ssh.exe

Windows ProcessMicrosoft Corporation

Also called ssh, openssh client, windows ssh

WindowsSystem Component

OpenSSH client shipped in System32\OpenSSH. It is not sshd (the server) and not the ssh binary inside a WSL distro.

What you need to know

This is the SSH client, not sshd and not WSL ssh.

ssh.exe in System32\OpenSSH is the Windows OpenSSH client. sshd.exe is the optional OpenSSH Server. Linux `ssh` inside Ubuntu is a different file in the distro (host view: WSL processes / vmmemWSL). Ending this client drops that outbound session only.

Safe?: Yes, in System32\OpenSSH
Same as sshd?: No. This is the client
Same as WSL ssh?: No. That is Linux ssh in the distro

Feex says

If I started ssh from PowerShell, I expect System32\OpenSSH\ssh.exe. I do not stop sshd unless this PC is the server, and I do not wsl --shutdown to kill a Windows client.

What is ssh.exe?

This is the SSH client, not sshd and not WSL ssh. The inbox path is System32\OpenSSH\ssh.exe. The server optional feature is sshd. A prompt inside Ubuntu uses Linux ssh, not this image.

What does it do?

It opens an outbound SSH session. It does not listen as a server and it does not start WslService.

Why is it running?

You, Git, VS Code Remote-SSH, or a script called the Windows client. A listen on port 22 on this PC is sshd or another server, not this process.

Is it safe?

Usually safe

System32\OpenSSH\ssh.exe is Microsoft OpenSSH client. An ssh.exe in Downloads is not. This is still not sshd and not /usr/bin/ssh in WSL.

A legitimate copy normally runs from:

C:\Windows\System32\OpenSSH\ssh.exe

OpenSSH Client optional feature
Server sibling: sshd.exe, not this file
WSL sibling: Linux ssh inside the distro

Can I end it?

Drops that SSH session

Ending ssh.exe disconnects that client. sshd on this PC can keep listening. A WSL ssh session is a different process in the distro.

Can I remove it?

Optional features, not Explorer

Turn OpenSSH Client off from Optional features if you want this gone. Do not delete System32\OpenSSH. Uninstalling WSL does not remove this client. Do not remove sshd to delete the client.

Should it start with Windows?

A script can start it. OpenSSH Server autostart is sshd, not this client.

Normal resource behavior

These are contextual labels, not universal averages.

CPU: Follows the session (tunnels, scp)
Memory: Small for an interactive shell
Disk: Known_hosts and keys under the user profile
Network: The SSH connection

File information

ssh.exe file information
Executable name	ssh.exe
Common legitimate path	C:\Windows\System32\OpenSSH\ssh.exe
Publisher	Microsoft Corporation
Signature expectation	Signed by Microsoft Windows

Common problems

They disable OpenSSH Server to stop an outbound Git fetch

Git called the client. sshd was never this session. End ssh.exe or the Git command.

Remote in WSL, they end this Windows ssh.exe

Linux ssh is inside the distro. Host RAM is vmmemWSL. This path is System32\OpenSSH.

Troubleshooting

Diagnose before you change anything destructive.

where.exe ssh and the full path

System32\OpenSSH\ssh.exe is this article. A path under \\wsl.localhost is WSL ssh. sshd.exe is the server.

Optional features: OpenSSH Client versus OpenSSH Server

Repair the client feature if the exe is missing. Do not delete files from System32.

Technical details

ssh.exe technical details
Image name	ssh.exe
Role	Windows OpenSSH client

Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. How we research.

Microsoft Learn: OpenSSH overview · Windows ships OpenSSH client and optional server
Microsoft Learn: OpenSSH client · ssh.exe is the client in System32\OpenSSH
Foxhole process map · First-party samples on Windows PCs. Not a lab benchmark.

Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.