LockAppHost.exe
by Microsoft
Operating System
Summary
Windows Lock Screen Host - hosts the lock screen application container process.
LockAppHost.exe is the 310th most commonly executed Windows program in EchoTrail's dataset, observed 31,386 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.
310th
most commonly executed Windows program
31,386
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 81707b07e8b3a3034f748fa87242ef2e9fb46e6966ab70935fab7c5622d0eb3e91.71%
- 7dcd690ff965f80df86f325ca206573c50e7799cc72279594d2cf0d973e672015.71%
- 825749560e4f85ef3d8b7fa6ec5b3ab02df66fe9b63512cf6ebf8d2b08dcccd32.03%
- 6607b3ff9755e18c555107b144e293bebe37189ffaed25e1c325a14097ad032f0.33%
- 84e652597ee67bac3a3a8d51523009089027c387f190542e1a9dfe9678d755f20.07%
- 0c1850fa02641c11961577c0e63e2c9eca8c7d6e52036559186c0ec5cfffcab30.05%
- d44b0f6419a0b2b0202c038a299473e290c9f69f092189d1384fd380ccb42ab30.04%
- 8fa807413ed06776c6839c2fbb4a426c81aadc72db1b25018080d4045cdd16560.03%
- 27615f3a032d8cb5c8bbfbd550f88bbf938965658ba834f6dfd5f5507e4eb9180.02%
- f9a38d85aee5f4bd265be9c2da06fda85ce8ebbb9bdffeb478cf3eb48cd10b95<0.01%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe99.97%
Top Children
- WerFault.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about LockAppHost.exe
Rocky answers questions about LockAppHost.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.