Versions

15.0.4623.1001	36.67%
15.0.4615.1002	63.33%

There are 2 versions of officeclicktorun.exe in the wild, the latest version being 15.0.4623.1001. It is started as a Windows Service called 'Tjenesten Microsoft Office ClickToRun' with the name 'ClickToRunSvc' and described as “Behandler ressurskoordinering, nedlasting i bakgrunnen og systemintegrasjon med Microsoft Office-produkter og deres beslektede oppdateringer. Denne tjenesten må kjøre ved bruk av Microsoft Office-programmer, under første installasjon via nedlasting og alle etterfølgende oppdateringer.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 2.17 MB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. The programs Microsoft OneNote 2013 - en-us, Microsoft Office Professional Plus 2013 - en-us and Microsoft Office Home and Student 2013 - en-us have been observed as installing specific variations of officeclicktorun.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0005% including both foreground and background operations, the average private memory consumption is about 29.15 MB with the maximum memory reaching around 35.39 MB. Addionally, typically read and write I/O disk operations is about 2.16 KB per minute for reads and 302 Bytes per minute for writes.