Do you mind posting the sha256sum for the zip file you downloaded? Then when someone from lastpass comes along they could at least compare it with their upstream.

I just downloaded:

0778d4528381917a8beaebfa3c033cc81157439fae01c082e8e7f33b51e37340 lpmacosx.zip