4647 0 0 12545 0 0x8020000000000000 231712 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-500 Administrator EM.KRINGLECON 0x0000000000969b09 4826 0 0 13573 0 0x8020000000000000 231714 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 - %%1843 %%1846 %%1843 %%1843 %%1848 %%1843 %%1843 %%1843 - %%1848 %%1843 4688 2 0 13312 0 0x8020000000000000 231715 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x000000000000012c C:\Windows\System32\smss.exe %%1936 0x0000000000000004 S-1-0-0 - - 0x0000000000000000 S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231716 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x000000000000016c C:\Windows\System32\autochk.exe %%1936 0x000000000000012c S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\smss.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231717 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x00000000000001a4 C:\Windows\System32\smss.exe %%1936 0x000000000000012c S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\smss.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231718 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x00000000000001ac C:\Windows\System32\csrss.exe %%1936 0x00000000000001a4 S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\smss.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231719 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x0000000000000200 C:\Windows\System32\smss.exe %%1936 0x000000000000012c S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\smss.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231720 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x0000000000000208 C:\Windows\System32\csrss.exe %%1936 0x0000000000000200 S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\smss.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231721 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x0000000000000220 C:\Windows\System32\wininit.exe %%1936 0x00000000000001a4 S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\smss.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231722 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x0000000000000244 C:\Windows\System32\winlogon.exe %%1936 0x0000000000000200 S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\smss.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231723 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x0000000000000290 C:\Windows\System32\services.exe %%1936 0x0000000000000220 S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\wininit.exe S-1-16-16384 4688 2 0 13312 0 0x8020000000000000 231724 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 - - 0x00000000000003e7 0x0000000000000298 C:\Windows\System32\lsass.exe %%1936 0x0000000000000220 S-1-0-0 - - 0x0000000000000000 C:\Windows\System32\wininit.exe S-1-16-16384 4608 0 0 12288 0 0x8020000000000000 231725 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM 4624 2 0 12544 0 0x8020000000000000 231726 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 0 - - - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000004 - - - - - - %%1843 0x0000000000000000 %%1842 4902 0 0 13568 0 0x8020000000000000 231727 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM 0 0x000000000000a4c0 4624 2 0 12544 0 0x8020000000000000 231728 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231730 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-20 NETWORK SERVICE NT AUTHORITY 0x00000000000003e4 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231733 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-90-0-1 DWM-1 Window Manager 0x00000000000101f4 2 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000244 C:\Windows\System32\winlogon.exe - - %%1833 - - - %%1842 0x000000000001021b %%1842 4624 2 0 12544 0 0x8020000000000000 231734 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-90-0-1 DWM-1 Window Manager 0x000000000001021b 2 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000244 C:\Windows\System32\winlogon.exe - - %%1833 - - - %%1842 0x00000000000101f4 %%1843 4624 2 0 12544 0 0x8020000000000000 231736 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231738 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-19 LOCAL SERVICE NT AUTHORITY 0x00000000000003e5 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231740 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 5033 0 0 12292 0 0x8020000000000000 231742 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM 4624 2 0 12544 0 0x8020000000000000 231743 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231745 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000000298 C:\Windows\System32\lsass.exe 4799 0 0 13826 0 0x8020000000000000 231746 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000000298 C:\Windows\System32\lsass.exe 5024 0 0 12292 0 0x8020000000000000 231747 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM 4624 2 0 12544 0 0x8020000000000000 231748 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231750 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231752 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231754 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231756 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x00000000000004ec C:\Windows\System32\svchost.exe 4799 0 0 13826 0 0x8020000000000000 231757 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x00000000000004ec C:\Windows\System32\svchost.exe 4624 2 0 12544 0 0x8020000000000000 231758 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231760 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231762 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231764 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231766 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231768 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231770 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x00000000000008f4 C:\Windows\System32\svchost.exe 