WSCClient.exe
by Microsoft/Unknown
Endpoint Management
Summary
Windows Server Configuration Client - management agent for remote server configuration and compliance.
WSCClient.exe is the 207th most commonly executed Windows program in EchoTrail's dataset, observed 69,107 times across enterprise environments. It typically runs from C:\... and it is most often launched by SAVAdminService.exe.
207th
most commonly executed Windows program
69,107
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\...96.88%
- C:\Program Files (x86)\Sophos\Sophos Anti-Virus3.12%
Top Hashes (SHA256)
- 28fe0f6779a33c12e9b6f0ed7f4894f767ef3f2678c4f01315704bad40056f8240.73%
- 81679d0482f4924929318ff934178ea2312c0e6bcf0e39ee0b7dc700094b6b7e23.06%
- eeb6486aefd7a8cdf290e456f850b8515fba8f4b1a89d330e61190e39bb79ec711.08%
- 0921d13bcf724ce53d54e8f5ae5149086d508a7f89c6f2ba949abaa88a4438b68.83%
- ae588d4f7b98be0cb6ef9038a3a11647e7263a154a9a0d39af0d43ad441206547%
- a11662ad2c2ef577cc08a2ab2d2f441c9f059c729999845856dcdfafe860f75c5.78%
- a48be620cefa301b7dff2289c20d7c24facd1ef97737fa08934e7f57046f0c4c2.04%
- 394b49d088c6cc5fcc2c84417467b3df957afce444c9a00c0f5d5e74ca3392c11.17%
- bbb74e7d371d67984c7021cecd14be620f56f36699841aaae7b9305c45d8b7f20.17%
- 2a517796caf867ecf8d1dd82bd3121507affd84208a6694e134bed3edfabeb740.11%
Process Ancestry
Top Grandparents
- services.exe98.99%
- msiexec.exe0.98%
- userinit.exe0.04%
Top Parents
- SAVAdminService.exe97.79%
- msiexec.exe0.84%
- explorer.exe0.03%
Top Children
- WerFault.exe83.33%
- iissetup.exe3.33%
- SophosUI.exe3.33%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about WSCClient.exe
Rocky answers questions about WSCClient.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.