Should I block it?
No, this file is 100% safe to run.
Relationships
ehstorauthn.exe
Windows Enhanced Storage Password Authentication Program by Microsoft
| Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| MD5: | 70f20fb785e3726aa9215fbf843e6d9a |
| SHA1: | d6f31f4a866b4c8d4fc17877926352dd7f1a83f7 |
| SHA256: | e3b353e3802e3115a5c9f98c6158113a713ed6c1ce8eb3427d13727a31847b39 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
ehstorauthn.exe executes as a process with the local user's privileges. This version is designed to run on Windows 7 and is compiled as a 32 bit program.
Details
| File name: | ehstorauthn.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Windows Enhanced Storage Password Authentication Program |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\ehstorauthn.exe |
| Original name: | EhStorAuthn.exe.mui |
| File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| Product version: | 6.1.7600.16385 |
| Size: | 127.5 KB (130,560 bytes) |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.01103194% | |
| Kernel CPU: | 0.00907179% | |
| User CPU: | 0.00196016% | |
| Kernel CPU time: | 55 ms/min | |
| CPU cycles: | 35,227/sec | |
| Memory |
| Private memory: | 1.64 MB | |
| Private (maximum): | 6.54 MB | |
| Private (minimum): | 6.39 MB | |
| Non-paged memory: | 1.64 MB | |
| Virtual memory: | 67.2 MB | |
| Virtual memory (peak): | 70.91 MB | |
| Working set: | 6.4 MB | |
| Working set (peak): | 7.25 MB | |
| Page faults: | 2,129/min | |
| I/O |
| I/O read transfer: | 0 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 66 Bytes/sec | |
| I/O other operations: | 4/sec | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 112 | |
| GUI GDI count: | 19 | |
| GUI GDI peak: | 29 | |
| GUI USER count: | 12 | |
| GUI USER peak: | 27 | |
Process properties
| Integrety level: | Medium |
| Platform: | 32-bit |
| Command lines: |
- C:\Windows\System32\ehstorauthn.exe passwdauthenticate \\?\usbstor#ieee1667silo&ven_&prod_&rev_&silo_102#0019e000b456ba3113310b3a&0&102_1#{7c2bcf57-2bea-46da-ad26-78fdc83cee46} 0x1
- C:\Windows\System32\ehstorauthn.exe passwdauthenticate \\?\usbstor#ieee1667silo&ven_&prod_&rev_&silo_102#e6a11300b18b015b&0&102_1#{7c2bcf57-2bea-46da-ad26-78fdc83cee46} 0x1
|
| Owner: | User |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
100.00% |
|
Distribution by country
PR installs about 50.00% of Windows Enhanced Storage Password Authentication Program.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
66.67% |
|
| Hewlett-Packard |
33.33% |
|
