is created without passing descriptors to stdin, stdout and stderr, then some interprocess comms request csrss to create a console window in a new thread and pass its input / output handles to the console process.

0
source

All Articles