swc_service.exe
Summary
Sophos Web Control Service - enforces web access policies for Sophos endpoint protection.
swc_service.exe is the 705th most commonly executed Windows program in EchoTrail's dataset, observed 5,272 times across enterprise environments. It typically runs from C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control and it is most often launched by services.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control100%
Top Hashes (SHA256)
- 1e3af4f331848e2d11e678a21eecca628dd141f6b2b5dc2aaf1a93cb4b0bdbe772.57%
- 912fa7663573d044f57cda29a122393e6e7bd6b90c8cbd2642dd6c6e105d34f917.18%
- e766b6f6827eb81da36c3bbf2f0cacd0ceba0566ce4717f0b2f7f83919d830a99.94%
- c040328b0838a1dd2f5e12863611b3755681697d1ada2f0c014694762b4f8f720.19%
- e790fd9ebc48a80cd6df0466f2203f42031313b7543ac097674da42b35d40e820.12%
Process Ancestry
Top Grandparents
- wininit.exe77.39%
- services.exe22.61%
Top Parents
- services.exe78.77%
- msiexec.exe21.23%
Top Children
- net1.exe37.5%
- conhost.exe25%
- csrss.exe12.5%
- regsvr32.exe12.5%
- wininit.exe12.5%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about swc_service.exe
Rocky answers questions about swc_service.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.