home

lpuninstall.exe

LastPass Installer

LastPass (Marvasol Inc)

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program LastPass (uninstall only) by LastPass. The file has been seen being downloaded from lastpass.com and multiple other hosts.
Publisher:
LastPass  (signed by LastPass (Marvasol Inc))

Product:
LastPass Installer

Version:
3.1.95

MD5:
8c647d0d46adaa531c5baf0b7b0ef983

SHA-1:
4e711acc3a0bf5e198db82babcfb0d08e47c6621

SHA-256:
419fb9d89fbd02b319f5fe137dd4c1253d2650f5d7fcc8d6d0575532d0ca82ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 11:50:54 PM UTC  (a few moments ago)

File size:
15.8 MB (16,581,656 bytes)

Product version:
3.1.95

Copyright:
Copyright 2008-2015

Original file name:
lastpass.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\lpuninstall.exe

Digital Signature
Signed by:
LastPass (Marvasol Inc)

Authority:
COMODO CA Limited

Valid from:
10/29/2014 7:00:00 PM

Valid to:
10/29/2017 6:59:59 PM

Subject:
CN=LastPass (Marvasol Inc), O=LastPass (Marvasol Inc), STREET=8315 Lee Highway STE 501, L=Fairfax, S=VA, PostalCode=22031, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CE508B3599B7C4FD38609B65E4DAC72A

File PE Metadata
Compilation timestamp:
7/9/2015 2:26:22 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:Q54o2pixPRyoL1sx28b9QJB0SmbgPT7DPvW:Q5x2AxgRnb9QJB0SmbOTnu

Entry address:
0x6D88100

Entry point:
60, BE, 00, 20, 1E, 06, 8D, BE, 00, F0, 21, FA, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 9B, 65, D8, 06, 57, 83, C3, 04, 53, 68, F7, 60, FA, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9983  (probably packed)

Code size:
15.7 MB (16,412,672 bytes)

Program Uninstaller
Program name:
LastPass (uninstall only)

Display publisher:
LastPass

Uninstall string:
C:\Program Files (x86)\LastPass\lastpass.exe --uninstall


The file lpuninstall.exe has been seen being distributed by the following 4 URLs.

https://lastpass.com/download/.../lastpass_x64.exe

https://lastpass.eu/.../lastpass_x64.exe

https://lastpass.com/dl

https://lastpass.com/.../?lang=en-US

Scan lpuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.