what is lsass.exe?
lsass.exe is a windows process that deals with the security policy of the operating system. For example, when you log in to a Windows user account or to a server, lsass.exe verifies the login name and password. if you terminate lsass.exe, you will probably log out of windows. lsass.exe also writes to the windows security log so you can look there for failed authentication attempts along with other security policy issues.
publisher: microsoft windows
lsass.exe stands for Local Security Authority Subsystem Service.
what does lsass.exe do?
lsass.exe controls all windows security system authentication and policies.
is lsass.exe safe? 5 easy ways to see if lsass.exe is safe or malware.
- 1. see who signed the lsass.exe (check the publisher)
- 2. scan lsass.exe with windows security.
- 3. check the network activity of lsass.exe.
- 4. scan lsass.exe with virustotal.
- 5. run it in windows sandbox.
why does lsass.exe access the network?
While investigating lsass.exe with the glasswire network security monitor on our devices based in austin, tx usa, we found a connection to a server controlled by a popular web browser called opera am4.autoupdate.opera.com. This network activity appears to be normal behavior because we learned that lsass.exe is used to check website certificates and validate them. lsass.exe is also used to revoke certificates from bad websites. on our test computer we had the opera web browser installed.
about us
Our goal at glasswire is to help people protect their privacy and security. We’ve helped over 20 million people protect their devices from threats. Are you curious about the security of another windows file? visit our full directory of windows .exe files.
do you have comments?
Do you have suggestions on how we can improve this page? please let us know.
