ehshell.exe is the 21,149th most commonly executed Windows program. It typically runs from the path C:\Windows\ehome, and is most often launched by dllhost.exe. It has been observed executing on 0.3% of computers in the wild.