Versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
CommCmd.dll
Smart Recovery
Overview
There are 2 versions of commcmd.dll in the wild, the latest version being 1.0.0.2. commcmd.dll is run as a standard windows process in the context of the SYSTEM account with extensive privileges. The process utilizes the Windows Task Scheduler to automatically launch the file as a process when a user logs into Windows. The average file size is about 261 KB.
 Details
|
| File name: | commcmd.dll |
| Product name: | Smart Recovery |
| Typical file path: | commcmd.dll |
Behaviors
(Note, the behaviors below are for all versions of commcmd.dll, select a unique version for details.)
Scheduled tasks
- The job 'SRFilter' runs daily in the path '\Microsoft\Windows\SmartRecovery\SRFilter'
- The task 'SRCreate' runs on boot in the path '\Microsoft\Windows\SmartRecovery\SRCreate'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\Microsoft\Windows\SmartRecovery\SRCreate'
All file variations of commcmd.dll
