lsass.exe

The Local Security Authority Subsystem.

When an account logs on, lsass.exe creates a logon session and an access token for the session that contains the account's SID (and more).