slui.exe
by Microsoft
Operating System
Summary
Windows Software Licensing UI - handles Windows activation dialogs and license key input.
slui.exe is the 373rd most commonly executed Windows program in EchoTrail's dataset, observed 22,208 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by SppExtComObj.Exe.
373rd
most commonly executed Windows program
22,208
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 697c94655c4efba4c4a9c45b4d24db80334184857f54acdbf2e5df3b9d9fa37529.53%
- d192199bfb64e0bf52e6df248718101fe12e33cbe20d9660fea037204e77427818.57%
- 01a2c7a0db16656813164dc34f2937e5b3a1a979577c249556a855f9037662bb16.17%
- e28263f4da43e8598412ba0d13e4d2e6940de6a02e40109befaa4e69fce693c110.58%
- 85f239855c6dc7cf327a8bc668d9adc5f12018252bad0d8ab2cd6928f04d64149.66%
- 1e497c6c9442f78ca7647bdf79b059acbdfefac204c12bfe32a484377f7395f86.12%
- 67daef4a468f00305a44e41b369890fc0d6ed41c509432c6b1402caa1b09b7c51.75%
- 4bf155a2228101f61fdafcadd00889198e9f4e383c160285a07c4a48e977c8021.37%
- b20f0b33d9189a14d959c6a3a4edebe2e94a35e178d235c630a1da7f8223b6fd1.24%
- bae28691ee1df6693795c679a8d097edf39ace2758dae4a80d00fbb79cc0bb771.03%
Process Ancestry
Top Grandparents
- svchost.exe75.14%
- services.exe24.84%
- explorer.exe0.02%
Top Parents
- SppExtComObj.Exe88.98%
- svchost.exe10.98%
- ServerManager.exe0.02%
- cmd.exe<0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about slui.exe
Rocky answers questions about slui.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.