Heres an example:
If that looks just like lsass.exe, youre right…it does.
One way to verify whether the filename is incorrect is to use a case converter.
If the result isnot genuine, it’ll be spelled like this:isass.exe.
Lifewire
your machine might have some lsass.exe files in C:\Windows\winsxs\ folders.
There are several ways to do this, but the easiest is with theCtrl+Shift+Esckeyboard shortcut.
You could also access it from thePower User Menuin Windows 11/10/8, by right-clicking the Start button.
If you dont see this tab, selectMore detailsfrom the bottom of Task Manager.
Choose the first one you see.
Repeat the above steps for each lsass.exe file you see in Task Manager.
There should only be one listed, so if you see additional instances, all but one are fake.
Did you find a fake lsass.exe file?
Whats Its File Size?
Right-click it and openPropertiesto check its size.
Why Is lsass.exe Using so Much Memory?
Is Task Manager reporting lsass.exe highCPUormemoryusage?
Only an infected lsass.exe file or a lookalike will hog all thesystem resources.
The steps below are for removing a fake lsass.exe file; one that Windows isn’t really using.
Shut down the fake lsass.exe process and then delete the file.
steps above if you’re not sure how) and delete it.
Scan your gear forlsass.exe malwareusing a program likeMalwarebytesor some otheron-demand virus scanner.
Install an always-onantivirus program.
See our list of thebest Windows antivirus softwareif you’re not sure where to look.
Use abootable antivirus toolto delete the lsass.exe virus.
