Try now

Program info

Estimated safety rating


winlogon.exe is a program which is most likely NOT a virus. So, if winlogon.exe is on your laptop or desktop computer, it is most likely ok, and will NOT be a cause for concern. Even if your system is clean, it is still recommended to run a good antivirus with a good track record, in order to defend your PC against potential security problems.

Executable file path


Normally, this application is found in C:\WINDOWS\system32\winlogon.exe.

MD5 hash of the executable file


The MD5 fingerprint for this file is 5dac883c68d261d406489f3f990d8ddf.

Is running as a service


This program does NOT run as a Windows service. This is normally a good sign.

Belongs to the operating system


winlogon.exe appears to use the functions of Windows SFC (System File Checker) or Windows File Protection.

Is a 32 bit executable file


This executable runs in 32-bit mode. It does not benefit of the entire power of modern computer chips. This is quite normal because the authors did not upgrade it to use the x64 instruction set.

File description

 Windows NT-Anmeldung

The description present in the exe is Windows NT-Anmeldung.

File version

 5.1.2600.0 (xpclient.010817-1148)

File version extracted from the file 5.1.2600.0 (xpclient.010817-1148).


 Microsoft Corporation

Producer Microsoft Corporation.


 © Microsoft Corporation. Alle Rechte vorbehalten.

Legal copyright © Microsoft Corporation. Alle Rechte vorbehalten..

Has valid windows


This program does NOT have visible windows. This is most likely a bad sign.

Potentially dangerous functions


Some insecure features of the Operating System have been used, such as functions for recording the keyboard. We advise you to be very careful regarding this program.

Digitally signed


winlogon.exe has a digital signature. Nowadays most serious programs are digitally signed.

Valid digital signature


The digital signature extracted from winlogon.exe checks out perfectly. This is excellent.

Certifier name

 Microsoft Windows XP Publisher

Digitally signed by: Microsoft Windows XP Publisher

Issuer name

 Microsoft Windows Verification Intermediate PCA

Certificate's issuer name: Microsoft Windows Verification Intermediate PCA

Can be uninstalled


This application does NOT have an uninstall routine stored in registry.