swi_fc.exe
Summary
Sophos Web Intelligence File Cache - caches file reputation data for Sophos web protection.
swi_fc.exe is the 771st most commonly executed Windows program in EchoTrail's dataset, observed 4,264 times across enterprise environments. It typically runs from C:\Program Files (x86)\Common Files\Sophos\Web Intelligence and it is most often launched by swi_filter.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Common Files\Sophos\Web Intelligence100%
Top Hashes (SHA256)
- 2c5c4a5a08d47763331d754b87c7544f8f7c7ce1706b9644064cf113493393a471.97%
- 1a76c26742120fc85ffe2fd9822fbf8eadd7a1e28d2b2533fc1f2e89e1d4ab7a14.74%
- a480d88345c772890dbf271d1092f35c245032921e3769fe1b54fdf2c0f3db4c9.74%
- 0bca8e386e277c9a7c47e61841519f2eee877f45ae5963e7c0a8ced3359b843b2.75%
- 1f1ae9549ee1e4ff3f5b49464321af16760089ad75acb4be0eb687ec199d35ca0.77%
- 91abbeaf72810c9d6ada260d6e864d4da2982f7ff7e623fa6945dcf8d0196cde0.02%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- swi_filter.exe100%
Top Children
- conhost.exe80%
- net1.exe20%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about swi_fc.exe
Rocky answers questions about swi_fc.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.