What is the "winlogon.exe" ? Variant 15565645

Our database contains 3026 different files for filename winlogon.exe but this page contains information about single file with specific attributes. If you want to see general information about the winlogon.exe then visit General Information Page . You can also check most distributed file variants with name winlogon.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description Windows Logon Application. Agregate rating is 5(5) stars - based on 2 reviews.This is executable file. You can find it running in Task Manager as the process winlogon.exe.

winlogon.exe Process
Product:
Microsoft® Windows® Operating System
Company:
Microsoft Corporation
Description:
Windows Logon Application
Version:
6.2.9200.16433
MD5:
bcf2036a0dd579e47c008c133550283e
SHA1:
c619b7636615127030e0970b01e7fa3cedf1081e
SHA256:
52f95f4a253c431221852fa0e0fb9ab94752fdee597750949460c74242887b09
Size:
517120
Directory:
C:\Windows\System32
Operating System:
Windows 8
Occurence:
High oc2

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :
Antivirus NameLatest Toleration
Malwarebytes2016-12-28
Avast Antivirus2016-12-27
Panda Free Antivirus2016-12-25
Windows Defender2016-12-19
ESET Smart Security 10.0.369.12016-12-16
avast! Antivirus2016-12-13
360 Total Security2016-12-11
Avira Antivirus2016-11-28
F-Secure Client Security Premium 12.002016-09-05 11:27:49
Windows Defender2016-09-05 02:12:34
Avira Antivirus2016-09-03 21:25:11
Antivirus shields were enabled and have latest antivirus database.

Is the Process "winlogon.exe" Safe or Threat ?

Loading Graph
100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.
Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.
Filename "winlogon.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

96% of reviewed files with different MD5 are marked as Safe .
68% of reviewed files with different MD5 located in different directory are marked as Safe .
32% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "winlogon.exe"

  • SAFErating from user rots

  • SAFErating from user MikeOne (Variant: 15565645)

    winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%