Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	5.49%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.61%
6.2.9200.16384 (win8_rtm.120725-1247)	3.66%
6.2.9200.16384 (win8_rtm.120725-1247)	18.90%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	14.63%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	31.71%
6.1.7600.16385 (win7_rtm.090713-1255)	3.66%
6.1.7600.16385 (win7_rtm.090713-1255)	5.49%
6.00.2900.5512 (xpsp.080413-2105)	4.88%
6.00.2900.5512 (xpsp.080413-2105)	0.61%
6.00.2900.3311 (xpsp.080212-0004)	1.22%
6.0.6001.18000 (longhorn_rtm.080118-1840)	1.22%
6.0.6001.18000 (longhorn_rtm.080118-1840)	7.93%

Relationships

PE file structure

Show functions

Import table

api-ms-win-core-com-l1-1-0.dll

CoUninitialize, CoCreateInstance, CoInitializeEx

kernel32.dll

LocalFree, SetPriorityClass, GetCurrentProcess, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoW, InterlockedCompareExchange, Sleep, InterlockedExchange, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, LocalAlloc, GetCurrentProcessId

msvcrt.dll

DllMain

ole32.dll

CoCreateInstance, CoUninitialize, CoInitializeEx

logonui.exe

Windows Logon User Interface Host by Microsoft

Remove logonui.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	93e6a39b1db898f7c949fa5567e774cf
SHA1:	a04f7b22e053326d209617fbf593a2a0e1286d1f
SHA256:	914f12718cef019de2ab18776dd23c669f218b4fa2292becfe34a95872040789

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is logonui.exe?

Windows Logon UI (LogonUI.exe) implements the graphical user interface shown when a user is asked to log in to the local machine.

Overview

LogonUI.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent winlogon.exe (Windows Logon Application by Microsoft). This version is designed to run on Windows 7 and is compiled as a 64 bit program.

Details

File name:	LogonUI.exe
Publisher:	Microsoft Corporation
Product name:	Windows Logon User Interface Host
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\logonui.exe
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	27 KB (27,648 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	5.244596
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00145933%	0.028634%
Kernel CPU:	0.00064308%	0.013761%
User CPU:	0.00081625%	0.014873%
Kernel CPU time:	125 ms/min	100,923,805ms/min
CPU cycles:	8,690,903/sec	17,470,203/sec
Context switches:	3/sec	284/sec
Memory
Private memory:	11.04 MB	21.59 MB
Private (maximum):	18.89 MB
Private (minimum):	16.42 MB
Non-paged memory:	11.04 MB	21.59 MB
Virtual memory:	110 MB	140.96 MB
Virtual memory (peak):	115.23 MB	169.69 MB
Working set:	15.79 MB	18.61 MB
Working set (peak):	30.08 MB	37.95 MB
Page faults:	16,563/min	2,039/min
I/O
I/O read transfer:	49.91 KB/sec	1.02 MB/min
I/O read operations:	4/sec	343/min
I/O write transfer:	104 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	7.64 KB/sec	448.09 KB/min
I/O other operations:	545/sec	1,671/min
Resource allocations
Threads:	7	12
Handles:	186	600
GUI GDI count:	112	103
GUI GDI peak:	120	142
GUI USER count:	12	49
GUI USER peak:	18	71

Process properties

Integrety level:	System
Platform:	64-bit
Command lines:	"logonui.exe" /flagC:0x0 "logonui.exe" /flagC:0x1
Owner:	SYSTEM
Parent processes:	winlogon.exe (Windows Logon Application by Microsoft) wininit.exe (Windows Start-Up Application by Microsoft)

Threads

Averages

LogonUI.exe (main module)
Total CPU:	0.00414809%	0.272967%
Kernel CPU:	0.00163976%	0.107585%
User CPU:	0.00250833%	0.165382%
CPU cycles:	117,609/sec	5,741,424/sec
Context switches:	1/sec	79/sec
Memory:	44 KB	1.16 MB
ntdll.dll
Total CPU:	0.00061226%
Kernel CPU:	0.00061226%
User CPU:	0.00000000%
CPU cycles:	3,548/sec
Memory:	1.67 MB
authui.dll
Total CPU:	0.00032506%
Kernel CPU:	0.00020035%
User CPU:	0.00012471%
CPU cycles:	9,453/sec
Memory:	1.84 MB

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	29.41%
Windows 7 Ultimate	12.42%
Windows 7 Professional	11.76%
Windows 8	9.15%
Windows 8 Pro	9.15%
Windows Vista Home Premium	5.23%
Windows 8 Single Language	3.27%
Windows 8.1	2.61%
Windows Vista Business	1.96%
Windows 7 Starter	1.96%
Windows 7 Home Basic	1.96%
Windows 8.1 Pro	1.31%
Windows 8.1 Single Language	1.31%
Windows 8 Pro with Media Center	1.31%
Windows 8 Enterprise	1.31%
Windows Vista Home Basic	1.31%
Windows 8.1 Enterprise Evaluation	0.65%
Windows 8.1 Pro Preview	0.65%
Windows Server 2008 Standard	0.65%
Windows 7 Ultimate N	0.65%
Microsoft Windows XP	0.65%
23 other Windows OS version

Distribution by country

United States installs about 44.67% of Windows Logon User Interface Host.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	19.23%
Toshiba	19.23%
Hewlett-Packard	16.35%
ASUS	11.54%
Sony	9.62%
Acer	8.65%
Lenovo	5.77%
Alienware	3.85%
GIGABYTE	1.92%
Samsung	1.92%
Gateway	1.92%

Remove Adware and Spyware Programs, FREE Download!