winlogon.exe may be a dangerous application, according to heuristic analysis. It triggers many of the "probable danger" flags described bellow. It is yet unknown if winlogon.exe is malware or a legit program which doesn't cause harm the PC. We advise you to be careful with this program.
Usually, this application is found in C:\WINDOWS\system32\winlogon.exe.
The MD5 fingerprint for this file is 4bb6301d634c857a5089e8b24c5555e4.
This program does NOT operate as a Windows service. This is normally a good sign.
This app runs as a 32-bit program. It does not benefit of the full power of modern PC processors. This ordinarily happens because the publishers did not bother to upgrade it to use the x64 instruction set.
The description written in the file is Application d'ouverture de session Windows NT.
File version 5.1.2600.5512 (xpsp.080413-2113).
Publisher Microsoft Corporation.
Copyright notice © Microsoft Corporation. Tous droits réservés..
Some insecure functions of the Operating System have been used, such as functions for intercepting the keyboard. We advise you to perform more in-depth research about this program.
The digital certificate is missing from this program. The publisher did not sign it. This is usually bad.
This program does NOT have a removal routine set up in registry.