What is the "lsass.exe" ? Variant 508534

Our database contains 1671 different files for filename lsass.exe but this page contains information about single file with specific attributes. If you want to see general information about the lsass.exe then visit General Information Page . You can also check most distributed file variants with name lsass.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description LSA Shell (Export Version). Agregate rating is 5(5) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process lsass.exe.

lsass.exe Process
Product:
Microsoft® Windows® Operating System
Company:
Microsoft Corporation
Description:
LSA Shell (Export Version)
Version:
5.1.2600.5512
MD5:
ed0a176354487ceed65b80a7148ab739
SHA1:
1c84a422029f53ff9ddc2a5998f194ffa55bdfdd
SHA256:
71295d7d7684539dbd2924b437660960c01e073a521fe12d1519969327ec8dc4
Size:
13312
Directory:
C:\Windows\System32
Operating System:
Windows XP
Occurence:
High oc2

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :
Antivirus NameLatest Toleration
AVG AntiVirus Free Edition2016-09-07 13:16:23
Avast Antivirus2016-09-07 10:07:49
avast! Antivirus2016-09-06 18:50:47
AVG Internet Security 20152016-09-06 05:16:09
IObit Malware Fighter2016-09-03 09:30:06
Microsoft Security Essentials2016-09-03 09:30:06
AVG Internet Security2016-09-02 13:43:18
Lavasoft Ad-Watch Live! Anti-Virus2016-09-01 17:58:05
ESET Endpoint Antivirus 5.02016-09-01 16:29:26
Baidu Antivirus2016-08-25 07:16:11
Antivirus shields were enabled and have latest antivirus database.

Is the Process "lsass.exe" Safe or Threat ?

Loading Graph
100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.
Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.
Filename "lsass.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

52% of reviewed files with different MD5 located in different directory are marked as Safe .
48% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "lsass.exe"

  • SAFErating from user 3hlav (Variant: 508534)

    "lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC or server. Lsass generates the process responsible for authenticating users for the Winlogon service. This is performed by using authentication packages such as the default, Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates then inherit this token. More info Note: The lsass.exe file is located in the folder C:\Windows\System32. In other cases, lsass.exe is a virus, spyware, trojan or worm!