4799 0 0 13826 0 0x8020000000000000 231771 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x00000000000008f4 C:\Windows\System32\svchost.exe 4624 2 0 12544 0 0x8020000000000000 231772 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-17 IUSR NT AUTHORITY 0x00000000000003e3 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4904 0 0 13568 0 0x8020000000000000 231774 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 IIS-METABASE 0x000000000001f882 0x0000000000000988 C:\Windows\System32\inetsrv\inetinfo.exe 4624 2 0 12544 0 0x8020000000000000 231775 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-7 ANONYMOUS LOGON NT AUTHORITY 0x0000000000022cb1 3 NtLmSsp NTLM - {00000000-0000-0000-0000-000000000000} - NTLM V1 0 0x0000000000000000 - - - %%1833 - - - %%1843 0x0000000000000000 %%1843 4799 0 0 13826 0 0x8020000000000000 231776 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x000000000000011c C:\Windows\System32\svchost.exe 4799 0 0 13826 0 0x8020000000000000 231777 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x000000000000011c C:\Windows\System32\svchost.exe 4799 0 0 13826 0 0x8020000000000000 231778 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000000988 C:\Windows\System32\inetsrv\inetinfo.exe 4799 0 0 13826 0 0x8020000000000000 231779 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000000988 C:\Windows\System32\inetsrv\inetinfo.exe 4624 2 0 12544 0 0x8020000000000000 231780 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 231784 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6428 0x00000000 {5fa18354-ec7f-5856-5b06-abe7105ef365} - 4769 0 0 14337 0 0x8020000000000000 231785 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 6426 0x00000000 {5fa18354-ec7f-5856-5b06-abe7105ef365} - 4769 0 0 14337 0 0x8020000000000000 231786 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6429 0x00000000 {5fa18354-ec7f-5856-5b06-abe7105ef365} - 4769 0 0 14337 0 0x8020000000000000 231787 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6427 0x00000000 {5fa18354-ec7f-5856-5b06-abe7105ef365} - 4769 0 0 14337 0 0x8020000000000000 231801 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 6439 0x00000000 {ad4a354d-7f41-f329-9039-663f633b93ff} - 4769 0 0 14337 0 0x8020000000000000 231802 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x60810010 0x00000012 ::ffff:169.254.202.186 6440 0x00000000 {ad4a354d-7f41-f329-9039-663f633b93ff} - 4769 0 0 14337 0 0x8020000000000000 231809 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6448 0x00000000 {e25b771d-35b7-aa88-bf29-faed7eefd455} - 4799 0 0 13826 0 0x8020000000000000 231816 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x0000000000000938 C:\Windows\System32\mqsvc.exe 4799 0 0 13826 0 0x8020000000000000 231817 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x0000000000000938 C:\Windows\System32\mqsvc.exe 4624 2 0 12544 0 0x8020000000000000 231824 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231838 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000000aa0 C:\Windows\System32\dfsrs.exe 4799 0 0 13826 0 0x8020000000000000 231839 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000000aa0 C:\Windows\System32\dfsrs.exe 4624 2 0 12544 0 0x8020000000000000 231846 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231848 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4799 0 0 13826 0 0x8020000000000000 231849 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4799 0 0 13826 0 0x8020000000000000 231850 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4799 0 0 13826 0 0x8020000000000000 231851 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4799 0 0 13826 0 0x8020000000000000 231852 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4799 0 0 13826 0 0x8020000000000000 231853 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4799 0 0 13826 0 0x8020000000000000 231854 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4799 0 0 13826 0 0x8020000000000000 231855 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001350 C:\Windows\System32\VSSVC.exe 4769 0 0 14337 0 0x8020000000000000 231862 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6476 0x00000000 {36626fb3-6fd4-7c66-018f-a1169eb6f34f} - 4624 2 0 12544 0 0x8020000000000000 231863 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 231866 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 6485 0x00000000 {bff48bd7-f5c2-a2ea-838f-3c94e01d948c} - 4799 0 0 13826 0 0x8020000000000000 231870 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x000000000000011c C:\Windows\System32\svchost.exe 4799 0 0 13826 0 0x8020000000000000 231871 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x000000000000011c C:\Windows\System32\svchost.exe 4769 0 0 14337 0 0x8020000000000000 231875 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6496 0x00000000 {4f243aa1-98ba-99be-0527-c920dc9680bd} - 4769 0 0 14337 0 0x8020000000000000 231884 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6500 0x00000000 {4f243aa1-98ba-99be-0527-c920dc9680bd} - 4624 2 0 12544 0 0x8020000000000000 231898 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231910 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231912 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231914 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x00000000000013dc C:\Windows\System32\iashost.exe 4799 0 0 13826 0 0x8020000000000000 231915 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x00000000000013dc C:\Windows\System32\iashost.exe 4624 2 0 12544 0 0x8020000000000000 231950 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-80-1184457765-4068085190-3456807688-2200952327-3769537534 MSSQL$MICROSOFT##WID NT SERVICE 0x00000000000ee3a1 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1842 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231952 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-19 LOCAL SERVICE NT AUTHORITY 