Try now

Program info

Estimated safety rating

 lsass.exe

lsass.exe is a application which is most likely legit. So, if lsass.exe is on your laptop or desktop computer, it is most likely ok, and will NOT cause problems. Even if your PC is virus-free, it is still recommended to purchase a well-known antivirus with a good detection rate, in order to yourself your system against potential security problems.

Executable file path

 C:\Windows\System32\lsass.exe

Usually, this program is located in C:\Windows\System32\lsass.exe.

MD5 hash of the executable file

 889459f1fddc5ec58b437aa6c436f33f

The MD5 fingerprint for this program is 889459f1fddc5ec58b437aa6c436f33f.

Is running as a service

 Yes

This program is registered as a Windows service. This means it operates on your PC in background, usually without showing anything to you. Most Windows services are ok programs, which provide useful features to other applications or to the Windows Operating System.

Accepts incoming connections

 Yes

lsass.exe appears to act as a network server. This means other programs can connect to it. This is sometimes ok, but in some cases it can facilitate a security breach. We recommend evaluating this carefully.

Accesses the internet

 Yes

This application uses the Internet to communicate. Today this is expected from a program. For example, most of the programs on your PC check for new updates. For this, Internet communications are required.

Belongs to the operating system

 Yes

lsass.exe seems to use the functions of Windows SFC (System File Checker) or Windows File Protection.

Is a 64 bit executable file

 Yes

64-bit code has been detected. This program can exploit the full power of a modern PC processor.

Digitally signed

 Yes

lsass.exe has a digital signature. Nowadays the large majority of legit software applications are digitally signed.

Valid digital signature

 Yes

The digital signature extracted from lsass.exe checks out perfectly. This is excellent.

Certifier name

 Microsoft Windows Publisher

Digital certificate name: Microsoft Windows Publisher

Issuer name

 Microsoft Windows Production PCA 2011

Certificate's issuer name: Microsoft Windows Production PCA 2011

Can be uninstalled

 No

This executable does NOT have an uninstall command stored in registry.