conhost.exe
Console Window Host by Microsoft
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Warning 3 antivirus scanners has detected malware in various versions of conhost.exe.
Overview
conhost.exe has 33 known versions, the most recent one is 6.3.9600.16384 (winblue_rtm.130821-1623). conhost.exe is run as a standard windows process with the logged in user's account privileges. The average file size is about 305.32 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0010% including both foreground and background operations, the average private memory consumption is about 1018.8 KB with the maximum memory reaching around 3.03 MB. Addionally, typically read and write I/O disk operations is about 43 Bytes per minute for reads and 34 Bytes per minute for writes.
What is conhost.exe?
conhost.exe is the new host process for console windows. Previously those were handled by csrss.exe which is the “Client Server Runtime Process”, a process running with system-level privileges. Starting with Windows Vista, Microsoft made some very substantial improvements and changes in regard to security. One of those changes was that applications running in different “levels” or as different users weren't allowed to exchange data freely.
About conhost.exe (from Microsoft)
“ConHost (Console Host) runs in the same security context as its associated console application. Instead of issuing an LPC request to CSRSS for message-handling, the request goes to ConHost. As a res”
 Details
|
| File name: | conhost.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Console Window Host |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\conhost.exe |
| Original name: | CONHOST.EXE.MUI |
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
All file variations of conhost.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
20.75% |
|
| Windows 7 Ultimate |
15.75% |
|
| Windows 8 |
14.75% |
|
| Windows 8 Pro |
10.75% |
|
| Windows 8.1 |
8.75% |
|
| Windows 8.1 Pro |
7.00% |
|
| Windows 8 Single Language |
5.75% |
|
| Windows 7 Professional |
5.50% |
|
| Windows 8.1 Single Language |
3.75% |
|
| Windows 8.1 Pro with Media Center |
1.50% |
|
| Windows 8 Enterprise N |
1.25% |
|
| Windows 7 Home Basic |
1.25% |
|
| Windows 7 Starter |
0.75% |
|
| Windows 8 Pro with Media Center |
0.75% |
|
| Windows 8.1 Enterprise Evaluation |
0.50% |
|
| Windows Developer Preview |
0.50% |
|
| Windows 8.1 Enterprise |
0.25% |
|
| Windows 8 Enterprise |
0.25% |
|
| Windows 7 Enterprise |
0.25% |
|
Distribution by country
United States installs about 22.56% of Console Window Host.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
16.88% |
|
| Dell |
16.16% |
|
| Lenovo |
11.49% |
|
| Acer |
11.31% |
|
| Hewlett-Packard |
10.41% |
|
| Sony |
10.41% |
|
| Toshiba |
7.90% |
|
| Intel |
3.95% |
|
| GIGABYTE |
3.95% |
|
| NEC |
2.87% |
|
| Alienware |
2.51% |
|
| Samsung |
0.90% |
|
| American Megatrends |
0.54% |
|
| Medion |
0.36% |
|
| MSI |
0.36% |
|
