Plugin Host 64-bit (Chrome/Chromium)
Pluginhost64.exe is a 64-bit Windows process used by Chrome/Chromium-based browsers to host plugin content in a separate process. This isolation helps improve stability and security by containing plugin crashes and reducing cross-tab interference. It typically resides inside the Chrome application folder and starts on-demand when a page requires plugin content.
Pluginhost64.exe runs a dedicated 64‑bit plugin host within Chrome, isolating plugin code from the main browser process. It supports PPAPI/NPAPI plugins and launches only when a page requires plugin content, helping stability and security during plugin-heavy sessions.
pluginhost64.exe is a legitimate Windows process used by Chrome to host 64-bit plugins. When located in the official Chrome installation directory and signed by Google, it is considered safe and integral to the browser’s plugin handling. Misplaced copies or unsigned variants can indicate tampering, so verify the path and signature before relying on it.
While pluginhost64.exe is normally safe, cybercriminals may disguise malware as a plugin host file to trick users. If you observe unusual CPU usage, a suspicious location outside the Chrome folder, or a very large or mismatched file size, treat it as a potential threat and perform a full malware scan. Always verify the digital signature and source before acting.
Red Flags: If pluginhost64.exe is outside the Chrome folder, unsigned, renamed, or unusually large/malformed, stop using Chrome and run a malware check. Do not ignore repeated crashes or suspicious network activity linked to the process.
Reasons it's running:
Pluginhost64.exe is Chrome's 64‑bit plugin host process. It starts when a web page requires a plugin (PDF viewer, embedded media, etc.) to run in isolation from the main browser tab, improving stability and security.
You can end the process through Task Manager if Chrome is unresponsive, but doing so will close all Chrome tabs and potentially lose data. It is safer to close Chrome completely so the host terminates gracefully.
Occasional activity can occur due to background plugin checks, preloading resources, or extensions using plugins. If it stays high without tabs open, run a malware scan and review installed plugins.
The legitimate file typically resides in C:\Program Files\Google\Chrome\Application and is signed by Google. If you see it elsewhere, verify the signature and update or reinstall Chrome.
Disable NPAPI/PPAPI plugins in Chrome settings (chrome://settings/content/plugins) or use extensions that block plugins. This reduces the need for pluginhost64.exe and can improve performance.
Yes, malware can masquerade as a plugin host. Verify the file path, signature, and hash, and run a full system scan. If verification fails, remove the file and reinstall Chrome from the official source.