0x00000000000003e5 0x0000000000000a68 C:\Windows\WID\Binn\sqlwriter.exe 4799 0 0 13826 0 0x8020000000000000 231953 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-19 LOCAL SERVICE NT AUTHORITY 0x00000000000003e5 0x0000000000000a68 C:\Windows\WID\Binn\sqlwriter.exe 4799 0 0 13826 0 0x8020000000000000 231954 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x000000000000011c C:\Windows\System32\svchost.exe 4769 0 0 14337 0 0x8020000000000000 231968 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6799 0x00000000 {9827966d-a376-c8d7-6f1a-e493d37f959a} - 4624 2 0 12544 0 0x8020000000000000 231973 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 S-1-5-20 NETWORK SERVICE NT AUTHORITY 0x0000000000144b42 9 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x00000000000017c8 C:\Windows\System32\svchost.exe - - %%1833 - WIN-KCON-EXCH16$ EM.KRINGLECON %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 231977 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 S-1-5-20 NETWORK SERVICE NT AUTHORITY 0x0000000000144b84 9 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x00000000000017c8 C:\Windows\System32\svchost.exe - - %%1833 - WIN-KCON-EXCH16$ EM.KRINGLECON %%1843 0x0000000000000000 %%1842 4799 0 0 13826 0 0x8020000000000000 231984 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x00000000000017c8 C:\Windows\System32\svchost.exe 4799 0 0 13826 0 0x8020000000000000 231985 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 0x00000000000017c8 C:\Windows\System32\svchost.exe 4768 0 0 14339 0 0x8020000000000000 232001 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrator EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-500 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 232002 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrator@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 6907 0x00000000 {417ff2c7-ca80-4914-5cf4-35836ca396fb} - 4624 2 0 12544 0 0x8020000000000000 232004 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-500 Administrator EM.KRINGLECON 0x000000000015ce10 2 User32 Negotiate WIN-KCON-EXCH16 {417ff2c7-ca80-4914-5cf4-35836ca396fb} - - 0 0x000000000000011c C:\Windows\System32\svchost.exe 127.0.0.1 0 %%1833 - - - %%1843 0x000000000015ce45 %%1842 4624 2 0 12544 0 0x8020000000000000 232005 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-500 Administrator EM.KRINGLECON 0x000000000015ce45 2 User32 Negotiate WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - - 0 0x000000000000011c C:\Windows\System32\svchost.exe 127.0.0.1 0 %%1833 - - - %%1843 0x000000000015ce10 %%1843 4799 0 0 13826 0 0x8020000000000000 232007 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x000000000000011c C:\Windows\System32\svchost.exe 5059 0 0 12292 0 0x8020000000000000 232013 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-19 LOCAL SERVICE NT AUTHORITY 0x00000000000003e5 Microsoft Software Key Storage Provider ECDSA_P256 Microsoft Connected Devices Platform device certificate %%2500 %%2464 0x00000000 5059 0 0 12292 0 0x8020000000000000 232016 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-19 LOCAL SERVICE NT AUTHORITY 0x00000000000003e5 Microsoft Software Key Storage Provider ECDSA_P256 Administrator@EM.KRINGLECON.COM %%2500 %%2464 0x00000000 4624 2 0 12544 0 0x8020000000000000 232019 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232032 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232113 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232115 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232134 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232137 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7386 0x00000000 {63fb3e5c-1552-a4ed-ea57-cef913299df9} - 4769 0 0 14337 0 0x8020000000000000 232142 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7391 0x00000000 {63fb3e5c-1552-a4ed-ea57-cef913299df9} - 4769 0 0 14337 0 0x8020000000000000 232148 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7394 0x00000000 {63fb3e5c-1552-a4ed-ea57-cef913299df9} - 4769 0 0 14337 0 0x8020000000000000 232153 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7397 0x00000000 {63fb3e5c-1552-a4ed-ea57-cef913299df9} - 4904 0 0 13568 0 0x8020000000000000 232158 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-20 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e4 MSExchange Messaging Policies 0x000000000023bc23 0x000000000000024c C:\Program Files\Microsoft\Exchange Server\V15\Bin\EdgeTransport.exe 4769 0 0 14337 0 0x8020000000000000 232167 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7424 0x00000000 {da7a9b8a-2861-9125-b68a-e9e3eb28012b} - 4769 0 0 14337 0 0x8020000000000000 232170 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7425 0x00000000 {da7a9b8a-2861-9125-b68a-e9e3eb28012b} - 4799 0 0 13826 0 0x8020000000000000 232173 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Administrators Builtin S-1-5-32-544 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001980 C:\Program Files\Microsoft\Exchange Server\V15\Bin\msexchangerepl.exe 4799 0 0 13826 0 0x8020000000000000 232174 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM Backup Operators Builtin S-1-5-32-551 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 0x0000000000001980 C:\Program Files\Microsoft\Exchange Server\V15\Bin\msexchangerepl.exe 4769 0 0 14337 0 0x8020000000000000 232175 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7426 0x00000000 {da7a9b8a-2861-9125-b68a-e9e3eb28012b} - 4624 2 0 12544 0 0x8020000000000000 232188 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232222 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7510 0x00000000 {64513486-a2e4-52b2-1cbd-c0085c764bf7} - 4769 0 0 14337 0 0x8020000000000000 232227 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7515 0x00000000 {212ab7f0-d245-ef23-ab9b-c6e661779aeb} - 4769 0 0 14337 0 0x8020000000000000 232228 