sedsvc.exe

by Microsoft
Operating System

Summary

Windows Setup Experience Deployment Service - deploys setup experience packages during Windows servicing.

sedsvc.exe is the 1321st most commonly executed Windows program in EchoTrail's dataset, observed 1,004 times across enterprise environments. It typically runs from C:\Program Files\rempl and it is most often launched by services.exe.

1321st
most commonly executed Windows program
1,004
observed executions
low
statistical confidence

Behavior

Top Paths

  • C:\Program Files\rempl99.9%
  • C:\Program Files (x86)\rempl0.1%

Top Hashes (SHA256)

  • 87bf0d854062d496086932360679edca5dd1395cd79035d241c995d0d798b9ad18.63%
  • e9c4b30023c918c33da88b463dff59ab00bf6d3da7bb9fc2f65a26d9898f659911.33%
  • 1b9965adf9ed093bc2fdddb256ac48bcdd892c8f8791a021efef2d47d6510bdb10.13%
  • b4300129f80fa484bb83181f1b970143d167da528849bbc0fd02ef0f0e103cd79.69%
  • 3443f4c6c18d5cc9f9fe2df8da1d5aa2b022d89b94eb55201fe8ff33db33721e7.15%
  • 7000cd227d094d2e058f12b105754945e9ce6f7a74ed2475fc88e4f5ebae42956.41%
  • 1bc49171277e8540e3affbad12e88c9999ad3e3b37b0ac46a578fd1b07f676c46.11%
  • 5a3ec9b0cbdccb4560bd5f942095522ccaf07e6624cabd36ebf393d488de53464.92%
  • f7101878e992fdba22f313adf7e3c3ff053f9b80721b530e858155cfea23481e4.92%
  • fd06a61f66ba11e068e7b638c0b94c080e3bce3ad196f425eba116f6d27a64964.32%

Process Ancestry

Top Grandparents

Top Parents

Top Children

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about sedsvc.exe

Rocky answers questions about sedsvc.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.