Try now

Program info

Estimated safety rating

 lsass.exe

lsass.exe is a application which is most likely NOT a virus. So, if lsass.exe is on your PC, it is most likely ok, and will NOT be a cause for concern. Even if your system is virus-free, we still advise you to run a good antivirus with a good detection rate, in order to defend your PC against viruses and malware.

Executable file path

 C:\Windows\System32\lsass.exe

This program is normally found in C:\Windows\System32\lsass.exe.

MD5 hash of the executable file

 889459f1fddc5ec58b437aa6c436f33f

The MD5 fingerprint for this file is 889459f1fddc5ec58b437aa6c436f33f.

Is running as a service

 Yes

This program is registered as a Windows service. This means it runs on your PC in background, usually without displaying any user interface to you. Most Windows services are ok programs, which perform useful features to other applications or to the Windows Operating System.

Accepts incoming connections

 Yes

lsass.exe appears to act as a internet server. This means other computers can probably make connections to it. This is sometimes ok, but in some cases it can create a security breach. We advise looking at this carefully.

Accesses the internet

 Yes

This executable uses the Internet to communicate. Today this is ok. For example, most of the programs on your PC check for new updates. In order to do this, Internet communications are necessary.

Belongs to the operating system

 Yes

lsass.exe appears to have something to do with Windows SFC (System File Checker) or Windows File Protection.

Is a 64 bit executable file

 Yes

This is a 64-bit executable. It uses the full capacity of nowadays' computer processors.

Digitally signed

 Yes

lsass.exe is digitally signed. Today most legit software applications are digitally signed.

Valid digital signature

 Yes

The digital signature found in lsass.exe is valid. This is very good.

Certifier name

 Microsoft Windows Publisher

Digital certificate name: Microsoft Windows Publisher

Issuer name

 Microsoft Windows Production PCA 2011

Certificate's issuer name: Microsoft Windows Production PCA 2011

Can be uninstalled

 No

This program does NOT have a removal routine set up in registry.