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x60810010 0x00000012 ::ffff:169.254.202.186 7516 0x00000000 {212ab7f0-d245-ef23-ab9b-c6e661779aeb} - 4769 0 0 14337 0 0x8020000000000000 232246 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7552 0x00000000 {5d41e847-55b4-3599-43e9-2d2ad556d662} - 4624 2 0 12544 0 0x8020000000000000 232266 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232275 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7592 0x00000000 {9effe9f7-8e21-4e4b-5e37-1aca45b1b2ee} - 4738 0 0 13824 0 0x8020000000000000 232319 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM - HealthMailboxbab78a6 EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1133 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x0000000000306f13 - - - - - - - - - 9/10/2018 8:30:43 AM - - - - - - - - - 4724 0 0 13824 0 0x8020000000000000 232320 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1133 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x0000000000306f13 4769 0 0 14337 0 0x8020000000000000 232321 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7635 0x00000000 {81abd3ba-cde5-f927-85f4-4aa52e8f8e65} - 4738 0 0 13824 0 0x8020000000000000 232343 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM - HealthMailboxbe58608 EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1134 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x000000000032d12b - - - - - - - - - 9/10/2018 8:30:45 AM - - - - - - - - - 4724 0 0 13824 0 0x8020000000000000 232344 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608 EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1134 S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x000000000032d12b 4769 0 0 14337 0 0x8020000000000000 232352 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7656 0x00000000 {d015c1bc-577e-bbad-69cc-32a4cfd2ee30} - 4624 2 0 12544 0 0x8020000000000000 232354 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000035202c 3 C Kerberos WIN-KCON-EXCH16 {04d0d071-4df4-6320-5a86-3add920dc7e8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232356 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 7661 0x00000000 {a2f89197-3ebd-1bc9-a34b-d955158504ec} - 4624 2 0 12544 0 0x8020000000000000 232365 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232378 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7683 0x00000000 {e622a93e-6ebd-fbb9-6df8-da646de0f888} - 4769 0 0 14337 0 0x8020000000000000 232386 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7694 0x00000000 {5876b42f-2f19-0322-72d4-9fe16188fc4b} - 4769 0 0 14337 0 0x8020000000000000 232387 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x60810010 0x00000012 ::ffff:169.254.202.186 7695 0x00000000 {5876b42f-2f19-0322-72d4-9fe16188fc4b} - 4624 2 0 12544 0 0x8020000000000000 232395 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000003800b4 3 C Kerberos WIN-KCON-EXCH16 {04d0d071-4df4-6320-5a86-3add920dc7e8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232398 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000038014e 3 C Kerberos WIN-KCON-EXCH16 {04d0d071-4df4-6320-5a86-3add920dc7e8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232401 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000038019b 3 C Kerberos WIN-KCON-EXCH16 {04d0d071-4df4-6320-5a86-3add920dc7e8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232403 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000003802a1 3 C Kerberos WIN-KCON-EXCH16 {04d0d071-4df4-6320-5a86-3add920dc7e8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232407 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000038030f 3 C Kerberos WIN-KCON-EXCH16 {04d0d071-4df4-6320-5a86-3add920dc7e8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232410 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000038033b 3 C Kerberos WIN-KCON-EXCH16 {04d0d071-4df4-6320-5a86-3add920dc7e8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232415 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7736 0x00000000 {f0478e03-6f20-8d21-d79a-f44dcd4a35c5} - 4624 2 0 12544 0 0x8020000000000000 232423 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232439 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {00000000-0000-0000-0000-000000000000} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232441 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7762 0x00000000 {97fbfee9-0d62-c15a-bb7e-c3ab31890724} - 4768 0 0 14339 0 0x8020000000000000 232453 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1134 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 7780 4768 0 0 14339 0 0x8020000000000000 232454 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1134 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 7782 4769 0 0 14337 0 0x8020000000000000 232455 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7779 0x00000000 {21ec1948-f904-2d81-6a32-db21fe2787e9} - 4769 0 0 14337 0 0x8020000000000000 232458 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7785 0x00000000 {e6f04245-58b0-e6f3-e21d-99443047acae} - 4769 0 0 14337 0 0x8020000000000000 232459 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7786 0x00000000 {e6f04245-58b0-e6f3-e21d-99443047acae} - 4769 0 0 14337 0 0x8020000000000000 232461 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608@EM.KRINGLECON.COM EM.KRINGLECON.COM krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x60810010 0x00000012 ::ffff:169.254.202.186 7787 0x00000000 {e6f04245-58b0-e6f3-e21d-99443047acae} - 4624 2 0 12544 0 0x8020000000000000 232462 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000003ea634 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 7788 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232464 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000003ea06f 8 Advapi Negotiate WIN-KCON-EXCH16 {e6f04245-58b0-e6f3-e21d-99443047acae} - - 0 0x0000000000002850 C:\Windows\System32\inetsrv\w3wp.exe 127.0.0.1 7775 %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232487 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7824 0x00000000 {a5a8b12e-49e9-89d1-6790-8355966ea866} - 4769 0 0 14337 0 0x8020000000000000 232488 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x60810010 0x00000012 ::ffff:169.254.202.186 7825 0x00000000 {a5a8b12e-49e9-89d1-6790-8355966ea866} - 4624 2 0 12544 0 0x8020000000000000 232489 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232491 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7831 0x00000000 {8d292521-e726-9c2f-08e2-b5b365093b21} - 4624 2 0 12544 0 0x8020000000000000 232494 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232502 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232556 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000048a380 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 7917 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232559 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000048b7b3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 7919 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232573 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 232575 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1134 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 7951 4769 0 0 14337 0 0x8020000000000000 232576 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbe58608@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 7952 0x00000000 {70012c60-3c15-66fa-2dff-dff0641a2fee} - 4624 2 0 12544 0 0x8020000000000000 232578 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000049b782 8 Advapi Negotiate WIN-KCON-EXCH16 {70012c60-3c15-66fa-2dff-dff0641a2fee} - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 127.0.0.1 7812 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232579 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232612 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232614 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232619 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000004d99af 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 7996 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232622 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 8000 0x00000000 {7d23205d-27f6-dc69-fd80-d9b0c0a8c3b6} - 4769 0 0 14337 0 0x8020000000000000 232648 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8031 0x00000000 {aa0cd74b-8c75-036e-c86e-be58c753647d} - 4624 2 0 12544 0 0x8020000000000000 232653 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000504652 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232655 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000505030 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8032 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232656 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8035 0x00000000 {5b05bb8b-df0a-97fa-fdfc-c1153ad177d0} - 4769 0 0 14337 0 0x8020000000000000 232659 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8039 0x00000000 {5b05bb8b-df0a-97fa-fdfc-c1153ad177d0} - 4769 0 0 14337 0 0x8020000000000000 232666 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8046 0x00000000 {5b05bb8b-df0a-97fa-fdfc-c1153ad177d0} - 4769 0 0 14337 0 0x8020000000000000 232682 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8056 0x00000000 {4e9ee796-f703-41ce-b7ac-775d45932381} - 4769 0 0 14337 0 0x8020000000000000 232687 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8063 0x00000000 {4e9ee796-f703-41ce-b7ac-775d45932381} - 4624 2 0 12544 0 0x8020000000000000 232691 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000005262c5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8066 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232693 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232732 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8112 0x00000000 {3f6f6949-14dd-a3da-2839-c8bf2c55224c} - 4769 0 0 14337 0 0x8020000000000000 232733 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x60810010 0x00000012 ::ffff:169.254.202.186 8113 0x00000000 {3f6f6949-14dd-a3da-2839-c8bf2c55224c} - 4776 0 0 14336 0 0x8020000000000000 232739 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 232742 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000556562 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 8116 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232746 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000055ed0b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 8124 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 232763 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810000 0x00000012 ::ffff:169.254.202.186 8154 0x00000000 {2307f59a-85cc-6c7d-cc85-6ceea312efd1} - 4769 0 0 14337 0 0x8020000000000000 232764 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8155 0x00000000 {2307f59a-85cc-6c7d-cc85-6ceea312efd1} - 4624 2 0 12544 0 0x8020000000000000 232766 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000058369e 3 Authz Kerberos WIN-KCON-EXCH16 {1ea50f70-f6f6-211e-d10a-1b3f6db0e672} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232774 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000583db1 3 Authz Kerberos WIN-KCON-EXCH16 {1ea50f70-f6f6-211e-d10a-1b3f6db0e672} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 232780 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 232781 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000005860d1 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8159 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 232783 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 232784 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000586143 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8160 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232798 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000900 C:\Windows\System32\svchost.