OLicenseHeartbeat.exe
Summary
License Heartbeat - sends periodic license check-in signals to a license server.
OLicenseHeartbeat.exe is the 306th most commonly executed Windows program in EchoTrail's dataset, observed 31,748 times across enterprise environments. It typically runs from C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16 and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE1669.8%
- C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE1613.53%
- C:\Program Files\Common Files\microsoft shared\OFFICE1511.52%
- C:\Program Files\Common Files\microsoft shared\OFFICE165.15%
Top Hashes (SHA256)
- 30c01d2db38d6652eb7b42050b8cee8f43a0fa1706eb8483070e8c1f31e8ca8f11.89%
- 7c48632a92a232df1a9e85874dd430143426cb4e1940c4dd18ca46809b618e613.7%
- 37e3d59e76326a85114e7e04295dc637fa5345ca05e72cfc0d4446ce3c1e22d13.08%
- 366f1b6b4ce874b705fcfcea4ca679d4dabce52acc0a724581f3e7aed0ee7e3f2.9%
- 40b8a41d96b7ca6d60091ccd2dd0da10db007b1c68add4957c733b04a14f8f5e2.76%
- dda2ac2b87f79086e6de030004d6e9699fb45e0d0a744b582130790f3e0972a12.67%
- 07bb102a0a9198dbe2021a93bfe3d0cbb8e683afe24be59e37f0a2a3cea96cd82.63%
- 6758d2552d3172e25ce82e922f5d3b7620eb92901f81e6a673c0fb5cf1e864d42.62%
- 289b653a2fa46b5a9da987b306ad52c9d43a0e5badf5b240057eb9de63fcf3f42.01%
- 936fa20660ce433fd36cbfa8503c8fb201c38de12f0591bcf670b51ed2094bbf1.82%
Process Ancestry
Top Grandparents
- services.exe88.57%
- svchost.exe11.4%
Top Parents
- svchost.exe91.68%
- taskeng.exe8.2%
- OfficeClickToRun.exe0.05%
Top Children
- conhost.exe66.67%
- WerFault.exe20%
- mscorsvw.exe6.67%
- powercfg.exe6.67%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about OLicenseHeartbeat.exe
Rocky answers questions about OLicenseHeartbeat.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.