What is the "lsass.exe" ? Variant 10115325

Our database contains 1671 different files for filename lsass.exe but this page contains information about single file with specific attributes. If you want to see general information about the lsass.exe then visit General Information Page . You can also check most distributed file variants with name lsass.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description Local Security Authority Process. Agregate rating is 5(5) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process lsass.exe.

lsass.exe Process
Product:
Microsoft® Windows® Operating System
Company:
Microsoft Corporation
Description:
Local Security Authority Process
Version:
6.2.8400.0
MD5:
6dbd56c7117f98d56c8880614fe765b7
SHA1:
386e1d846519c60da28fe7eac46e6a1f88487957
SHA256:
300dd12f5e68d8efbd96e86066589b28afd2a4b1bc7dc52c70116ab2709ff300
Size:
36352
Directory:
C:\Windows\System32
Operating System:
Windows 8
Occurence:
High oc2

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :
Antivirus NameLatest Toleration
360 Total Security2016-08-28 23:44:17
Windows Defender2016-05-07 04:18:48
Avira Antivirus2015-05-23 03:27:23
avast! Antivirus2015-04-15 10:13:48
Avira Desktop2014-08-07 13:42:52
AVG Internet Security 20122014-07-16 20:18:14
ESET Smart Security 6.02013-08-22 17:15:19
AVG Internet Security 20132013-07-30 17:54:24
AVG AntiVirus Free Edition 20132013-06-24 15:07:44
Advanced SystemCare Ultimate2013-03-10 17:22:34
Antivirus shields were enabled and have latest antivirus database.

Is the Process "lsass.exe" Safe or Threat ?

Loading Graph
100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.
Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.
Filename "lsass.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

52% of reviewed files with different MD5 located in different directory are marked as Safe .
48% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "lsass.exe"

  • SAFErating from user MikeOne (Variant: 10115325)

    "Local Security Authority Subsystem Service (LSASS), is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system. It verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens.[1] It also writes to the Windows Security Log." - check more on Wikipedia : http://en.wikipedia.org/wiki/Local_Security_Authority_Subsystem_Service