home

{blocked}.exe

LastPass Installer

LastPass (Marvasol Inc)

This is a setup and installation application. This is installed with multiple programs including LastPass (Endast avinstallera) and LastPass (solo disinstallazione). The file has been seen being downloaded from d1jxck0p3rkj0.cloudfront.net and multiple other hosts.
Publisher:
LastPass  (signed by LastPass (Marvasol Inc))

Product:
LastPass Installer

Version:
4.0.0

MD5:
cd51029c1be1ba9299bc60c5ae0db405

SHA-1:
20a9b35d619c2c0beb2a2c4c97207340332ceb3b

SHA-256:
b1f505d2bc837817d777cd87edbaee4b9df98127956fcfafdada28577b58fb61

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 3:45:14 AM UTC  (today)

File size:
20.7 MB (21,737,496 bytes)

Product version:
4.0.0

Copyright:
Copyright 2008-2016

Original file name:
lastpass.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\lastpass_x64.exe

Digital Signature
Signed by:
LastPass (Marvasol Inc)

Authority:
COMODO CA Limited

Valid from:
10/29/2014 8:00:00 PM

Valid to:
10/29/2017 7:59:59 PM

Subject:
CN=LastPass (Marvasol Inc), O=LastPass (Marvasol Inc), STREET=8315 Lee Highway STE 501, L=Fairfax, S=VA, PostalCode=22031, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CE508B3599B7C4FD38609B65E4DAC72A

File PE Metadata
Compilation timestamp:
5/5/2016 3:32:37 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:AT4Hr+l8eOohJVYvCm9c/RYGCfRg6S3z23y062hFW50RD/kWv/LIMqHfU4uCQySv:AT6qlUohJVlT6M2iShFy0RH/zsZQySyU

Entry address:
0x72E6FD0

Entry point:
60, BE, 00, B0, 28, 06, 8D, BE, 00, 60, 17, FA, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 98, 49, 2E, 07, 57, 83, C3, 04, 53, 68, C3, BF, 45, 01, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9904  (probably packed)

Code size:
20.4 MB (21,352,448 bytes)

The file {blocked}.exe has been discovered within the following programs.

LastPass (Endast avinstallera)  by LastPass
lastpass.com
About 1% of users remove it
LastPass (solo disinstallazione)  by LastPass
About 9% of users remove it
 
Powered by Should I Remove It?

The file {blocked}.exe has been seen being distributed by the following 8 URLs.

https://d1jxck0p3rkj0.cloudfront.net/lastpass/.../lastpass_x64.exe

https://lastpass.com/.../

https://lastpass.com/.../?lang=es

https://download-do.lastpass.com/.../lastpass_x64.exe

https://lastpass.com/.../?lang=en-US

http://lastpass.com/.../

https://lastpass.com/download/.../lastpass_x64.exe

https://lastpass.com/dl

Scan {blocked}.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.