What is the "winlogon.exe" ? Variant 506853

Our database contains 3174 different files for filename winlogon.exe but this page contains information about single file with specific attributes. If you want to see general information about the winlogon.exe then visit General Information Page . You can also check most distributed file variants with name winlogon.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description Windows NT Logon Application. Agregate rating is 5(5) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process winlogon.exe.

Product:: Microsoft® Windows® Operating System
Company:: Microsoft Corporation
Description:: Windows NT Logon Application
Version:: 5.1.2600.5512
MD5:: ed0ef0a136dec83df69f04118870003e
SHA1:: f77a7cd78877527023ebfb35e83b75ef59d3df07
SHA256:: 45377cb8e9f0120f836fc8261c711f7dbf7199117afb3652ebf100d5f0429b1e
Size:: 507904
Directory:: C:\Windows\System32
Operating System:: Windows XP
Occurence:: High

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :

Antivirus Name	Latest Toleration
Panda Free Antivirus	2016-09-07 23:19:16
Panda Antivirus Pro 2016	2016-09-07 22:57:52
AVG AntiVirus Free Edition	2016-09-07 18:39:01
ZoneAlarm Free Firewall Antivirus	2016-09-07 17:15:23
Avast Antivirus	2016-09-07 07:24:30
AVG Anti-Virus Free Edition 2012	2016-09-07 04:06:13
Norton Internet Security	2016-09-07 01:03:24
Sophos Anti-Virus	2016-09-06 20:42:44
AVG Internet Security	2016-09-06 01:24:44
Bitdefender Antivirus Free Edition	2016-09-06 00:29:06

Antivirus shields were enabled and have latest antivirus database.

Is the Process "winlogon.exe" Safe or Threat ?

Loading Graph

100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.

Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.

Filename "winlogon.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

96% of reviewed files with different MD5 are marked as Safe .

68% of reviewed files with different MD5 located in different directory are marked as Safe .
32% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "winlogon.exe"

Add Own Review

SAFErating from user UPieper

Reviews of all winlogon.exe variants

Reviews for different files with filename "C:\Windows\System32\winlogon.exe"

SAFErating from user Yo for file C:\Windows\System32\winlogon.exe (Variant: 41881675)
Safe as long as it is part of System32
SAFErating from user ben for file C:\Windows\System32\winlogon.exe (Variant: 41170491)
ok
SAFErating from user Ben for file C:\Windows\System32\winlogon.exe (Variant: 41170491)
ok
SAFErating from user roofjunkie for file C:\Windows\System32\winlogon.exe (Variant: 40502443)
OK
THREATrating from user Stiv for file C:\Windows\System32\winlogon.exe
SAFErating from user street for file C:\Windows\System32\winlogon.exe
SAFErating from user Bert for file C:\Windows\System32\winlogon.exe
SAFErating from user noviczky for file C:\Windows\System32\winlogon.exe
SAFErating from user MikeOne for file C:\Windows\System32\winlogon.exe (Variant: 24851054)
winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
SAFErating from user 3hlav for file C:\Windows\System32\winlogon.exe
SAFErating from user Mikel for file C:\Windows\System32\winlogon.exe
SAFErating from user Олег Разин for file C:\Windows\System32\winlogon.exe
SAFErating from user MikeOne for file C:\Windows\System32\winlogon.exe (Variant: 19528110)
winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
"Winlogon is the component of Microsoft Windows operating systems that is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running (requiring another authentication step)." - see more on http://en.wikipedia.org/wiki/Winlogon.exe