home

lpuninstall.exe

LastPass

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program LastPass (Nur deinstallieren) by LastPass. The file has been seen being downloaded from d1jxck0p3rkj0.cloudfront.net and multiple other hosts.
Publisher:
LastPass  (signed and verified)

MD5:
38ca4345a8b265b9df5ce7060c3fdff5

SHA-1:
55c739d5b8d1a5bc805fa8b7d011513d0cb536d2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:49:52 PM UTC  (today)

File size:
9.8 MB (10,257,920 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\common files\lpuninstall.exe

Digital Signature
Signed by:
LastPass

Authority:
COMODO CA Limited

Valid from:
10/14/2011 2:00:00 AM

Valid to:
10/14/2014 1:59:59 AM

Subject:
CN=LastPass, O=LastPass, STREET=226 Maple Ave W STE 301, L=Vienna, S=VA, PostalCode=22180, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00993DB38720B4B3EC5280105E019B511D

File PE Metadata
Compilation timestamp:
10/6/2014 7:34:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:nwj5k5ZvNtOUrs+sAt0zaCClRcVhfHL1z2Fs3Fh+:JltOUrs4t0zvh5Vu

Entry address:
0x4FA3540

Entry point:
60, BE, 00, 50, A0, 04, 8D, BE, 00, C0, 9F, FB, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 80, 13, FA, 04, 57, 83, C3, 04, 53, 68, 31, E5, 99, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
9.6 MB (10,092,544 bytes)

Program Uninstaller
Program name:
LastPass (Nur deinstallieren)

Display publisher:
LastPass

Uninstall string:
C:\LastPass\lastpass.exe --uninstall


The file lpuninstall.exe has been seen being distributed by the following 3 URLs.

https://d1jxck0p3rkj0.cloudfront.net/lastpass/.../lastpass.exe

https://lastpass.com/download/.../lastpass.exe

http://www.downloadcrew.co.uk/?act=software.download&id=699&t=1413916678&c=e711db52d243c86d1a83a8f2379c5604814e7b18

Scan lpuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.