home

lastpass.exe

LastPass Installer

LastPass

This is a setup and installation application. The file has been seen being downloaded from lastpass.com and multiple other hosts.
Publisher:
LastPass  (signed and verified)

Product:
LastPass Installer

Version:
1.80.0

MD5:
8919161ffbf1b39bf1151edb441c1d0d

SHA-1:
3fb5bee05b787d5ab9bb12630f6c8b6c7b2bbe8a

SHA-256:
7a086cd7a155aa5930ae77137da155778f14afda4f1a13a45c214dc939cccc2d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 5:14:32 PM UTC  (today)

File size:
13.2 MB (13,844,000 bytes)

Product version:
1.80.0

Copyright:
Copyright 2008-2011

Original file name:
lastpass.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\lastpass.exe

Digital Signature
Signed by:
LastPass

Authority:
COMODO CA Limited

Valid from:
10/13/2011 8:00:00 PM

Valid to:
10/13/2014 7:59:59 PM

Subject:
CN=LastPass, O=LastPass, STREET=226 Maple Ave W STE 301, L=Vienna, S=VA, PostalCode=22180, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00993DB38720B4B3EC5280105E019B511D

File PE Metadata
Compilation timestamp:
11/17/2011 11:05:45 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:qeUnZ0jnWLfhDP1bLU4cx1wOJyTFfXcqTR:qRWQfhDPUvwOJyBfrl

Entry address:
0x2FA5B5

Entry point:
B8, 2C, B3, 66, 05, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, BB, 4E, EB, D4, 0D, 8F, AF, 00, DE, 2D, D9, 3D, 2E, 03, 5A, BA, AD, 24, 36, F6, FD, 84, CD, 83, 3C, 1D, 07, 2C, C2, B3, 42, D8, D6, ED, 73, D8, 0A, 99, 00, 2B, 77, 94, 40, 46, 88, 38, 65, 08, AA, 43, BA, 80, 4E, 20, EB, B3, 41, 5A, 4C, A8, 4F, B0, 12, 0B, BD, 16, 9D, B3, 26, DE, 4F, 2C, CE, 4F, 31, CA, 26, A5, 55, B2, 7E, FC, D6, 18, 69, 2E, 7A, 5B, 7F, 65, 8C, FE, 36...
 
[+]

Entropy:
7.9824

Packer / compiler:
PECompact v2

Code size:
3.5 MB (3,637,760 bytes)

The file lastpass.exe has been seen being distributed by the following 4 URLs.

https://lastpass.com/lastpass_x64.exe

https://download.lastpass.com/lastpass_x64.exe

https://rodan.lastpass.com/lastpass_x64.exe

http://downloads.pcworld.com/pub/new//antivirus___security/.../lastpass18_x64.exe

Scan lastpass.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.