bomgar-scc.exe
by BeyondTrust
Remote Access
Summary
BeyondTrust (Bomgar) Support Customer Client - end-user client for receiving remote support.
bomgar-scc.exe is the 664th most commonly executed Windows program in EchoTrail's dataset, observed 6,263 times across enterprise environments. It typically runs from C:\ProgramData\... and it is most often launched by bomgar-scc.exe.
664th
most commonly executed Windows program
6,263
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\ProgramData\...94.11%
- C:\Users\...5.46%
- C:\Windows\Temp\...0.43%
Top Hashes (SHA256)
- fb42a030d2a08b2ea17cd74801d7889376fa7827171e8dc8a6843c1f9a75a4ab61.23%
- 4aecea823e5b8d3d4e1ed430404ba965691d20d2deff11513a2775e1158ea03529.02%
- fdf36f27deb5afee62bfd5cab5097993b0b7391c373a20cdd239288181ebdddb3.84%
- 16139a4fd2f3310c8845a86af4552715f43e21332f2ad9d538216679c96b36022.93%
- 283e70bb78678513f16c0f39533a58340824afc1f8fbc93d12d1b790525814e40.42%
- 20821370579fa2cc8b0e33c12cbcf5fa3d5e92de68176ac511ee70e1e758b6390.4%
- 7159f4291ac5a837dd5375066849c7790aefa252e831f907c442b7df1fa18d620.4%
- 20e2433e644d93d2ee27b7984a30a927e76c9acd7bee6492c588ae85118f05ef0.35%
- a191584ec54d8c737a6ed7d2be1d7b29e93dfae8d13f25a65df47b53aed2da750.34%
- f75980f889252e40557a375e3f6844bb245999a72b0e1348ea20c79f8d6e2f5a0.27%
Process Ancestry
Top Grandparents
- bomgar-scc.exe45.26%
- services.exe24.54%
- wininit.exe16.58%
- chrome.exe4.05%
- userinit.exe0.83%
- explorer.exe0.62%
- browser_broker.exe0.37%
- firefox.exe0.3%
- iexplore.exe0.09%
Top Parents
- bomgar-scc.exe74.02%
- services.exe19.16%
- explorer.exe0.81%
- svchost.exe0.08%
Top Children
- bomgar-scc.exe58.4%
- mmc.exe12.47%
- regedit.exe12.41%
- rstrui.exe11.35%
- chrome.exe0.47%
- iexplore.exe0.13%
- WerFault.exe0.11%
- firefox.exe0.06%
- bcdedit.exe0.05%
- ctfmon.exe0.03%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about bomgar-scc.exe
Rocky answers questions about bomgar-scc.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.