Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	0.47%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.07%
6.2.9200.16384 (win8_rtm.120725-1247)	1.88%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.07%
6.1.7600.16385 (win7_rtm.090713-1255)	27.57%
6.1.7600.16385 (win7_rtm.090713-1255)	57.28%
6.1.7600.16385 (win7_rtm.090713-1255)	0.07%
6.1.1000.18273 (longhorn_mc_dev(wmbla).080702-2311)	0.40%
6.0.6000.16386 (vista_rtm.061101-2205)	8.99%
6.0.6000.16386 (vista_rtm.061101-2205)	1.68%
5.1.2710.2732 (xpsp(wmbla).050805-1239)	1.21%
5.1.2700.2180 (private/xpsp_mce.040810-0205)	0.34%

Relationships

ehsched.exe

Windows Media Center Scheduler Service by Microsoft

Remove ehsched.exe

Version:	5.1.2710.2732 (xpsp(wmbla).050805-1239)
MD5:	a53243709439ac2a4c216b817f8d7411
SHA1:	5c619897ab6c15654749f24206ca3ae08fb7f66c
SHA256:	af4624eea9b165de873b7d104d1ea3be9a14bbc5b4cabe26544f90b78689eef9

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is ehsched.exe?

Windows Media Center Scheduler Service starts and stops recording of TV programs within Windows Media Center.

About ehsched.exe (from Microsoft)

“Microsoft Windows Media Center is a feature of certain SKUs of the Windows 7 operating system that includes enhanced capabilities for consolidating digital entertainment and media content and deliveri”

Details

File name:	ehsched.exe
Publisher:	Microsoft Corporation
Product name:	Windows Media Center Scheduler Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\windows\ehome\ehsched.exe
Original name:	ehSched.exe.mui
File version:	5.1.2710.2732 (xpsp(wmbla).050805-1239)
Product version:	5.1.2710.2732
Size:	100.5 KB (102,912 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	6.177891
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following program will install this file

Windows XP Media Center Edition 2005 KB2628259

Microsoft Corporation

1% remove

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'ehSched'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00009867%	0.028634%
Kernel CPU:	0.00006493%	0.013761%
User CPU:	0.00003374%	0.014873%
Kernel CPU time:	125 ms/min	100,923,805ms/min
Memory
Private memory:	3.17 MB	21.59 MB
Private (maximum):	3.69 MB
Private (minimum):	1.54 MB
Non-paged memory:	3.17 MB	21.59 MB
Virtual memory:	29.48 MB	140.96 MB
Virtual memory (peak):	30.77 MB	169.69 MB
Working set:	2.38 MB	18.61 MB
Working set (peak):	5.74 MB	37.95 MB
Page faults:	2,149/min	2,039/min
I/O
I/O read transfer:	41 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	3 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	26 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	10	12
Handles:	166	600
GUI GDI count:	4	103
GUI USER count:	10	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command lines:	C:\windows\ehome\ehsched.exe
Owner:	SYSTEM
Windows Service
Service name:	ehSched
Display name:	Windows Media Center-Planerdienst
Description:	“Startet und beendet die Aufzeichnung von TV-Sendungen in Windows Media Center”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads