winlogon.exe may be a dangerous application, according to heuristic analysis. It triggers too many of the "probable danger" criteria described bellow. It is not yet known if winlogon.exe is malware or a legit program which doesn't cause harm the PC. We recommend you to be careful with this program.
This program is usually found on disk in C:\WINDOWS\system32\winlogon.exe.
The MD5 fingerprint for this program is 213c80d912880bbf04453d09ffccb28c.
This program does NOT run as a Windows service. This is normally a good sign.
This program runs as a 32-bit program. It can not benefit of the entire power of nowadays' PC CPUs. This is quite normal because the authors did not upgrade it to use the x64 instruction set.
The description extracted from the exe is Aplicación de inicio de sesión de Windows NT.
File version extracted from the file 5.1.2600.5512 (xpsp.080413-2113).
Publisher Microsoft Corporation.
Copyright notice © Microsoft Corporation. Reservados todos los derechos..
Some insecure functions of the Operating System have been used, such as functions for recording the keyboard. We recommend you to perform more in-depth research about this program.
The digital certificate is missing from this program. The maker did not bother to sign it. This is probably bad.
This executable does NOT have a removal routine set up in registry.