Versions

6.1.7600.16385 (win7_rtm.090713-1255)	7.38%
6.1.7600.16385 (win7_rtm.090713-1255)	51.77%
6.1.7600.16385 (win7_rtm.090713-1255)	24.05%
6.1.7600.16385 (win7_rtm.090713-1255)	4.77%
6.1.7600.16385 (win7_rtm.090713-1255)	0.06%
6.1.7600.16385 (win7_rtm.090713-1255)	0.12%
6.1.7600.16385 (win7_rtm.090713-1255)	0.06%
6.1.7600.16385 (win7_rtm.090713-1255)	0.12%
6.0.6001.18000 (longhorn_rtm.080118-1840)	9.11%
6.0.6001.18000 (longhorn_rtm.080118-1840)	1.98%
6.0.6000.16386 (vista_rtm.061101-2205)	0.56%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 11 versions of lsm.exe in the wild, the latest version being 6.1.7600.16385 (win7_rtm.090713-1255). lsm.exe is run as a standard windows process in the context of the SYSTEM account with extensive privileges. The average file size is about 278.18 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0006% including both foreground and background operations, the average private memory consumption is about 2.71 MB with the maximum memory reaching around 4.14 MB. Addionally, typically read and write I/O disk operations is about 329 Bytes per minute for reads and 2 Bytes per minute for writes.

Local Security Authority Subsystem Service (LSASS), is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system. It verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens.