What is the "lsass.exe" ? Variant 18918815

Our database contains 1671 different files for filename lsass.exe but this page contains information about single file with specific attributes. If you want to see general information about the lsass.exe then visit General Information Page . You can also check most distributed file variants with name lsass.exe. This file was developed by company Ufasoft. This file has description coin-miner. Agregate rating is 1(1) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process lsass.exe.

lsass.exe Process
Product:
(Empty Value)
Company:
Ufasoft
Description:
coin-miner
Version:
7.0.13040.0
MD5:
e2fc6ed855b999dee3fb92985f89972c
SHA1:
07384514e6c1108ddd828a423d41bbeeb44e4558
SHA256:
ae0bfc8627f3b731b28e28f3356bc6b01dd7bdb6001a251aa8708e0ca208599f
Size:
54784
Directory:
C:\Windows\System32\btc
Operating System:
Windows Server 2003
Occurence:
Low oc0

Is the Process "lsass.exe" Safe or Threat ?

Loading Graph
100% of reviewed files are marked as Threat .
Our final rating for this file is Unknown. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.
68% of reviewed files with different MD5 located in different directory are marked as Safe .
32% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "lsass.exe"

  • THREATrating from user MikeOne (Variant: 18918815)

    In origin, this file as a core Windows system process: The process lsass.exe is the Local Security Authentication Server. It is a safe file from Microsoft. Lsass.exe is responsible for security policy enforcement within the operating system, verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens. It also writes to the Windows Security Log. In this case this file should be a target for lot of viruses. In this version, this file was changed to a bitcoiner, which can be marked as an attack.