Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	0.45%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.01%
6.2.9200.16384 (win8_rtm.120725-1247)	2.36%
6.2.9200.16384 (win8_rtm.120725-1247)	0.35%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	3.74%
6.1.7600.16385 (win7_rtm.090713-1255)	5.41%
6.1.7600.16385 (win7_rtm.090713-1255)	59.51%
6.1.7600.16385 (win7_rtm.090713-1255)	3.24%
6.1.7600.16385 (win7_rtm.090713-1255)	22.48%
6.1.7600.16385 (win7_rtm.090713-1255)	2.31%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.1000.18273 (longhorn_mc_dev(wmbla).080702-2311)	0.13%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegEnumKeyExW, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryValueExW, RegEnumKeyW, RegQueryInfoKeyW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegEnumValueW, ConvertStringSidToSidW, CreateWellKnownSid, EqualSid, GetAce, OpenThreadToken, ImpersonateSelf, AdjustTokenPrivileges, LookupPrivilegeValueW, SetNamedSecurityInfoW, GetNamedSecurityInfoW, GetSecurityInfo, RevertToSelf, SetEntriesInAclW, QueryServiceStatusEx, StartServiceW, ControlService, CloseServiceHandle, OpenServiceW, OpenSCManagerW, ConvertSidToStringSidW, GetTokenInformation, OpenProcessToken, ChangeServiceConfigW

iphlpapi.dll

GetAdaptersInfo

kernel32.dll

lstrlenW, QueryFullProcessImageNameW, OpenProcess, MultiByteToWideChar, CloseHandle, LocalFree, SetEvent, CreateEventW, CreateDirectoryW, GetEnvironmentVariableW, OpenEventW, Sleep, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, WaitForSingleObject, GetModuleHandleW, WideCharToMultiByte, WaitForMultipleObjects, LocalAlloc, GetCurrentThread, CreateFileW, FindClose, FindNextFileW, FindFirstFileW, GetFileAttributesW, lstrlenA, InterlockedDecrement, GetSystemTime, WriteFile, SetFilePointer, GetCurrentProcessId, GetCurrentThreadId, GetLocalTime, GetWindowsDirectoryW, GetTickCount64, CompareStringW, GetCurrentProcess, CreateProcessW, CopyFileW, GetModuleFileNameW, GetTempPathW, DelayLoadFailureHook, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, GetStartupInfoW, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, InterlockedIncrement, GetProcAddress, LoadLibraryW, FlushFileBuffers, DeleteFileW, CompareFileTime, GetLastError, CreateThread, SetEndOfFile, MoveFileExW, OutputDebugStringW, CreateMutexW, OpenMutexW, ReleaseMutex, InterlockedExchange

msvcrt.dll

DllMain

ole32.dll

CoUninitialize, CoInitializeEx, CoCreateInstance, StringFromGUID2, CoTaskMemFree, CLSIDFromString, StringFromCLSID, CoSetProxyBlanket, CoTaskMemAlloc, CoCreateGuid, StringFromIID

propsys.dll

PSUnregisterPropertySchema, PSRegisterPropertySchema

shlwapi.dll

PathFindFileNameW, UrlGetPartW, PathCombineW

slc.dll

SLInstallProofOfPurchase, SLGetPKeyInformation, SLConsumeWindowsRight, SLClose, SLOpen

slcext.dll

SLActivateProduct

user32.dll

LoadStringW, CharLowerBuffW

wmdrmsdk.dll

WMDRMCreateProvider

ws2_32.dll

WSAStringToAddressW, GetNameInfoW

ehprivjob.exe

Digital TV Tuner device registration application. by Microsoft

Remove ehprivjob.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	c07d5582f2107acab4564e1dae977c64
SHA1:	b4c123c7d17a3c44e74880b4108766e8ce4b6a66
SHA256:	a9ae53f7d23ddc96a05f3b93f547abd1896233f3d835c6b07ad9e9781788bc32

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is ehprivjob.exe?

Digital TV Tuner device registration application is a scheduled task for Microsoft Media Center.

About ehprivjob.exe (from Microsoft)

“With Windows Media Center and the right hardware, it's possible to watch and record premium digital cable channels from your cable provider. However, setting up a computer to do this can be an advance”

Details

File name:	ehprivjob.exe
Publisher:	Microsoft Corporation
Product name:	Digital TV Tuner device registration application.
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\windows\ehome\ehprivjob.exe
Original name:	ehPrivJob.exe.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	289 KB (295,936 bytes)
Digital DNA
PE subsystem:	Windows Console
Entropy:	5.663257
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Scheduled tasks

The job 'UpdateRecordPath' runs in the path '\Microsoft\Windows\Media Center\UpdateRecordPath'
The task 'ReindexSearchRoot' runs in the path '\Microsoft\Windows\Media Center\ReindexSearchRoot'
The job 'RegisterSearch' runs in the path '\Microsoft\Windows\Media Center\RegisterSearch'
The task 'PBDADiscoveryW2' runs in the path '\Microsoft\Windows\Media Center\PBDADiscoveryW2'
The job 'PBDADiscoveryW1' runs in the path '\Microsoft\Windows\Media Center\PBDADiscoveryW1'
The task 'PBDADiscovery' runs in the path '\Microsoft\Windows\Media Center\PBDADiscovery'
The job 'OCURDiscovery' runs in the path '\Microsoft\Windows\Media Center\OCURDiscovery'
The task 'OCURActivate' runs in the path '\Microsoft\Windows\Media Center\OCURActivate'
The job 'InstallPlayReady' runs in the path '\Microsoft\Windows\Media Center\InstallPlayReady'
The task 'ehDRMInit' runs in the path '\Microsoft\Windows\Media Center\ehDRMInit'
The job 'ConfigureInternetTimeService' runs in the path '\Microsoft\Windows\Media Center\ConfigureInternetTimeService'
The task 'ActivateWindowsSearch' runs in the path '\Microsoft\Windows\Media Center\ActivateWindowsSearch'
Entry path '\Microsoft\Windows\Media Center\UpdateRecordPath'
Entry path '\Microsoft\Windows\Media Center\ReindexSearchRoot'
Entry path '\Microsoft\Windows\Media Center\RegisterSearch'
Entry path '\Microsoft\Windows\Media Center\PBDADiscoveryW2'
Entry path '\Microsoft\Windows\Media Center\PBDADiscoveryW1'
Entry path '\Microsoft\Windows\Media Center\PBDADiscovery'
Entry path '\Microsoft\Windows\Media Center\OCURDiscovery'
Entry path '\Microsoft\Windows\Media Center\OCURActivate'
Entry path '\Microsoft\Windows\Media Center\InstallPlayReady'
Entry path '\Microsoft\Windows\Media Center\ehDRMInit'

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00006029%	0.028634%
Kernel CPU:	0.00004019%	0.013761%
User CPU:	0.00002010%	0.014873%
Kernel CPU time:	62 ms/min	100,923,805ms/min
CPU cycles:	124/sec	17,470,203/sec
Memory
Private memory:	3.78 MB	21.59 MB
Private (maximum):	9.35 MB
Private (minimum):	1.74 MB
Non-paged memory:	3.78 MB	21.59 MB
Virtual memory:	70.54 MB	140.96 MB
Virtual memory (peak):	72.54 MB	169.69 MB
Working set:	1.84 MB	18.61 MB
Working set (peak):	9.36 MB	37.95 MB
Page faults:	3,570/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	10	12
Handles:	191	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	C:\windows\ehome\ehprivjob.exe /dorecoverytasks
Owner:	SYSTEM
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads