When running the tasklist | findstr "PID" for the one listenning on port 1025 it gave me the following.

winlogon.exe 460 0 1,516 K
lsass.exe 516 0 4,192 K

Thanks again