winlogon.exe may be a dangerous program, according to an automatic analysis of the program's operation. This program triggers many of the "possible danger" flags described in this document. It is yet unknown if winlogon.exe is malware or not which doesn't harm the PC. We recommend you to be careful with it.
Normally, this program is stored in C:\Ug13Pl3VG6rj\winlogon.exe.
The MD5 fingerprint for this program is 41f3d015c009f7889ce9352206a6aef3.
This application does NOT operate as a Windows service. This is normally a good sign.
This app runs as a 32-bit program. It can not benefit of the entire set of features of current PC processors. This ordinarily happens because the makers did not bother to upgrade it to 64-bit code.
The description written in the exe is Remote Service Application.
File version 1, 0, 0, 1.
Maker Microsoft Corp..
Copyright notice Copyright (C) 1999.
This executable does NOT have visible windows. This is most likely a bad thing.
The code of this program seems to be compressed or encrypted so it can not be quickly evaluated by an expert.
A digital signature is missing from this program. The maker did not bother to sign it. This is usually bad.
This program is set up to start when the PC boots. Yes
This application does NOT have a removal routine stored in registry.