Home How it works Support Boost Connect Download

Boost Connect

Uncovering the DNA of programs.
Good programs    
Fair programs  
Bad programs 

What is lsass.exe?

Part of LSA Shell by Microsoft

What is it?

Local Security Authority Subsystem Service (LSASS), is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system. It verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens.

What if I disable LSA Shell?

Termination of lsass.exe will result in the Welcome screen losing its accounts, prompting a restart of the PC.
(lsass.exe is a system file that is installed with Windows)
Download Boost and enjoy your PC. Speed up LSA Shell and optimize your PC.

How does lsass.exe run?

Service - lsass.exe runs as a background Windows service called 'PolicyAgent' (IPSEC Services). This is a system service that is installed with the Windows operating system and protected with Window's File Protection. This service runs as the SYSTEM account with extensive privileges on the local computer, and acts as the computer on the network. IPSEC Services runs as a service that can share a process with other Win32 services.


What is the community is seeing?What is the community is doing?
About 0.3% of all Boost users have the lsass.exe process running.Of the 0.3% of lsass.exe users, less than 1% have disabled it.
How resource intensive is lsass.exe?
Comparison based on the average resource utilization across all programs.
0.00030% CPU2961.8%
Average CPU utilization across all programs is 0.00001%.
          5.99 MB RAM27.8%
Average private memory utilization across all programs is 21.53 MB.
     155 /min6.9%
Average I/O read and write operations for all programs is 2,253 per minute.
         4 GDI objects2.7%
Average number of GUI GDI and USER objects for all programs is 150.
          16 context switches/sec16.0%
Average context switches for all programs is 100 per second.
Typical file (disk image) location:

Are there other versions of LSA Shell?

What modules are loaded?

A module is a dynamic link library (DLL) or an executable file that is loaded into the process. Below is a list of non-system modules that are loaded by LSA Shell.

What else is related?

What Windows OS versions does this run on?

Microsoft Windows XP (5.2.3790.131072)

About Microsoft Corporation

Microsoft, founded in 1975 by Bill Gates and Paul Allen, is a veteran software company, best known for its Microsoft Windows operating system and the Microsoft More...
Download Boost

File details

File name: lsass.exe
Publisher: Microsoft Corporation (verified)
Name: LSA Shell
Description: Microsoft® Windows® Operating System
Version: 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)
Product version: 5.2.3790.1830
Size: 14 KB
Original file name: lsass.exe
Windows file protection: Yes

Resource utilization

CPU utilization averages
Total CPU: 0.0006737027%
Privileged CPU: 0.0003775246%
User CPU: 0.00029617812159%
Privileged CPU time: 15195.31 ms
Privileged CPU time /min: 3 ms
Context switches /sec: 16
Memory utilization averages
Committed memory: 52.75 MB
Peak committed memory: 56.25 MB
Paged memory: 5.99 MB
Peak paged memory: 6.43 MB
Paged system memory: 82.33 KB
Non-paged system memory: 28.9 KB
Working set memory: 2.04 MB
Peak working set memory: 9.04 MB
Min working set memory: 444 KB
Private memory: 5.99 MB
Page faults: 420,632
Page faults /min: 149
Process I/O averages
Total read operations: 212,242
Read operations /min: 78
Total read transfer: 18.61 MB
Read transfer /min: 7.05 KB
Total write operations: 207,402
Write operations /min: 77
Total write transfer: 24.32 MB
Write transfer /min: 9.23 KB
Total other operations: 497,321
Other operations /min: 183
Total other transfer: 3.88 MB
Other Transfer /min: 1.44 KB
GUI Object Averages
GDI objects: 4
Handle count average: 426
Thread count average: 26

Process details

Runs as (owner): System
Integrety level: Undefined
Windows platform: 64-bit
Runs as a service: Yes
Parent Process
Process Commands

Service details

Name: IPSEC Services
Service name: PolicyAgent
Service type: Win32ShareProcess
Description: “Provides end-to-end security between clients and servers on TCP/IP networks. If this service is stopped, TCP/IP security between clients and servers on the network will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start.”

Network connectivity

UDP: LISTENING on port 4500
TCP: localhost on port 1025

Image hashes

MD5: 1a782d5ca033f553f0be54546ebf3b4f
SHA-1: 6d3732f0a80744b7731e83b41848638097d683ba
SHA-256: 758c063a59c960118bca3d89a85786d54bf868bb5420ef8d158bfb3f9fa2e130

PE image details

File entropy: 6.38259
File packed: No
Stay up to date with news about Boost
Subscribe to our newsletter to receive the latest Boost news and discounts.
© 2016 Reason Software Company Inc.
228 Park Ave S #74122 New York, NY 10003
(646) 664-1038 | info@boostbyreason.com
How it works Privacy Terms Support Contact Download Donate Reason Software, the makers of Boost logo

Download Boost and enjoy your PC.

Increase your PC's performance.
Remove unwanted crapware.
Reduce your boot time.
Identify and resolves crashes.
Download the FREE unlimited trial of Boost!
No spyware, no adware, no bundles, no tricks.

Save 40% on Boost

For a limited time, from now until Monday, October 24, 2016 you can purchase Boost for 40% off of the normal price, only $39.95 $24.95.
The instant online savings will be automatically applied during checkout.

100% Satisfaction Guarantee

Purchase with confidence. We stand behind Boost.
If for any reason you are not satisfied with your software purchase, simply contact our Customer Support within 30 days, and we'll refund the purchase price. We won't make you jump through hoops to get all your money back!