swi_fc.exe

by Sophos

Endpoint Security

Sources: 300M+ executions observed in the wild.

Summary

Sophos Web Intelligence File Cache - caches file reputation data for Sophos web protection.

swi_fc.exe is the 771st most commonly executed Windows program in EchoTrail's dataset, observed 4,264 times across enterprise environments. It typically runs from C:\Program Files (x86)\Common Files\Sophos\Web Intelligence and it is most often launched by swi_filter.exe.

Get this in your tools

The same record for swi_fc.exe, by REST or as an MCP tool. Free key, no card.

Get a free key

curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/swi_fc.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

771st

most commonly executed Windows program

4,264

observed endpoint executions

Behavior

Top Paths

C:\Program Files (x86)\Common Files\Sophos\Web Intelligence100%

Top Hashes (SHA256)

2c5c4a5a08d47763331d754b87c7544f8f7c7ce1706b9644064cf113493393a471.97%
1a76c26742120fc85ffe2fd9822fbf8eadd7a1e28d2b2533fc1f2e89e1d4ab7a14.74%
a480d88345c772890dbf271d1092f35c245032921e3769fe1b54fdf2c0f3db4c9.74%
0bca8e386e277c9a7c47e61841519f2eee877f45ae5963e7c0a8ced3359b843b2.75%
1f1ae9549ee1e4ff3f5b49464321af16760089ad75acb4be0eb687ec199d35ca0.77%
91abbeaf72810c9d6ada260d6e864d4da2982f7ff7e623fa6945dcf8d0196cde0.02%

Process Ancestry

Ask Rocky about swi_fc.exe

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for swi_fc.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.