What is the "lsass.exe" ? Variant 513732

Our database contains 1671 different files for filename lsass.exe but this page contains information about single file with specific attributes. If you want to see general information about the lsass.exe then visit General Information Page . You can also check most distributed file variants with name lsass.exe. This file belongs to product Microsoft® Windows® Operating System and was developed by company Microsoft Corporation. This file has description LSA Shell (Export Version). Agregate rating is 5(5) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process lsass.exe.

lsass.exe Process
Product:
Microsoft® Windows® Operating System
Company:
Microsoft Corporation
Description:
LSA Shell (Export Version)
Version:
5.1.2600.5512
MD5:
8754210a3399d19610ce2d71e0c3e5d9
SHA1:
538a36e8c818f9e9f247dc63c4c0d0544b8cf5b7
SHA256:
b10b28b559b447cc9df317f222bb7641a7317001da631371e6e6a928d67276a9
Size:
13312
Directory:
C:\Windows\System32
Operating System:
Windows XP
Occurence:
High oc2

System Explorer Community Antivirus Report

This file was checked and tolerated by following antivirus shields :
Antivirus NameLatest Toleration
AVG Internet Security2016-09-05 09:54:58
AVG Internet Security 20152016-07-25 16:46:58
avast! Antivirus2016-07-09 23:35:34
Avira Antivirus2016-06-22 17:48:37
Panda Free Antivirus2016-05-05 09:35:28
Microsoft Security Essentials2016-04-02 23:36:56
Advanced SystemCare Ultimate2016-02-23 00:22:26
AVG Internet Security 20132016-02-06 08:28:37
Norton 3602016-01-18 11:42:01
Avira Desktop2016-01-15 18:44:57
Antivirus shields were enabled and have latest antivirus database.

Is the Process "lsass.exe" Safe or Threat ?

Loading Graph
100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.
Our final rating for this file is Safe. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.
Filename "lsass.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

52% of reviewed files with different MD5 located in different directory are marked as Safe .
48% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "lsass.exe"

  • SAFErating from user TheDutchJewel for file C:\Windows\System32\lsass.exe (Variant: 141)

    The process lsass.exe serves as the Local Security Authentication Server by Microsoft, Inc. It is responsible for the enforcement of the security policy within the operating system. This process checks whether a user’s supplied identification is valid or not whenever he or she tries to access the computer system. With the execution of the file lsass.exe, the system acquires security by preventing the access of unwanted users to any private information. The file lsass.exe also handles the password modifications done by the user. The process lsass.exe mainly operates in the system through its ability to create access tokens. These tokens encapsulate the file’s security descriptor, which contains the necessary information to process user authentication such as data on which user holds access to the system and whether the access is mandatory or discretionary. Source: http://www.processlibrary.com/directory/files/lsass/