What is the "lsass.exe" ? Variant 14539957

Our database contains 1671 different files for filename lsass.exe but this page contains information about single file with specific attributes. If you want to see general information about the lsass.exe then visit General Information Page . You can also check most distributed file variants with name lsass.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description Local Security Authority Process. Agregate rating is 5(5) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process lsass.exe.

Product:: Microsoft® Windows® Operating System
Company:: Microsoft Corporation
Description:: Local Security Authority Process
Version:: 6.2.9200.16420
MD5:: 0118d8c2b0b04f6b6fe620eadda53449
SHA1:: 60c13a749d90f22145a3c6e47a4c4b9f46b4871b
SHA256:: 00d1d9ea3150f83d99da7e31ea96872cb18f7092a58e75763714cd546b8d23a7
Size:: 23040
Directory:: C:\Windows\System32
Operating System:: Windows 8
Occurence:: High

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :

Antivirus Name	Latest Toleration
Windows Defender	2016-07-15 07:19:27
Panda Free Antivirus	2016-06-18 15:13:10
360 Total Security	2016-04-16 03:50:16
avast! Antivirus	2016-03-06 19:16:37
Kaspersky Free	2016-02-28 22:34:44
AVG AntiVirus Free Edition	2015-12-09 20:52:11
Kaspersky Internet Security	2015-11-02 07:33:48
Panda Global Protection 2016	2015-10-28 08:19:26
Avira Antivirus	2015-10-25 07:17:38
AVG AntiVirus Free Edition 2015	2015-09-12 04:29:39

Antivirus shields were enabled and have latest antivirus database.

Is the Process "lsass.exe" Safe or Threat ?

Loading Graph

100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.

Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.

Filename "lsass.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

52% of reviewed files with different MD5 located in different directory are marked as Safe .
48% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "lsass.exe"

Add Own Review

SAFErating from user MikeOne (Variant: 14539957)
"Local Security Authority Subsystem Service (LSASS), is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system. It verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens.[1] It also writes to the Windows Security Log." - check more on Wikipedia : http://en.wikipedia.org/wiki/Local_Security_Authority_Subsystem_Service

Reviews of all lsass.exe variants

Reviews for different files with filename "C:\Windows\System32\lsass.exe"

SAFErating from user jimmybolts for file C:\Windows\System32\lsass.exe (Variant: 29678077)
they say its safe. i sasy its required.
SAFErating from user Timmyh13 for file C:\Windows\System32\lsass.exe (Variant: 34087591)
Necessary file for the operating system.
SAFErating from user ben for file C:\Windows\System32\lsass.exe (Variant: 40502485)
ok
SAFErating from user Ben for file C:\Windows\System32\lsass.exe (Variant: 40502485)
ok
SAFErating from user Serge for file C:\Windows\System32\lsass.exe
SAFErating from user Alex for file C:\Windows\System32\lsass.exe
SAFErating from user Tom for file C:\Windows\System32\lsass.exe
SAFErating from user Doris for file C:\Windows\System32\lsass.exe
SAFErating from user localhost for file C:\Windows\System32\lsass.exe (Variant: 24862899)
But this program why uses 50 % processor time approx 10-20 seconds long time after booting?
SAFErating from user loki for file C:\Windows\System32\lsass.exe
SAFErating from user BlackRoby for file C:\Windows\System32\lsass.exe (Variant: 24851057)
IS OK,GOOD FILE,NO PROBLEM TO VIRUS
SAFErating from user Mikel for file C:\Windows\System32\lsass.exe
SAFErating from user MikeOne for file C:\Windows\System32\lsass.exe (Variant: 18953017)
This file as a core Windows system process: The process lsass.exe is the Local Security Authentication Server. It is a safe file from Microsoft. Lsass.exe is responsible for security policy enforcement within the operating system, verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens. It also writes to the Windows Security Log. In this case this file should be a target for lot of viruses.