home

lpuninstall.exe

LastPass (Marvasol Inc)

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program LastPass (uninstall only) by LastPass. The file has been seen being downloaded from download-do.lastpass.com and multiple other hosts.
Publisher:
LastPass (Marvasol Inc)  (signed and verified)

MD5:
f2e7c0c5105582038475f96d7efa0e22

SHA-1:
1d7dc9f71d03532aa9f66f36ef436d0419f3ef42

SHA-256:
54acd9d1be2653c6af579cde37e1febe06568a560b8772146262ec68cd0e3fad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 2:56:30 PM UTC  (today)

File size:
13.6 MB (14,291,000 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\common files\lpuninstall.exe

Digital Signature
Signed by:
LastPass (Marvasol Inc)

Authority:
COMODO CA Limited

Valid from:
10/29/2014 8:00:00 PM

Valid to:
10/29/2017 7:59:59 PM

Subject:
CN=LastPass (Marvasol Inc), O=LastPass (Marvasol Inc), STREET=8315 Lee Highway STE 501, L=Fairfax, S=VA, PostalCode=22031, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CE508B3599B7C4FD38609B65E4DAC72A

File PE Metadata
Compilation timestamp:
2/5/2015 3:33:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:gIBYEgGVA3a/AKJnzts2dWRwT9fcs8udYZdFZIhVr/XwlTTAXgnBfGRe6IdDZ0:5WG6TCzts2dR9RYZ/ZIvr4lTpfGRFI

Entry address:
0x6497C20

Entry point:
60, BE, 00, 10, B2, 05, 8D, BE, 00, 00, 8E, FA, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 4D, 54, 49, 06, 57, 83, C3, 04, 53, 68, 1B, 6C, D7, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9978  (probably packed)

Code size:
13.5 MB (14,123,008 bytes)

Program Uninstaller
Program name:
LastPass (uninstall only)

Display publisher:
LastPass

Uninstall string:
C:\Program Files (x86)\LastPass\lastpass.exe --uninstall


The file lpuninstall.exe has been seen being distributed by the following 7 URLs.

https://download-do.lastpass.com/.../lastpass_x64.exe

https://lastpass.com/.../

https://lastpass.com/lpchrome.php

https://lastpass.com/.../

https://lastpass.eu/.../lastpass_x64.exe

https://lastpass.com/.../?lang=en-us

https://lastpass.com/download/.../lastpass_x64.exe

Scan lpuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.