home

lpuninstall.exe

LastPass

This is a self-extracting archive and installer. This is installed with multiple programs including LastPass (solo disinstallazione) and LastPass (vain poisto). The file has been seen being downloaded from lastpass.com and multiple other hosts.
Publisher:
LastPass  (signed and verified)

MD5:
ad08e43437d95c6fe58f9728e183540b

SHA-1:
203e8288f0e1f1facbdc48f8abb564f0c86d6a5a

SHA-256:
00bdab682a218d9788924b040583800faa7ca4106c86c66928fcb3ba4c8888ce

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:11:30 PM UTC  (today)

File size:
13.4 MB (14,016,000 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\common files\lpuninstall.exe

Digital Signature
Signed by:
LastPass

Authority:
COMODO CA Limited

Valid from:
10/14/2011 11:00:00 AM

Valid to:
10/14/2014 10:59:59 AM

Subject:
CN=LastPass, O=LastPass, STREET=226 Maple Ave W STE 301, L=Vienna, S=VA, PostalCode=22180, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00993DB38720B4B3EC5280105E019B511D

File PE Metadata
Compilation timestamp:
10/7/2014 4:24:29 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:ult2L3lhPRfECGeu38ogIy9Vr0zk4FN/i5DAdkFl:2tqhRECB/9VrK5Hi5cOFl

Entry address:
0x611AC10

Entry point:
60, BE, 00, 70, 7E, 05, 8D, BE, 00, A0, C1, FA, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 80, 83, 11, 06, 57, 83, C3, 04, 53, 68, 0C, 3C, D3, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.9977  (probably packed)

Code size:
13.2 MB (13,848,576 bytes)

The file lpuninstall.exe has been discovered within the following programs.

LastPass (solo disinstallazione)  by LastPass
lastpass.com
About 9% of users remove it
LastPass (vain poisto)  by LastPass
About 9% of users remove it
 
Powered by Should I Remove It?

The file lpuninstall.exe has been seen being distributed by the following 9 URLs.

https://lastpass.com/.../

https://lastpass.com/lpchrome.php

https://d1jxck0p3rkj0.cloudfront.net/lastpass/.../lastpass_x64.exe

https://lastpass.com/.../?lang=pt-BR

https://download-do.lastpass.com/.../lastpass_x64.exe

https://lastpass.com/.../

https://lastpass.com/.../?lang=en-US

https://lastpass.com/download/.../lastpass_x64.exe

https://d1yr4t16g5p6tb.cloudfront.net/lastpass/.../lastpass_x64.exe

Scan lpuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.