Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.1.7600.16385 (win7_rtm.090713-1255) 5.05%
6.1.7600.16385 (win7_rtm.090713-1255) 5.05%
6.0.6000.16386 (vista_rtm.061101-2205) 59.60%
6.0.6000.16386 (vista_rtm.061101-2205) 4.04%
6.0.6000.16386 (vista_rtm.061101-2205) 17.17%
5.1.2710.2732 (xpsp(wmbla).050805-1245) 1.01%
5.1.2710.2732 (xpsp(wmbla).050805-1239) 7.07%
5.1.2700.2180 (private/xpsp_mce.040810-0205) 1.01%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegOpenKeyExW, RegQueryValueExW, RegCloseKey
kernel32.dll
GetTickCount, QueryPerformanceCounter, IsBadWritePtr, PostQueuedCompletionStatus, GetCurrentProcessId, GetLastError, lstrlenW, EnterCriticalSection, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, InterlockedDecrement, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetModuleHandleA, GetStartupInfoW, CreateEventW, Sleep, lstrcmpiW, GetCurrentThreadId, GetCommandLineW, WaitForMultipleObjects, CloseHandle, WaitForSingleObject, InitializeCriticalSection, DeleteCriticalSection, InterlockedIncrement, CreateThread, SetEvent, LeaveCriticalSection, HeapSetInformation, CompareStringW, InterlockedCompareExchange, InterlockedExchange
msvcrt.dll
DllMain
ole32.dll
StringFromCLSID, CoTaskMemFree, CoInitialize, CoUninitialize, CoCreateFreeThreadedMarshaler, CoCreateInstance
user32.dll
PostThreadMessageW, GetMessageW, DispatchMessageW, CharNextW

ehmsas.exe

Media Center Media Status Aggregator Service by Microsoft

Remove ehmsas.exe
Version:   5.1.2710.2732 (xpsp(wmbla).050805-1239)
MD5:   03a905fba1d62317087db5c21c0f8f62
SHA1:   8eba63ed81d548b223e55dfbd482694fde79397c
SHA256:   78c71ed57bf25dc4d17f054a9691920579432595d7f72428d570bde21dc7bb41
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is ehmsas.exe?

Media Center Media Status Aggregator Service is part of the Microsoft Media Center application and provides a user interface to get status indications for Media Center.

About ehmsas.exe (from Microsoft)

“Microsoft Windows Media Center is a feature of certain SKUs of the Windows 7 operating system that includes enhanced capabilities for consolidating digital entertainment and media content and deliveri”

DetailsDetails

File name:ehmsas.exe
Publisher:Microsoft Corporation
Product name:Media Center Media Status Aggregator Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\ehome\ehmsas.exe
Original name:ehMSAS.exe.mui
File version:5.1.2710.2732 (xpsp(wmbla).050805-1239)
Product version:5.1.2710.2732
Size:45.5 KB (46,592 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:6.003769
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Windows XP Media Center Edition 2005 KB2619340
 Microsoft Corporation
8% remove
“A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system.”
Update Rollup 2 for Windows XP Media Center Edition 2005
 Microsoft Corporation
6% remove
Windows XP Media Center Edition 2005 KB908246
 Microsoft Corporation
8% remove
Windows XP Media Center Edition 2005 KB925766
 Microsoft Corporation
9% remove
“Microsoft has released the October 2006 Update Rollup for Microsoft Windows XP Media Center Edition 2005. This update rollup is intended for computers that are running Update Rollup 2 for Windows XP Media Center Edition 2005. ”
Windows XP Media Center Edition 2005 KB2628259
 Microsoft Corporation
1% remove

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00049077%
0.028634%
Kernel CPU:0.00039500%
0.013761%
User CPU:0.00009577%
0.014873%
Kernel CPU time:2,324 ms/min
100,923,805ms/min
Context switches:8/sec
284/sec
Memory
Private memory:2.55 MB
21.59 MB
Private (maximum):2.61 MB
Private (minimum):2.39 MB
Non-paged memory:2.55 MB
21.59 MB
Virtual memory:26.46 MB
140.96 MB
Virtual memory (peak):26.96 MB
169.69 MB
Working set:2.49 MB
18.61 MB
Working set (peak):4.64 MB
37.95 MB
Page faults:1,536/min
2,039/min
I/O
I/O read transfer:34 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:20 Bytes/sec
448.09 KB/min
I/O other operations:4/sec
1,671/min
Resource allocations
Threads:4
12
Handles:94
600
GUI GDI count:11
103
GUI USER count:5
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command lines:
  • C:\windows\ehome\ehmsas.exe -embedding
Owner:User
Parent process:svchost.exe (Generic Host Process for Win32 Services by Microsoft)

ResourcesThreads

Averages
 
ehmsas.exe (main module)
Total CPU:0.00086098%
0.272967%
Kernel CPU:0.00073175%
0.107585%
User CPU:0.00012923%
0.165382%
Memory:56 KB
1.16 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Premium 69.70%
Windows Vista Ultimate 10.10%
Microsoft Windows XP 9.09%
Windows 7 Home Premium 5.05%
Windows 7 Ultimate 4.04%
Windows Vista™ Home Premium 1.01%
Windows 7 Professional 1.01%

Distribution by countryDistribution by country

United States installs about 66.32% of Media Center Media Status Aggregator Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 24.69%
Dell 19.75%
Sony 14.81%
Toshiba 12.35%
Gateway 9.88%
ASUS 7.41%
Acer 3.70%
Lenovo 2.47%
Intel 2.47%
American Megatrends 1.23%
Samsung 1.23%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE