Quickfix AI
conhost.exeSafe

What is conhost.exe?

Publisher: Microsoft CorporationTypical location: C:\Windows\System32\conhost.exe

conhost.exe is a legitimate Windows system process from Microsoft. It stands for Console Window Host and helps Command Prompt and other console apps display text windows correctly.

What it does

Windows uses conhost.exe to manage the window for command-line programs such as Command Prompt, PowerShell, and some background tools. It acts as a bridge between older console apps and the modern Windows desktop, so text-based programs can open, close, and update their windows properly.

Is it safe?

Yes, the real conhost.exe is safe and part of Windows. You should not delete or disable it. However, malware sometimes uses the same name to hide in plain sight, so the file location and publisher matter. The legitimate file is usually in C:\Windows\System32\conhost.exe and should show Microsoft Corporation as the publisher.

If it is running from a different folder, has no Microsoft signature, or is using a suspicious amount of CPU or disk time all the time, treat it as suspicious and scan your PC.

Why it causes high CPU or disk usage

  • 1A command-line or console app it is hosting is busy or stuck
  • 2A script or scheduled task is repeatedly launching console windows
  • 3Malware is disguising itself with the same name
  • 4A temporary Windows or app glitch is causing the process to loop

How to check if it's legitimate

  1. Open Task Manager, right-click conhost.exe, and choose Open file location.
  2. Confirm the file is in C:\Windows\System32.
  3. Right-click the file, open Properties, and check the Digital Signatures tab for Microsoft Corporation.
  4. In Task Manager, look at the app or command window that started it. If a program is causing the spike, closing or restarting that app may help.
  5. If the file is not in System32 or the signature is missing, run a malware scan.

How to remove it

You generally should not remove conhost.exe when it is the real Windows file, because it is a core system component. If it is consuming too much CPU or disk, first close the console app that spawned it, restart your PC, and install Windows updates. If the file is in the wrong location or looks suspicious, quarantine it with a malware scan instead of deleting the Windows copy manually.

Need more help?

Run a free diagnostic scan to identify and fix issues automatically.

Download Quickfix AI