winlogon.exe is a application which is most likely legit. So, if winlogon.exe is on your PC, it is most likely ok, and will NOT be a cause for concern. Even if your system is clean, we still advise you to use a well-known antivirus with a good track record, in order to yourself yourself against potential security problems.
This program is usually found on disk in C:\Windows\System32\winlogon.exe.
The MD5 fingerprint for this executable is ec498bae1f0d3e0e401c963f8d76c437.
This program is NOT registered as a Windows service. This is very good.
winlogon.exe seems to use the functions of Windows SFC (System File Checker) or Windows File Protection.
This is a x64 executable. It runs using the full capacity of modern CPUs.
winlogon.exe is digitally signed. Today most serious software applications are digitally signed.
The digital signature extracted from winlogon.exe checks out perfectly. This is very good.
Digitally signed by: Microsoft Windows
Certificate's issuer name: Microsoft Windows Production PCA 2011
This program does NOT have a removal routine stored in registry.