Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 5.49%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.61%
6.2.9200.16384 (win8_rtm.120725-1247) 3.66%
6.2.9200.16384 (win8_rtm.120725-1247) 18.90%
6.1.7601.17514 (win7sp1_rtm.101119-1850) 14.63%
6.1.7601.17514 (win7sp1_rtm.101119-1850) 31.71%
6.1.7600.16385 (win7_rtm.090713-1255) 3.66%
6.1.7600.16385 (win7_rtm.090713-1255) 5.49%
6.00.2900.5512 (xpsp.080413-2105) 4.88%
6.00.2900.5512 (xpsp.080413-2105) 0.61%
6.00.2900.3311 (xpsp.080212-0004) 1.22%
6.0.6001.18000 (longhorn_rtm.080118-1840) 1.22%
6.0.6001.18000 (longhorn_rtm.080118-1840) 7.93%

Relationships

Parent processes
Child processes

logonui.exe

Windows Logon User Interface Host by Microsoft

Remove logonui.exe
Version:   6.1.7601.17514 (win7sp1_rtm.101119-1850)
MD5:   715f03b4c7223349768013ea95d9e5b7
SHA1:   f5778343588df78fdd55c9cfcd49e5f39f959dd9
SHA256:   09ab0535a54c2e2962f0fd06988d99060f8ceca39b07ac00a63204c773b95893
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is logonui.exe?

Windows Logon UI (LogonUI.exe) implements the graphical user interface shown when a user is asked to log in to the local machine.

Overview

LogonUI.exe executes as a process with the local user's privileges typically within the context of its parent winlogon.exe (Windows Logon Application by Microsoft). This version is designed to run on Windows 7 and is compiled as a 64 bit program.

DetailsDetails

File name:LogonUI.exe
Publisher:Microsoft Corporation
Product name:Windows Logon User Interface Host
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\logonui.exe
File version:6.1.7601.17514 (win7sp1_rtm.101119-1850)
Product version:6.1.7601.17514
Size:27 KB (27,648 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:5.244596
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.02455960%
0.028634%
Kernel CPU:0.01070453%
0.013761%
User CPU:0.01385507%
0.014873%
Kernel CPU time:178,094 ms/min
100,923,805ms/min
CPU cycles:3,020,027/sec
17,470,203/sec
Context switches:7/sec
284/sec
Memory
Private memory:15.61 MB
21.59 MB
Private (maximum):25.19 MB
Private (minimum):18.33 MB
Non-paged memory:15.61 MB
21.59 MB
Virtual memory:128.2 MB
140.96 MB
Virtual memory (peak):130.81 MB
169.69 MB
Working set:20.48 MB
18.61 MB
Working set (peak):35.25 MB
37.95 MB
Page faults:34,187/min
2,039/min
I/O
I/O read transfer:33.46 KB/sec
1.02 MB/min
I/O read operations:10/sec
343/min
I/O write transfer:6 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:16.36 KB/sec
448.09 KB/min
I/O other operations:194/sec
1,671/min
Resource allocations
Threads:8
12
Handles:203
600
GUI GDI count:124
103
GUI GDI peak:134
142
GUI USER count:18
49
GUI USER peak:23
71

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"logonui.exe" /flagC:0x0
Owner:User
Parent process:winlogon.exe (Windows Logon Application by Microsoft)

ResourcesThreads

Averages
 
MSVCR80.dll
Total CPU:4.58147076%
0.272967%
Kernel CPU:0.02896568%
0.107585%
User CPU:4.55250508%
0.165382%
CPU cycles:106,330,604/sec
5,741,424/sec
Memory:804 KB
1.16 MB
ksproxy.ax
Total CPU:1.32362968%
Kernel CPU:0.07023620%
User CPU:1.25339348%
CPU cycles:33,653,746/sec
Memory:260 KB
FpCredProv.dll
Total CPU:0.09634334%
Kernel CPU:0.03967079%
User CPU:0.05667255%
CPU cycles:2,298,159/sec
Memory:360 KB
quartz.dll
Total CPU:0.01102879%
Kernel CPU:0.00649758%
User CPU:0.00453121%
CPU cycles:289,291/sec
Memory:1.7 MB
AFSSClientLib64.dll
Total CPU:0.00724550%
Kernel CPU:0.00144903%
User CPU:0.00579647%
CPU cycles:118,206/sec
Memory:1.68 MB
LogonUI.exe (main module)
Total CPU:0.00344634%
Kernel CPU:0.00178736%
User CPU:0.00165898%
CPU cycles:323,425/sec
Context switches:2/sec
Memory:44 KB
authui.dll
Total CPU:0.00124603%
Kernel CPU:0.00112614%
User CPU:0.00011988%
CPU cycles:11,178/sec
Memory:1.85 MB
ntdll.dll
Total CPU:0.00046679%
Kernel CPU:0.00046679%
User CPU:0.00000000%
CPU cycles:590/sec
Memory:1.66 MB
SmartcardCredentialProvider.dll
Total CPU:0.00004988%
Kernel CPU:0.00004988%
User CPU:0.00000000%
CPU cycles:128/sec
Memory:200 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 29.41%
Windows 7 Ultimate 12.42%
Windows 7 Professional 11.76%
Windows 8 9.15%
Windows 8 Pro 9.15%
Windows Vista Home Premium 5.23%
Windows 8 Single Language 3.27%
Windows 8.1 2.61%
Windows Vista Business 1.96%
Windows 7 Starter 1.96%
Windows 7 Home Basic 1.96%
Windows 8.1 Pro 1.31%
Windows 8.1 Single Language 1.31%
Windows 8 Pro with Media Center 1.31%
Windows 8 Enterprise 1.31%
Windows Vista Home Basic 1.31%
Windows 8.1 Enterprise Evaluation 0.65%
Windows 8.1 Pro Preview 0.65%
Windows Server 2008 Standard 0.65%
Windows 7 Ultimate N 0.65%
Microsoft Windows XP 0.65%
23 other Windows OS version

Distribution by countryDistribution by country

United States installs about 44.67% of Windows Logon User Interface Host.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 19.23%
Toshiba 19.23%
Hewlett-Packard 16.35%
ASUS 11.54%
Sony 9.62%
Acer 8.65%
Lenovo 5.77%
Alienware 3.85%
GIGABYTE 1.92%
Samsung 1.92%
Gateway 1.92%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE