Estimated safety rating

winlogon.exe may be a dangerous application, according to heuristic analysis. It triggers too many of the "probable danger" criteria described bellow. It is not yet known if winlogon.exe is malware or a legit program which doesn't cause harm the PC. We recommend you to be careful with this program.

Executable file path

This program is usually found on disk in C:\WINDOWS\system32\winlogon.exe.

MD5 hash of the executable file

The MD5 fingerprint for this program is 213c80d912880bbf04453d09ffccb28c.

Is running as a service

This program does NOT run as a Windows service. This is normally a good sign.

Is a 32 bit executable file

This program runs as a 32-bit program. It can not benefit of the entire power of nowadays' PC CPUs. This is quite normal because the authors did not upgrade it to use the x64 instruction set.

File description

The description extracted from the exe is Aplicación de inicio de sesión de Windows NT.

File version

File version extracted from the file 5.1.2600.5512 (xpsp.080413-2113).

Manufacturer

Publisher Microsoft Corporation.

Copyright

Copyright notice © Microsoft Corporation. Reservados todos los derechos..

Potentially dangerous functions

Some insecure functions of the Operating System have been used, such as functions for recording the keyboard. We recommend you to perform more in-depth research about this program.

Digitally signed

The digital certificate is missing from this program. The maker did not bother to sign it. This is probably bad.

Can be uninstalled

This executable does NOT have a removal routine set up in registry.