SrTasks.exe
by Microsoft
Operating System
Summary
System Restore Tasks - manages system restore point creation and cleanup operations.
SrTasks.exe is the 352nd most commonly executed Windows program in EchoTrail's dataset, observed 24,589 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.
352nd
most commonly executed Windows program
24,589
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- ceea34a606889474a5bad3dfb3968a6cf596537bd54ef89d1e79688b82545e1725.96%
- 40e27a9039a2e4a731ea6a74291840fb13c679a1e8ae5b523016aa15727d8a5823.49%
- 5220213df237abe0f29919db9c9496c8c56dd6d2904b875fa4e715e5e9c0319210.71%
- dd8b82abb81377966076a4c53f54fdb1aed85be2370aede7589b8116204055e09.59%
- 3cb58f649a9686b33f4b14765c9c2adf9c2c9aabb4dd3b52fc5f21f90edc8b158.09%
- e4ebf27d30ab062b6f5c59b948aba51468aa6cd3f117651cc788253ab35afacd7.49%
- 2b6b1315f4ff6955281353024f427486f58430f2129a98fa7375c12a580bbd7f5.16%
- 0650a9d4124a6af2def8afcc2252bb8a6068f02b1dab477c7513954b1490bc064.34%
- d3ba4fbae89219370ef44a08fc1d56d0f9e1642794ad95e794b16594ecc38b701.81%
- fd7c13c7a09b5c12af6b57daf224c801475c9d8971af59515d2e9b2cc5e01dd51.25%
Process Ancestry
Top Grandparents
- services.exe93.98%
- svchost.exe5.97%
- explorer.exe0.04%
- dllhost.exe0.01%
Top Parents
- svchost.exe91.33%
- dllhost.exe3.26%
- msiexec.exe2.95%
- TiWorker.exe2.36%
- lpksetup.exe0.06%
- setup.exe0.01%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about SrTasks.exe
Rocky answers questions about SrTasks.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.