Home How it works Support Boost Connect Download

Boost Connect

Uncovering the DNA of programs.
Good programs    
1
6
7
,
7
9
6
 
Fair programs  
0
1
1
,
1
2
0
 
Bad programs 
0
0
4
,
2
7
7

What is lsass.exe?

Part of Betriebssystem Microsoft® Windows® by Microsoft

(lsass.exe is a system file that is installed with Windows)
Download Boost and enjoy your PC. Speed up Betriebssystem Microsoft® Windows® and optimize your PC.

How does lsass.exe run?

Service - lsass.exe runs as a background Windows service called 'ProtectedStorage' (Protected Storage). This is a system service that is installed with the Windows operating system and protected with Window's File Protection. This service runs as the SYSTEM account with extensive privileges on the local computer, and acts as the computer on the network. Protected Storage runs as a service that can share a process with other Win32 services.

Community

What is the community is seeing?What is the community is doing?
About 0.1% of all Boost users have the lsass.exe process running.Of the 0.1% of lsass.exe users, less than 1% have disabled it.
How resource intensive is lsass.exe?
Comparison based on the average resource utilization across all programs.
0.00057% CPU5680.3%
Average CPU utilization across all programs is 0.00001%.
          6.33 MB RAM29.4%
Average private memory utilization across all programs is 21.53 MB.
1,926 /min85.5%
Average I/O read and write operations for all programs is 2,253 per minute.
133 context switches/sec133.0%
Average context switches for all programs is 100 per second.
Typical file (disk image) location:
C:\Windows\System32\lsass.exe

What modules are loaded?

A module is a dynamic link library (DLL) or an executable file that is loaded into the process. Below is a list of non-system modules that are loaded by Betriebssystem Microsoft® Windows®.

What else is related?

What Windows OS versions does this run on?

Windows Vista (TM) Home Premium (6.0.6002.131072)
Windows Vista (TM) Ultimate (6.0.6002.131072)

About Microsoft Corporation

Microsoft, founded in 1975 by Bill Gates and Paul Allen, is a veteran software company, best known for its Microsoft Windows operating system and the Microsoft More...
Download Boost

File details

File name: lsass.exe
Publisher: Microsoft Corporation (verified)
Name: Betriebssystem Microsoft® Windows®
Description: Local Security Authority Process
Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product version: 6.0.6000.16386
Size: 11 KB
Original file name: lsass.exe.mui
Windows file protection: Yes

Resource utilization

CPU utilization averages
Total CPU: 0.0012292625%
Privileged CPU: 0.0006612278%
User CPU: 0.00056803470828%
Privileged CPU time: 94919561.32 ms
Privileged CPU time /min: 16,539 ms
CPU cycle count: 27,452,105
CPU cycle count /min: 145,162,227
Context switches /sec: 133
Memory utilization averages
Committed memory: 64.37 MB
Peak committed memory: 69.25 MB
Paged memory: 6.33 MB
Peak paged memory: 6.88 MB
Paged system memory: 131.78 KB
Non-paged system memory: 29.9 KB
Working set memory: 5.52 MB
Peak working set memory: 12.4 MB
Min working set memory: 2.39 MB
Private memory: 6.33 MB
Page faults: 235,896
Page faults /min: 96
Process I/O averages
Total read operations: 2,588,183
Read operations /min: 987
Total read transfer: 189.18 MB
Read transfer /min: 78.48 KB
Total write operations: 2,418,730
Write operations /min: 939
Total write transfer: 239.88 MB
Write transfer /min: 99.69 KB
Total other operations: 4,737,621
Other operations /min: 1,823
Total other transfer: 6.39 MB
Other Transfer /min: 2.06 KB
Resources
Handle count average: 720
Thread count average: 12
Thread resource averages
rpcrt4.dll
rpcrt4.dll
lsasrv.dll
ntdll.dll

Process details

Runs as (owner): System
Integrety level: System
Windows platform: 64-bit
Runs as a service: Yes
Parent Process
Process Command
C:\Windows\system32\lsass.exe

Service details

Name: Protected Storage
Service name: ProtectedStorage
Service type: Win32ShareProcess
Description: “Provides protected storage for sensitive data, such as passwords, to prevent access by unauthorized services, processes, or users.”

Network connectivity

TCP: localhost on port 49155
TCP: localhost on port 49154
TCP: localhost on port 1027
TCP: localhost on port 49161
TCP: localhost on port 49153
TCP: localhost on port 49156

Image hashes

MD5: 260bf9c43ee12c6898a9f5aab0fb0e5d
SHA-1: fb81e1012790a128ddd8a408acda1327f3d14f49
SHA-256: 6585a87ce55ee5c51b18df86e8edfc6a909d96c87522ff4183f8ba9355e8dd44

PE image details

CLR assembly: Yes
CLR NGENed: No
Langauge*: Microsoft Visual C# / Basic .NET
File packed: No
Stay up to date with news about Boost
Subscribe to our newsletter to receive the latest Boost news and discounts.
 
© 2016 Reason Software Company Inc.
228 Park Ave S #74122 New York, NY 10003
(646) 664-1038 | info@boostbyreason.com
How it works Privacy Terms Support Contact Download Donate Reason Software, the makers of Boost logo

Download Boost and enjoy your PC.

Increase your PC's performance.
Remove unwanted crapware.
Reduce your boot time.
Identify and resolves crashes.
Download the FREE unlimited trial of Boost!
No spyware, no adware, no bundles, no tricks.
Download

Save 40% on Boost

For a limited time, from now until Tuesday, December 6, 2016 you can purchase Boost for 40% off of the normal price, only $39.95 $24.95.
The instant online savings will be automatically applied during checkout.
 

100% Satisfaction Guarantee

Purchase with confidence. We stand behind Boost.
If for any reason you are not satisfied with your software purchase, simply contact our Customer Support within 30 days, and we'll refund the purchase price. We won't make you jump through hoops to get all your money back!