Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.38%
6.3.9600.16384 (winblue_rtm.130821-1623) 5.29%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.07%
6.2.9200.16384 (win8_rtm.120725-1247) 2.17%
6.2.9200.16384 (win8_rtm.120725-1247) 11.30%
6.2.9200.16384 (win8_rtm.120725-1247) 11.45%
6.2.9200.16384 (win8_rtm.120725-1247) 0.43%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.07%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.14%
6.1.7600.16385 (win7_rtm.090713-1255) 3.70%
6.1.7600.16385 (win7_rtm.090713-1255) 1.88%
6.1.7600.16385 (win7_rtm.090713-1255) 4.13%
6.1.7600.16385 (win7_rtm.090713-1255) 1.81%
6.1.7600.16385 (win7_rtm.090713-1255) 2.10%
6.1.7600.16385 (win7_rtm.090713-1255) 0.29%
6.1.7600.16385 (win7_rtm.090713-1255) 4.35%
6.1.7600.16385 (win7_rtm.090713-1255) 0.14%
6.1.7600.16385 (win7_rtm.090713-1255) 0.43%
6.1.7600.16385 (win7_rtm.090713-1255) 2.03%
6.1.7600.16385 (win7_rtm.090713-1255) 0.58%
6.1.7600.16385 (win7_rtm.090713-1255) 0.80%
6.1.7600.16385 (win7_rtm.090713-1255) 1.88%
6.1.7600.16385 (win7_rtm.090713-1255) 20.80%
6.1.7600.16385 (win7_rtm.090713-1255) 0.58%
6.1.7600.16385 (win7_rtm.090713-1255) 1.30%
View more

Relationships

Parent process
Related files

conhost.exe

Console Window Host by Microsoft

Remove conhost.exe
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   402b44b31c7183fcf2c4e1083af317fa
SHA1:   b31133cdf6d2817a618dd8ddcc400a26ff3e3a57
SHA256:   b757c60fe46a2a2ce79c90b795d64ba414b6a1f4e917c5d3d5f09ad377fe40f3
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is conhost.exe?

conhost.exe is the new host process for console windows. Previously those were handled by csrss.exe which is the “Client Server Runtime Process”, a process running with system-level privileges. Starting with Windows Vista, Microsoft made some very substantial improvements and changes in regard to security. One of those changes was that applications running in different “levels” or as different users weren't allowed to exchange data freely.

About conhost.exe (from Microsoft)

ConHost (Console Host) runs in the same security context as its associated console application. Instead of issuing an LPC request to CSRSS for message-handling, the request goes to ConHost. As a res

DetailsDetails

File name:conhost.exe
Publisher:Microsoft Corporation
Product name:Console Window Host
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\conhost.exe
Original name:CONHOST.EXE.MUI
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:330.5 KB (338,432 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:6.501326
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00022818%
0.028634%
Kernel CPU:0.00016545%
0.013761%
User CPU:0.00006273%
0.014873%
Kernel CPU time:20,193 ms/min
100,923,805ms/min
CPU cycles:99,993/sec
17,470,203/sec
Context switches:2/sec
284/sec
Memory
Private memory:1.33 MB
21.59 MB
Private (maximum):3.06 MB
Private (minimum):1.61 MB
Non-paged memory:1.33 MB
21.59 MB
Virtual memory:33.09 MB
140.96 MB
Virtual memory (peak):36.91 MB
169.69 MB
Working set:1.63 MB
18.61 MB
Working set (peak):3.5 MB
37.95 MB
Page faults:1,017/min
2,039/min
I/O
I/O read transfer:28 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:7 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:1
12
Handles:35
600
GUI GDI count:20
103
GUI GDI peak:22
142
GUI USER count:4
49
GUI USER peak:4
71

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command lines:
  • \??\C:\Windows\System32\conhost.exe "2077210820-620434525614413250-1238795434-15402396822084215993130406015648886268
  • \??\C:\Windows\System32\conhost.exe "1710084617-2482651331399911702310132020-1515054213693180505-1418865185511412338
  • \??\C:\Windows\System32\conhost.exe "-927729474-402213596-428345698-164940888408969523-1411411434-1172932462385156906
  • \??\C:\Windows\System32\conhost.exe "1205044722-210863284513954685351701927788-1769802905-4479509098616307422098751502
  • \??\C:\Windows\System32\conhost.exe "-868828049-13541274391607392602-1934686477-1098124304-1241799681834511215-595345200
  • \??\C:\Windows\System32\conhost.exe "16612938931400052449-538286234-97628140680805583-206320464577173700873452880
  • \??\C:\Windows\System32\conhost.exe "-1345456827-723725805-4834791201894318939-5938170011135280126-368946036-1974217109
  • (62 more)
Owner:SYSTEM
Parent process:csrss.exe (Client Server Runtime Process by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 21.50%
Windows 8.1 17.00%
Windows 8.1 Pro 14.00%
Windows 8 10.50%
Windows 8.1 Single Language 7.50%
Windows 8 Pro 7.00%
Windows 7 Home Premium 5.00%
Windows 8 Single Language 3.50%
Windows 8.1 Pro with Media Center 3.00%
Windows 7 Professional 3.00%
Windows 8 Enterprise N 2.50%
Windows 7 Starter 1.50%
Windows 8.1 Enterprise Evaluation 1.00%
Windows 7 Home Basic 1.00%
Windows Developer Preview 0.50%
Windows 8.1 Enterprise 0.50%
Windows 8 Pro with Media Center 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 25.13% of Console Window Host.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Lenovo 19.15%
Dell 18.44%
ASUS 18.44%
Toshiba 9.22%
Hewlett-Packard 8.16%
Acer 8.16%
Intel 6.38%
Sony 4.96%
Alienware 2.84%
NEC 1.42%
American Megatrends 1.06%
Samsung 0.71%
Medion 0.71%
GIGABYTE 0.35%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE