spacer spacer spacer
 
 
  arrow Description
  arrow Key Facts
  arrow Variants and Locations
  arrow Security
  arrow Requires
  arrow Additional Analysis
  arrow Vendor Summary
  arrow Research this File
  help File Analysis Help
 
 
box_image
Partition Commander
Now it's easy for anyone to safely partition their hard drive! You can reclaim waste disk space, organize files, even add new OSes.
 
  RadarSync
Ensures you have the latest drivers and software updates to make your PC run better and safer.
box_image  
 
 
box_image
Fix-It Utilities
Make your PC run like new! Includes Anti-Virus, Anti-Spyware, hardware diagnostics, registry fixer, and more!
     
 
 
File Analysis Report
 

Lsass.exe

Local Security Authority Process

 
     
  Description  
     
 
file   Lsass.exe is the Local Security Authority Subsystem Service (LSASS) shell. It's a process that enforces the security policy on the PC. LSASS verifies users logging in, handles password changes, and creates access tokens. It also updates the Windows Security Log. This is considered a critical process within Windows and cannot be terminated with Task Manager.

Lsass.exe is a 32/64-bit executable for a graphics UI style application.
 
     
   
  Common Facts From Tracked Core OS Files  
     
 
key facts  
File description
  Local Security Authority Process
 
File Version
  5.1.2600.0  to  6.1.7600.16385
 
Application
  Microsoft Windows Operating System
 
App version
  5.1.2600.0  to  6.1.7600.16385
 
Type
  32, 64 bits
 
Vendor
  Microsoft Corporation
 
Copyright
  (c) Microsoft Corporation. All rights reserved.
 
   
  Variants and Default Locations  
     
 
varients  
  C:\Windows\System32

This directory holds the core operating system files and libraries.

 
side
Windows Version; Bits
File Size
Modified Date
Captured from
More
right
 
xp
  XP RTM; 32
Core without updates
details  
 
xp
  XP SP1; 32
Core without updates
details  
 
xp
  XP SP2; 32
Core without updates
details  
 
xp
  XP SP3; 32
Core without updates
details  
 
xp
  Vista RTM; 32
Core without updates
details  
 
xp
  Vista SP1, 2; 32
Core without updates
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 64
Core without updates
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  7 RTM; 64
Core without updates
details  
 
xp
  7 RTM; 32
Core without updates
details  

 
  C:\Windows\ServicePackFiles\i386

This directory is used to hold new files for service packs. It is used by the file protection system to restore key files should they be damaged.

 
side
Windows Version; Bits
File Size
Modified Date
Captured from
More
right
 
xp
  XP SP1; 32
Core without updates
details  

 
  C:\Windows\WinSxS\...

The WinSxS directory holds Windows Side-by-Side DLLs. WinSxS allows multiple versions of the same DLL (code libraries) to exist on the same system. This ensures that every application will get the DLL version they were tested and designed for. The result is improved application and system stability. See details for full directory location.

 
side
Windows Version; Bits
File Size
Modified Date
Captured from
More
right
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Core without updates
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  Vista SP2; 64
Updates on Core
details  
 
xp
  7 RTM; 64
Core without updates
details  
 
xp
  Vista RTM; 32
Core without updates
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP1; 32
Core without updates
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 32
Core without updates
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  Vista SP2; 32
Updates on Core
details  
 
xp
  7 RTM; 32
Core without updates
details  


Hover over a highlighted field for more details.
 
   
  Security  
     
 
security  

There are no known security risks in using Lsass.exe assuming it has not been modified or replaced by virus or malware and it resides in the default directory. This file is installed as part of the Windows operating system.

Startup Security

bad
53
  Undesirable such as viruses, malware or adware

View our Lsass.exe Startup Applications list for alternative functions and locations not shown below.

 
     
  Requires  
     
 
required   The following files are required when running this program. These may call other files, and there can be additional required files not in this list. Required files for non-Core OS programs above are not included.

           
  import Advapi32.dll*   import API-MS-Win-Core-SysInfo-L1-1-0.dll*
  import API-MS-Win-Core-ErrorHandling-L1-1-0.dll*   import API-MS-Win-Security-Base-L1-1-0.dll*
  import API-MS-Win-Core-Handle-L1-1-0.dll*   import Kernel32.dll*
  import API-MS-Win-Core-Interlocked-L1-1-0.dll*   import Lsasrv.dll*
  import API-MS-Win-Core-LibraryLoader-L1-1-0.dll*   import Msvcrt.dll*
  import API-MS-Win-Core-LocalRegistry-L1-1-0.dll*   import Ntdll.dll
  import API-MS-Win-Core-Misc-L1-1-0.dll*   import Rpcrt4.dll*
  import API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll*   import Samsrv.dll*
  import API-MS-Win-Core-ProcessThreads-L1-1-0.dll*   import SspiSrv.dll*
  import API-MS-Win-Core-Profile-L1-1-0.dll*  
 
* indicates a file that is not required in all versions. Click on filename for details.
 
   
  Additional Analysis  
     
 
notes  
  • The newest version of Lsass.exe requires a C++ library, and was likely written in Micorsoft Visual C++. It was likely built using Visual Studio 2005.
  • Lsass.exe is a PE style file.
  • Our analysis shows the only progam likely to internally use Lsass.exe is lsasrv.dll from Microsoft Windows Operating System.
 
   
  Vendor Summary  
     
 
Vendor
  Microsoft Corporation

Microsoft Corporation Logo
Phone
1-425-882-8080
1-800-642-7676

Web
Global
USA

Assistance
Support
Downloads

 
   
  Research this File  
     
 
Getting search results...
 
     
  Notes  
     
  While we believe this information up to date and accurate, FAQware is not responsible for any inaccuracies. If you find something that is out of date or inaccurate, please let us know at so we can correct it.