notepad.exe

Application ProcessMicrosoft Corporation

Also called notepad, windows notepad

WindowsApplication

Windows Notepad. On Windows 11 the Store package can replace the old System32-only editor while the process name stays notepad.exe.

What you need to know

This is Notepad. The Windows 11 Store build still uses notepad.exe, not a new mystery name.

notepad.exe is Windows Notepad. Windows 11 ships a Store-updated editor with tabs. The classic System32 notepad still exists for compatibility. Both can show as notepad.exe.

Safe?: Yes, from Windows
Why does it look new?: Windows 11 Store Notepad
Should I end it?: You lose unsaved text

Feex says

If notepad.exe looks like a modern app, I would treat that as the Store Notepad, not as malware restyling Task Manager. The unsaved buffer still dies if you end it.

What is notepad.exe?

notepad.exe is Notepad. Windows 11 may redirect the command to the Store package. The process name did not become TextInputHost.exe.

What does it do?

It edits plain text. Tabs and dark mode are the new UI. It is not Word (WINWORD.EXE) and it is not VS Code.

Why is it running?

You opened a .txt file or ran notepad from Run. A notepad.exe in a payload folder that opens a blank window and then a download is a fake.

Is it safe?

Usually safe

Microsoft-signed notepad from System32 or WindowsApps is Notepad. A notepad.exe that is 12 MB and launched from Temp is not the editor.

A legitimate copy normally runs from:

C:\Windows\System32\notepad.exe

Windows 11 may use the Store package
Classic System32 file remains for compatibility
Publisher: Microsoft Corporation

Can I end it?

Loses unsaved text

Ending notepad.exe closes the editor. Windows 11 Notepad may have session restore. Do not rely on it.

Can I remove it?

Optional Store app

You can uninstall the Store Notepad on some SKUs. Do not delete System32\notepad.exe to "debloat" a PC you still type on.

Should it start with Windows?

Notepad should not start with Windows unless a file association or a script opened it.

Normal resource behavior

These are contextual labels, not universal averages.

CPU: Low except on huge logs
Memory: Follows file size
Disk: The file you opened
Network: None for local files

File information

notepad.exe file information
Executable name	notepad.exe
Common legitimate path	C:\Windows\System32\notepad.exe
Publisher	Microsoft Corporation
Signature expectation	Signed by Microsoft Windows

Common problems

Two Notepad UIs

Store Notepad versus classic is a Windows 11 feature. The process name stayed notepad.exe on purpose.

People replace notepad with third-party editors

That is an association change. The old notepad.exe file can still be there.

Troubleshooting

Diagnose before you change anything destructive.

Open file location

System32 or WindowsApps. Temp is the wrong answer.

Reinstall Notepad from Optional features or Store

Do not download notepad.exe from a filename wiki.

Technical details

notepad.exe technical details
Image name	notepad.exe
Product	Windows Notepad

Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. How we research.

Microsoft Support: Notepad · Current Notepad
Microsoft Store: Windows Notepad · Store package
Foxhole process map · First-party samples on Windows PCs. Not a lab benchmark.

Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.