swc_service.exe
Sources: 300M+ executions observed in the wild.
Summary
Sophos Web Control Service - enforces web access policies for Sophos endpoint protection.
swc_service.exe is the 705th most commonly executed Windows program in EchoTrail's dataset, observed 5,272 times across enterprise environments. It typically runs from C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control and it is most often launched by services.exe.
Get this in your tools
The same record for swc_service.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/swc_service.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
Behavior
Top Paths
- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control100%
Top Hashes (SHA256)
- 1e3af4f331848e2d11e678a21eecca628dd141f6b2b5dc2aaf1a93cb4b0bdbe772.57%
- 912fa7663573d044f57cda29a122393e6e7bd6b90c8cbd2642dd6c6e105d34f917.18%
- e766b6f6827eb81da36c3bbf2f0cacd0ceba0566ce4717f0b2f7f83919d830a99.94%
- c040328b0838a1dd2f5e12863611b3755681697d1ada2f0c014694762b4f8f720.19%
- e790fd9ebc48a80cd6df0466f2203f42031313b7543ac097674da42b35d40e820.12%
Process Ancestry
Top Grandparents
- wininit.exe77.39%
- services.exe22.61%
Top Parents
- services.exe78.77%
- msiexec.exe21.23%
Top Children
- net1.exe37.5%
- conhost.exe25%
- csrss.exe12.5%
- regsvr32.exe12.5%
- wininit.exe12.5%
Ask Rocky about swc_service.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for swc_service.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.