home

{blocked}.exe

LastPass Installer

LastPass (Marvasol Inc)

This is a setup and installation application. This is installed with multiple programs including LastPass (apenas desinstalar) and LastPass (vain poisto). The file has been seen being downloaded from lastpass.com and multiple other hosts.
Publisher:
LastPass  (signed by LastPass (Marvasol Inc))

Product:
LastPass Installer

Version:
4.0.0

MD5:
5c036907c6be43a52c677a9d5101e490

SHA-1:
a8d02b67c207ea055bdd994d70f491ad1899334b

SHA-256:
7d0f34631538e9d5661f8b7f8c09fa14e02e221b4e0c8c315f1afa2b072c082e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:48:35 PM UTC  (today)

File size:
20.6 MB (21,572,120 bytes)

Product version:
4.0.0

Copyright:
Copyright 2008-2016

Original file name:
lastpass.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\lastpass_x64.exe

Digital Signature
Signed by:
LastPass (Marvasol Inc)

Authority:
COMODO CA Limited

Valid from:
10/29/2014 5:00:00 PM

Valid to:
10/29/2017 4:59:59 PM

Subject:
CN=LastPass (Marvasol Inc), O=LastPass (Marvasol Inc), STREET=8315 Lee Highway STE 501, L=Fairfax, S=VA, PostalCode=22031, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CE508B3599B7C4FD38609B65E4DAC72A

File PE Metadata
Compilation timestamp:
3/8/2016 6:56:12 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:ZTsNn4nuLB4fXKNmf0NDE7Ka0O/ikTZ96K7K1Se7Y0zXe/uyf:Zgp4nuU68M1yyaiK/Z1e73zu2+

Entry address:
0x7255900

Entry point:
60, BE, 00, 20, 22, 06, 8D, BE, 00, F0, 1D, FA, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, CF, 38, 25, 07, 57, 83, C3, 04, 53, 68, FB, 38, 43, 01, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9903  (probably packed)

Code size:
20.2 MB (21,188,608 bytes)

The file {blocked}.exe has been discovered within the following programs.

LastPass (apenas desinstalar)  by LastPass
lastpass.com
About 3% of users remove it
LastPass (Endast avinstallera)  by LastPass
About 1% of users remove it
LastPass (solo disinstallazione)  by LastPass
About 9% of users remove it
LastPass (vain poisto)  by LastPass
About 9% of users remove it
 
Powered by Should I Remove It?

The file {blocked}.exe has been seen being distributed by the following 12 URLs.

https://lastpass.com/lastpass_x64.exe

http://lb.cdn.m6web.fr/d/c/a/98ad52e583c0ed17500ba027133f72be/58050273/soft/.../lastpass_4-1-2_fr_416850_64.exe

https://lastpass.com/.../?lang=es

https://lastpass.com/.../

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../lastpass_x64.exe

https://lastpass.com/.../?lang=it

https://lastpass.eu/.../lastpass_x64.exe

http://lastpass.com/.../

https://lastpass.com/.../?lang=en-US

https://lastpass.com/dl

https://download-do.lastpass.com/.../lastpass_x64.exe

https://lastpass.com/download/.../lastpass_x64.exe

Scan {blocked}.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.