This is a Windows system installed file with Windows File Protection (WFP) enabled.

winlogon.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7 and is compiled as a 64 bit program.

CPU
Total CPU:	0.00998341%	0.028634%
Kernel CPU:	0.00472709%	0.013761%
User CPU:	0.00525633%	0.014873%
Kernel CPU time:	24,752,211 ms/min	100,923,805ms/min
CPU cycles:	12,089/sec	17,470,203/sec
Memory
Private memory:	2.97 MB	21.59 MB
Private (maximum):	7.31 MB
Private (minimum):	7.19 MB
Non-paged memory:	2.97 MB	21.59 MB
Virtual memory:	55.75 MB	140.96 MB
Virtual memory (peak):	64.97 MB	169.69 MB
Working set:	7.26 MB	18.61 MB
Working set (peak):	8.59 MB	37.95 MB
Page faults:	3,894/min	2,039/min
I/O
I/O read transfer:	42 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	14 Bytes/sec	448.09 KB/min
I/O other operations:	2/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	113	600
GUI GDI count:	6	103
GUI GDI peak:	61	142
GUI USER peak:	19	71