Parent process

Child processes

Related files

This is a Windows system installed file with Windows File Protection (WFP) enabled.

winlogon.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent smss.exe (Windows NT-sessionsstyring by Microsoft). This version is installed on Windows XP and is compiled as a 32 bit program.

CPU
Total CPU:	0.00217952%	0.028634%
Kernel CPU:	0.00069283%	0.013761%
User CPU:	0.00148669%	0.014873%
Kernel CPU time:	8,117 ms/min	100,923,805ms/min
Context switches:	1/sec	284/sec
Memory
Private memory:	7.16 MB	21.59 MB
Private (maximum):	4.4 MB
Private (minimum):	2.65 MB
Non-paged memory:	7.16 MB	21.59 MB
Virtual memory:	55.51 MB	140.96 MB
Virtual memory (peak):	58.3 MB	169.69 MB
Working set:	3.22 MB	18.61 MB
Working set (peak):	14.42 MB	37.95 MB
Resource allocations
Threads:	20	12
Handles:	466	600
GUI GDI count:	42	103
GUI USER count:	12	49

sfc_os.dll
Total CPU:	0.00022809%	0.272967%
Kernel CPU:	0.00015206%	0.107585%
User CPU:	0.00007603%	0.165382%
Memory:	168 KB	1.16 MB
RPCRT4.dll
Total CPU:	0.00019092%
Kernel CPU:	0.00015291%
User CPU:	0.00003801%
Memory:	588 KB
wdmaud.drv
Total CPU:	0.00003802%
Kernel CPU:	0.00003802%
User CPU:	0.00000000%
Memory:	36 KB