Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.88%
6.3.9600.16384 (winblue_rtm.130821-1623)	3.08%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.25%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.05%
6.2.9200.16384 (win8_rtm.120725-1247)	0.84%
6.2.9200.16384 (win8_rtm.120725-1247)	0.64%
6.2.9200.16384 (win8_rtm.120725-1247)	0.15%
6.2.9200.16384 (win8_rtm.120725-1247)	13.14%
6.2.9200.16384 (win8_rtm.120725-1247)	1.64%
6.2.9200.16384 (win8_rtm.120725-1247)	0.84%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.05%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.10%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	37.20%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	19.30%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	0.10%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	0.05%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	0.05%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	0.05%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	0.05%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	0.10%
6.1.7600.16385 (win7_rtm.090713-1255)	3.27%
6.1.7600.16385 (win7_rtm.090713-1255)	2.68%
6.1.7600.16385 (win7_rtm.090713-1255)	2.78%
6.1.7600.16385 (win7_rtm.090713-1255)	1.14%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840)	7.04%
6.0.6001.18000 (longhorn_rtm.080118-1840)	0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840)	1.54%
6.0.6001.18000 (longhorn_rtm.080118-1840)	0.50%
6.0.6000.16386 (vista_rtm.061101-2205)	0.40%
6.0.6000.16386 (vista_rtm.061101-2205)	0.05%
5.1.2600.5788 (xpsp_sp3_qfe.090402-1315)	0.05%
5.1.2600.5512 (xpsp.080413-2113)	0.50%
5.1.2600.5512 (xpsp.080413-2113)	0.05%
5.1.2600.5512 (xpsp.080413-2113)	0.10%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.05%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 38 versions of winlogon.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). winlogon.exe is run as a standard windows process with the logged in user's account privileges. The average file size is about 400.99 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0013% including both foreground and background operations, the average private memory consumption is about 2.15 MB with the maximum memory reaching around 7.79 MB. Addionally, typically read and write I/O disk operations is about 1.04 KB per minute for reads and 2 Bytes per minute for writes.

Winlogon is the component of Windows that is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running (requiring another authentication step).