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232839 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000005b6d90 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 8201 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232845 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000005b73e4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 8202 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232860 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000005cc8a0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8229 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232865 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000005d2dcd 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8236 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232899 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000005f68c8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8292 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 232901 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 8297 4769 0 0 14337 0 0x8020000000000000 232902 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8298 0x00000000 {bc54ddd0-a069-4551-7a0d-3875205a9be3} - 4624 2 0 12544 0 0x8020000000000000 232904 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000005fcccf 8 Advapi Negotiate WIN-KCON-EXCH16 {bc54ddd0-a069-4551-7a0d-3875205a9be3} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232909 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000060b3a2 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232932 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000610531 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8326 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232944 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000006112e7 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232972 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000061d18b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 232975 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 8348 4769 0 0 14337 0 0x8020000000000000 232976 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8349 0x00000000 {3f4d0b8d-64d9-4dd5-04fe-2fc86573a1f1} - 4624 2 0 12544 0 0x8020000000000000 232978 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000061d1be 8 Advapi Negotiate WIN-KCON-EXCH16 {3f4d0b8d-64d9-4dd5-04fe-2fc86573a1f1} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 232991 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000061d727 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233007 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000620b75 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8362 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233010 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000620c07 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::1c84:3455:3f57:aa6a 8363 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233015 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000620c8f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 8364 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233020 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000621e76 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 2001:0:5ef5:79fb:1c84:3455:3f57:aa6a 8369 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 233024 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 8382 0x00000000 {69a5da56-009f-7ba0-ed8f-62c9619dbeab} - 4769 0 0 14337 0 0x8020000000000000 233046 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8397 0x00000000 {3186e4e1-9ead-bc1d-ea24-32203477afcc} - 4624 2 0 12544 0 0x8020000000000000 233048 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000062a60b 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233082 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000636128 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8421 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233094 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000064bae3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8429 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233136 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000761854 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8486 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233140 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233141 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000764167 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::5efe:169.254.202.186 8505 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233151 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000076449c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8515 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233167 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000764a23 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233193 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233194 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000076794e 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8545 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233196 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233197 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000767971 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8546 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233205 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007685b1 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233219 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000076fe62 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8579 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 233224 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8604 0x00000000 {fb94dab0-86c9-b6ca-1d63-99f8ad947e4b} - 4769 0 0 14337 0 0x8020000000000000 233229 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 8610 0x00000000 {fb94dab0-86c9-b6ca-1d63-99f8ad947e4b} - 