Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.1.7601.21939 (win7sp1_ldr.120308-2340) 0.08%
6.1.7601.21939 (win7sp1_ldr.120308-2340) 0.16%
6.1.7600.16385 (win7_rtm.090713-1255) 50.27%
6.1.7600.16385 (win7_rtm.090713-1255) 37.14%
6.1.7600.16385 (win7_rtm.090713-1255) 0.23%
6.1.7600.16384 (win7_rtm.090710-1945) 0.08%
6.0.6002.18005 (lh_sp2rtm.090410-1830) 1.56%
6.0.6002.18005 (lh_sp2rtm.090410-1830) 9.15%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.70%
6.0.6000.20574 (vista_ldr.070407-1200) 0.08%
6.0.6000.16386 (vista_rtm.061101-2205) 0.55%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus, ConvertStringSecurityDescriptorToSecurityDescriptorW, CreateProcessAsUserW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
kernel32.dll
CreateThread, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, InterlockedExchange, SetEvent, CreateEventW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, DebugBreak, IsWow64Process, Sleep, GetSystemDirectoryW, GetCurrentThread, TerminateThread, DisableThreadLibraryCalls, InterlockedIncrement, InterlockedDecrement, SetLastError, GetLastError, UnregisterWait, LocalFree, ProcessIdToSessionId, GetCurrentProcessId, InitializeCriticalSection, DeleteCriticalSection, OpenProcess, CloseHandle, GetModuleHandleExW, CreateThreadpoolWait, SetThreadpoolWait, FreeLibrary, TerminateProcess, ResumeThread, GetExitCodeProcess, GetProcessTimes, FreeLibraryWhenCallbackReturns, CloseThreadpoolWait, WaitForSingleObject, DuplicateHandle, GetCurrentProcess, EnterCriticalSection, LeaveCriticalSection, GetProcessHeap, DelayLoadFailureHook, GetProcAddress, InterlockedCompareExchange, LoadLibraryExA, GetModuleHandleW, GetCurrentThreadId, ExitProcess, IsDebuggerPresent, HeapFree, HeapAlloc, HeapReAlloc, RegisterWaitForSingleObject, UnregisterWaitEx
msvcrt.dll
DllMain
ntdll.dll
NtAcceptConnectPort, NtCompleteConnectPort, NtReplyWaitReceivePort, NtRequestPort, NtConnectPort, NtRequestWaitReplyPort, DbgPrintEx, DbgPrompt, NtQuerySystemInformation, RtlCaptureStackBackTrace, RtlInsertElementGenericTable, RtlLookupElementGenericTable, RtlInitializeGenericTable, NtQueryInformationProcess, NtReplyPort, NtCreatePort, RtlInitUnicodeString, RtlDeleteElementGenericTable, RtlEnumerateGenericTableWithoutSplaying, DbgBreakPoint
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSEnumerateSessionsW, WTSFreeMemory, WTSQueryUserToken
Export table
ServiceMain
SvchostPushServiceGlobals

UxSms.dll

Microsoft User Experience Session Management Service by Microsoft

Remove UxSms.dll
Version:   6.1.7601.21939 (win7sp1_ldr.120308-2340)
MD5:   4b402eeed9d65df4b43877c5ed0010b2
SHA1:   240c8b6611c61d03f17580ed37d52972580e5fb3
SHA256:   838b786ac14a6987279451bf74aec324c680dd564504e943af0dd65d472a76d2
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

uxsms.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7.

DetailsDetails

File name:uxsms.dll
Publisher:Microsoft Corporation
Product name:Microsoft User Experience Session Management Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\uxsms.dll
File version:6.1.7601.21939 (win7sp1_ldr.120308-2340)
Product version:6.1.7601.21939
Size:29 KB (29,696 bytes)
Build date:3/9/2012 9:47 PM
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'
  • Shared name is 'UxSms'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 53.50%
Windows 7 Ultimate 26.50%
Windows 7 Professional 10.00%
Windows Vista Home Premium 4.00%
Windows 7 Home Basic 2.50%
Windows 7 Starter 1.50%
Windows Seven Black Edition 0.50%
Windows Vista Home Basic 0.50%
Windows 7 Enterprise 0.50%
Windows Se7en Titan 0.50%

Distribution by countryDistribution by country

United States installs about 43.72% of Microsoft User Experience Session Management Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 26.47%
ASUS 16.91%
Hewlett-Packard 15.44%
Acer 12.87%
Toshiba 11.76%
Lenovo 3.68%
Sony 2.94%
Samsung 2.21%
GIGABYTE 2.21%
Intel 2.21%
Alienware 1.10%
Gateway 0.74%
MSI 0.74%
NEC 0.74%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE