regedit.exe

Windows ProcessMicrosoft Corporation

Also called regedit, registry editor, regedt32

WindowsSystem Component

Registry Editor. It is the hive browser UI. The Task Manager row named Registry is the kernel hive working set, not this editor.

What you need to know

regedit edits the registry hive UI, it is not the Registry process.

regedit.exe is Registry Editor. The Registry process that appeared in Windows 10 1809 holds hive pages for the memory manager. Ending the editor does not free that hive RAM.

Safe?: Yes, as the editor
Same as Registry in Task Manager?: No. That row holds hive memory
Should I end it?: The editor closes. Unsaved key edits can drop

Feex says

If Task Manager says Registry and someone opens regedit to "kill it," I stop them. That row is hive memory. This exe is the tree view you should not browse as a first repair.

What is regedit.exe?

regedit.exe is Registry Editor. It browses and changes keys. It is not the Registry process that accounts for hive memory after Windows 10 version 1809.

What does it do?

It loads hives into a tree, exports .reg files, and writes values you confirm. It does not host hive working-set memory the way the Registry row does.

Why is it running?

You ran regedit, a support article opened it, or a .reg file invoked the editor. A copy that starts at logon is a shortcut you should not keep.

Is it safe?

Usually safe as the editor

Windows\regedit.exe or System32\regedit.exe signed by Microsoft is the editor. A regedit.exe in Temp is not. The Registry process is still a different row.

A legitimate copy normally runs from:

C:\Windows\regedit.exe

Also present as System32\regedit.exe
Not the Registry hive process
Back up before you edit keys

Can I end it?

Closes the editor

Ending regedit.exe closes the tree. An unsaved edit can vanish. It does not stop the Registry process and it does not unlock a hive.

Can I remove it?

Do not delete regedit.exe. Policy can hide the editor. That is not the same as deleting the file.

Should it start with Windows?

On demand. It should not sit in Startup Apps.

Normal resource behavior

These are contextual labels, not universal averages.

CPU: Low while you browse
Memory: Small
Disk: Hive reads and .reg exports
Network: None

File information

regedit.exe file information
Executable name	regedit.exe
Common legitimate path	C:\Windows\regedit.exe
Publisher	Microsoft Corporation
Signature expectation	Signed by Microsoft Windows

Common problems

People delete keys because the Registry row looks large

Hive size is stored configuration. Closing regedit does not shrink that row.

Forum .reg "fixes"

Those files are a favorite payload. Read every key before you merge.

Troubleshooting

Diagnose before you change anything destructive.

Split the names in Task Manager

Registry is the hive host. regedit.exe is the window you opened.

Export a key before you change it

That is the supported undo. Do not replace regedit from a zip.

Technical details

regedit.exe technical details
Image name	regedit.exe
Role	Registry Editor UI

Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. How we research.

Microsoft Learn: Registry · Editor versus hive store
Microsoft Learn: Registry hives · Hive files the Registry process holds
Microsoft: Registry Editor for advanced users · regedit UI
Foxhole process map · First-party samples on Windows PCs. Not a lab benchmark.

Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.