WSCClient.exe
Sources: 300M+ executions observed in the wild.
Summary
Windows Server Configuration Client - management agent for remote server configuration and compliance.
WSCClient.exe is the 207th most commonly executed Windows program in EchoTrail's dataset, observed 69,107 times across enterprise environments. It typically runs from C:\... and it is most often launched by SAVAdminService.exe.
Get this in your tools
The same record for wscclient.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/wscclient.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
Behavior
Top Paths
- C:\...96.88%
- C:\Program Files (x86)\Sophos\Sophos Anti-Virus3.12%
Top Hashes (SHA256)
- 28fe0f6779a33c12e9b6f0ed7f4894f767ef3f2678c4f01315704bad40056f8240.73%
- 81679d0482f4924929318ff934178ea2312c0e6bcf0e39ee0b7dc700094b6b7e23.06%
- eeb6486aefd7a8cdf290e456f850b8515fba8f4b1a89d330e61190e39bb79ec711.08%
- 0921d13bcf724ce53d54e8f5ae5149086d508a7f89c6f2ba949abaa88a4438b68.83%
- ae588d4f7b98be0cb6ef9038a3a11647e7263a154a9a0d39af0d43ad441206547%
- a11662ad2c2ef577cc08a2ab2d2f441c9f059c729999845856dcdfafe860f75c5.78%
- a48be620cefa301b7dff2289c20d7c24facd1ef97737fa08934e7f57046f0c4c2.04%
- 394b49d088c6cc5fcc2c84417467b3df957afce444c9a00c0f5d5e74ca3392c11.17%
- bbb74e7d371d67984c7021cecd14be620f56f36699841aaae7b9305c45d8b7f20.17%
- 2a517796caf867ecf8d1dd82bd3121507affd84208a6694e134bed3edfabeb740.11%
Process Ancestry
Top Grandparents
- services.exe98.99%
- msiexec.exe0.98%
- userinit.exe0.04%
Top Parents
- SAVAdminService.exe97.79%
- msiexec.exe0.84%
- explorer.exe0.03%
Top Children
- WerFault.exe83.33%
- iissetup.exe3.33%
- SophosUI.exe3.33%
Ask Rocky about WSCClient.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for WSCClient.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.