Should I block it?

No, this file is 100% safe to run.

Additional versions

15.0.4623.1000	4.00%
15.0.4615.1000	12.00%
15.0.4535.1504	16.00%
15.0.4535.1000	8.00%
15.0.4517.1504	4.00%
15.0.4505.1510	4.00%
15.0.4481.1000	20.00%
15.0.4420.1017	8.00%
15.0.4420.1017	4.00%
15.0.4128.1022	20.00%

Relationships

Child process

iastoricon.exe (IAStorIcon by Intel Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, ReportEventW, RegisterEventSourceW, DeregisterEventSource, RegSetValueExW, RegEnumKeyExW, RegDeleteValueW, RegCreateKeyExW, RegQueryInfoKeyW, RegOpenKeyExW, RegDeleteKeyW, RegGetValueW, RegQueryValueExW, OpenProcessToken, GetSidSubAuthority, GetTokenInformation, RegEnumValueW

kernel32.dll

LocalAlloc, LoadLibraryA, FlsFree, FlsGetValue, FlsAlloc, GetCommandLineW, CloseHandle, RaiseException, GetLastError, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, InitializeCriticalSectionEx, DeleteCriticalSection, SetEvent, WaitForSingleObject, CreateEventW, Sleep, CreateThread, GetCurrentThreadId, GetModuleFileNameW, GetModuleHandleW, GetProcAddress, lstrlenW, FreeLibrary, LoadLibraryExW, LoadResource, SizeofResource, lstrcmpiW, FindResourceW, MultiByteToWideChar, QueryPerformanceCounter, GetProcessHeap, HeapSetInformation, GetCurrentProcessId, GetSystemTimeAsFileTime, GetTickCount, VirtualProtect, WerRegisterMemoryBlock, HeapAlloc, HeapFree, InterlockedExchange, InterlockedCompareExchange, GetStartupInfoW, EncodePointer, DecodePointer, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetModuleHandleExW, TlsAlloc, GetCurrentProcess

msvcr100.dll

DllMain

ole32.dll

CoCreateInstance, CoTaskMemFree, CoTaskMemAlloc, CoInitialize, StringFromGUID2, CoInitializeSecurity, CoReleaseServerProcess, CoAddRefServerProcess, CoRevokeClassObject, CoRegisterClassObject, CoInitializeEx, CoUninitialize, CoTaskMemRealloc

csisyncclient.exe

Microsoft Office 2013 by Microsoft Corporation (Signed)

Remove csisyncclient.exe

Version:	15.0.4623.1000
MD5:	3f6136372d72449fc7fc77c5f37962ec
SHA1:	7c997f1e793f03c40d107e0a8d01907f6653bc57

Overview

csisyncclient.exe executes as a process with the local user's privileges. The file is digitally signed by Microsoft Corporation.

Details

File name:	csisyncclient.exe
Publisher:	Microsoft Corporation
Product name:	Microsoft Office 2013
Description:	Microsoft Office Document Cache Sync Client Interface
Typical file path:	C:\Program Files\microsoft office 15\root\vfs\programfilescommonx86\microsoft shared\office15\csisyncclient.exe
Original name:	CsiSyncClient
File version:	15.0.4623.1000
Size:	77.73 KB (79,600 bytes)
Build date:	5/13/2014 2:34 PM
Certificate
Issued to:	Microsoft Corporation
Authority (CA):	Microsoft Corporation
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 10.0
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00042671%	0.028634%
Kernel CPU:	0.00010658%	0.013761%
User CPU:	0.00032013%	0.014873%
Kernel CPU time:	6,266 ms/min	100,923,805ms/min
CPU cycles:	374,064/sec	17,470,203/sec
Memory
Private memory:	11.05 MB	21.59 MB
Private (maximum):	24.42 MB
Private (minimum):	22.88 MB
Non-paged memory:	11.05 MB	21.59 MB
Virtual memory:	316.41 MB	140.96 MB
Virtual memory (peak):	353.13 MB	169.69 MB
Working set:	24.34 MB	18.61 MB
Working set (peak):	24.44 MB	37.95 MB
Page faults:	22,217/min	2,039/min
I/O
I/O read transfer:	18.6 KB/sec	1.02 MB/min
I/O read operations:	11/sec	343/min
I/O write transfer:	4.39 KB/sec	274.99 KB/min
I/O write operations:	2/sec	227/min
I/O other transfer:	485 Bytes/sec	448.09 KB/min
I/O other operations:	25/sec	1,671/min
Resource allocations
Threads:	16	12
Handles:	558	600
GUI GDI count:	32	103
GUI GDI peak:	33	142
GUI USER count:	13	49
GUI USER peak:	16	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\Program Files\microsoft office 15\root\vfs\programfilescommonx86\microsoft shared\office15\csisyncclient.exe" "C:\Program Files\microsoft office 15\root\vfs\programfilescommonx86\microsoft shared\office15\csisyncclient.exe" -embedding
Owner:	User

Threads

Averages

wow64win.dll
Total CPU:	0.00459792%	0.272967%
Kernel CPU:	0.00402004%	0.107585%
User CPU:	0.00057788%	0.165382%
CPU cycles:	94,358/sec	5,741,424/sec
Memory:	416 KB	1.16 MB
CSISYNCCLIENT.EXE (main module)
Total CPU:	0.00088908%
Kernel CPU:	0.00053746%
User CPU:	0.00035162%
CPU cycles:	17,481/sec
Memory:	80 KB

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	24.00%
Windows 8 Pro with Media Center	24.00%
Windows 8.1	20.00%
Windows 8 Pro	16.00%
Windows 8	12.00%
Windows 7 Ultimate	4.00%

Distribution by country

United States installs about 72.00% of Microsoft Office 2013.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	28.57%
Hewlett-Packard	25.00%
Toshiba	14.29%
ASUS	14.29%
Acer	7.14%
Sony	7.14%
Alienware	3.57%

Remove Adware and Spyware Programs, FREE Download!