What is the "winlogon.exe" ? Variant 507969

Our database contains 3174 different files for filename winlogon.exe but this page contains information about single file with specific attributes. If you want to see general information about the winlogon.exe then visit General Information Page . You can also check most distributed file variants with name winlogon.exe. This file belongs to product Microsoft(R) Windows(R) Operating System and was developed by company Microsoft Corporation. This file has description Windows NT Logon Application. This is executable file. You can find it running in Task Manager as the process winlogon.exe.

Product:: Microsoft(R) Windows(R) Operating System
Company:: Microsoft Corporation
Description:: Windows NT Logon Application
Version:: 5.1.2600.5512
MD5:: 440eda2420cfa1b3b2ab4725fc33825d
SHA1:: e7f961947a0f03da2f883f17722ffc7c00031a3f
SHA256:: 200154b1d95f61bc55b314f7125c57b9b62d86be5129ce8c2ff09b8f8d85f0e5
Size:: 493056
Directory:: C:\Windows\System32
Operating System:: Windows XP
Occurence:: High

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :

Antivirus Name	Latest Toleration
Symantec Endpoint Protection	2016-06-27 04:43:14
ESET Smart Security 8.0	2016-04-23 11:42:12
360	2016-02-08 05:18:28

Antivirus shields were enabled and have latest antivirus database.

Is the Process "winlogon.exe" Safe or Threat ?

There is no review for "winlogon.exe" with defined attributes. If you want to check MD5 of this file via public VirusTotal database, then press .

Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.

Is this Process suspect for you? Is your computer running slow? Do you experiencing some suspicious behaviour in your computer? We recommends make free computer scan with our free award-winning tool .

96% of reviewed files with different MD5 are marked as Safe .

68% of reviewed files with different MD5 located in different directory are marked as Safe .
32% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "winlogon.exe"

This file has no approved reviews! If you know this file, you can add own review .

Reviews of all winlogon.exe variants

Reviews for different files with filename "C:\Windows\System32\winlogon.exe"

SAFErating from user Yo for file C:\Windows\System32\winlogon.exe (Variant: 41881675)
Safe as long as it is part of System32
SAFErating from user ben for file C:\Windows\System32\winlogon.exe (Variant: 41170491)
ok
SAFErating from user Ben for file C:\Windows\System32\winlogon.exe (Variant: 41170491)
ok
SAFErating from user roofjunkie for file C:\Windows\System32\winlogon.exe (Variant: 40502443)
OK
THREATrating from user Stiv for file C:\Windows\System32\winlogon.exe
SAFErating from user street for file C:\Windows\System32\winlogon.exe
SAFErating from user Bert for file C:\Windows\System32\winlogon.exe
SAFErating from user noviczky for file C:\Windows\System32\winlogon.exe
SAFErating from user MikeOne for file C:\Windows\System32\winlogon.exe (Variant: 24851054)
winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
SAFErating from user 3hlav for file C:\Windows\System32\winlogon.exe
SAFErating from user Mikel for file C:\Windows\System32\winlogon.exe
SAFErating from user Олег Разин for file C:\Windows\System32\winlogon.exe
SAFErating from user MikeOne for file C:\Windows\System32\winlogon.exe (Variant: 19528110)
winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
"Winlogon is the component of Microsoft Windows operating systems that is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running (requiring another authentication step)." - see more on http://en.wikipedia.org/wiki/Winlogon.exe