conhost.exe
Console Window Host by Microsoft
| Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| MD5: | bd51024fb014064bc9fe8c715c18392f |
| SHA1: | 680dec0f8907f4b8911fbe2aa5f2fd25425be0b0 |
| SHA256: | 23f7ab98268f88e6ca9ee96b3ddbc6aa745bffacd2e5f80a211ce48d976eb9a4 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is conhost.exe?
conhost.exe is the new host process for console windows. Previously those were handled by csrss.exe which is the “Client Server Runtime Process”, a process running with system-level privileges. Starting with Windows Vista, Microsoft made some very substantial improvements and changes in regard to security. One of those changes was that applications running in different “levels” or as different users weren't allowed to exchange data freely.
About conhost.exe (from Microsoft)
“ConHost (Console Host) runs in the same security context as its associated console application. Instead of issuing an LPC request to CSRSS for message-handling, the request goes to ConHost. As a res”
Details
| File name: | conhost.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Console Window Host |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\conhost.exe |
| Original name: | CONHOST.EXE.MUI |
| File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| Product version: | 6.1.7600.16385 |
| Size: | 330 KB (337,920 bytes) |
| Digital DNA |
| PE subsystem: | Windows GUI |
| Entropy: | 6.501326 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00018900% | |
| Kernel CPU: | 0.00014744% | |
| User CPU: | 0.00004157% | |
| Kernel CPU time: | 6,248 ms/min | |
| CPU cycles: | 11,071/sec | |
| Context switches: | 2/sec | |
| Memory |
| Private memory: | 1.12 MB | |
| Private (maximum): | 2.1 MB | |
| Private (minimum): | 1.6 MB | |
| Non-paged memory: | 1.12 MB | |
| Virtual memory: | 31.7 MB | |
| Virtual memory (peak): | 32.67 MB | |
| Working set: | 1.63 MB | |
| Working set (peak): | 3.03 MB | |
| Page faults: | 867/min | |
| I/O |
| I/O read transfer: | 0 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 0 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 2 | |
| Handles: | 36 | |
| GUI GDI count: | 24 | |
| GUI GDI peak: | 26 | |
| GUI USER count: | 7 | |
| GUI USER peak: | 7 | |
Process properties
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
21.50% |
|
| Windows 8.1 |
17.00% |
|
| Windows 8.1 Pro |
14.00% |
|
| Windows 8 |
10.50% |
|
| Windows 8.1 Single Language |
7.50% |
|
| Windows 8 Pro |
7.00% |
|
| Windows 7 Home Premium |
5.00% |
|
| Windows 8 Single Language |
3.50% |
|
| Windows 8.1 Pro with Media Center |
3.00% |
|
| Windows 7 Professional |
3.00% |
|
| Windows 8 Enterprise N |
2.50% |
|
| Windows 7 Starter |
1.50% |
|
| Windows 8.1 Enterprise Evaluation |
1.00% |
|
| Windows 7 Home Basic |
1.00% |
|
| Windows Developer Preview |
0.50% |
|
| Windows 8.1 Enterprise |
0.50% |
|
| Windows 8 Pro with Media Center |
0.50% |
|
| Windows 8 Enterprise |
0.50% |
|
Distribution by country
United States installs about 25.13% of Console Window Host.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
19.15% |
|
| Dell |
18.44% |
|
| ASUS |
18.44% |
|
| Toshiba |
9.22% |
|
| Hewlett-Packard |
8.16% |
|
| Acer |
8.16% |
|
| Intel |
6.38% |
|
| Sony |
4.96% |
|
| Alienware |
2.84% |
|
| NEC |
1.42% |
|
| American Megatrends |
1.06% |
|
| Samsung |
0.71% |
|
| Medion |
0.71% |
|
| GIGABYTE |
0.35% |
|
