Try now

Program info

Estimated safety rating


winlogon.exe may be a dangerous application, according to heuristic analysis. It triggers many of the "probable danger" flags described bellow. It is yet unknown if winlogon.exe is malware or a legit program which doesn't cause harm the PC. We advise you to be careful with this program.

Executable file path


Usually, this application is found in C:\WINDOWS\system32\winlogon.exe.

MD5 hash of the executable file


The MD5 fingerprint for this file is 4bb6301d634c857a5089e8b24c5555e4.

Is running as a service


This program does NOT operate as a Windows service. This is normally a good sign.

Is a 32 bit executable file


This app runs as a 32-bit program. It does not benefit of the full power of modern PC processors. This ordinarily happens because the publishers did not bother to upgrade it to use the x64 instruction set.

File description

 Application d'ouverture de session Windows NT

The description written in the file is Application d'ouverture de session Windows NT.

File version

 5.1.2600.5512 (xpsp.080413-2113)

File version 5.1.2600.5512 (xpsp.080413-2113).


 Microsoft Corporation

Publisher Microsoft Corporation.


 © Microsoft Corporation. Tous droits réservés.

Copyright notice © Microsoft Corporation. Tous droits réservés..

Potentially dangerous functions


Some insecure functions of the Operating System have been used, such as functions for intercepting the keyboard. We advise you to perform more in-depth research about this program.

Digitally signed


The digital certificate is missing from this program. The publisher did not sign it. This is usually bad.

Can be uninstalled


This program does NOT have a removal routine set up in registry.