4624 2 0 12544 0 0x8020000000000000 233242 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000785d03 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233259 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007893cf 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8650 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233266 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000078bfed 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8661 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 233274 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 8687 4769 0 0 14337 0 0x8020000000000000 233275 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 8688 0x00000000 {45fd8c24-06f0-e403-125e-6111ff8323b8} - 4624 2 0 12544 0 0x8020000000000000 233277 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000079ae33 8 Advapi Negotiate WIN-KCON-EXCH16 {45fd8c24-06f0-e403-125e-6111ff8323b8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233301 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000079ef89 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8702 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 233304 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40800000 0x00000012 ::ffff:169.254.202.186 8713 0x00000000 {b9dbdb31-6758-3f87-0f40-582cde9806d5} - 4624 2 0 12544 0 0x8020000000000000 233316 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007a47e2 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 8720 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233330 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007a4dec 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233348 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007ab359 3 Kerberos Kerberos - {dd6f8435-9c92-34f3-76d2-df861ff45037} - - 0 0x0000000000000000 - ::1 8756 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233361 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233362 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007ad5e6 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8767 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233370 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233371 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007ad6d0 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8770 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233373 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233374 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007ad6f2 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8771 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233389 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007ad95b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8777 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233394 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007ada1d 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 8779 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233399 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007ada81 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 8780 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233412 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007b06e7 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233446 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007b2fac 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8821 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233453 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007b4290 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8832 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233481 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007bbd44 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 8857 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233493 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007c049b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8862 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233496 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007c0b70 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233558 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007c8cd0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8906 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233561 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007c8d48 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 8907 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233567 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007c8db8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 8908 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233572 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007c8e39 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 8909 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233590 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007d044c 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 8942 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233595 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007d13ab 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8946 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233627 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233628 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007d58b3 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 8981 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233632 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007d5936 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 8967 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233642 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007d5daf 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 8986 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233647 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007d611f 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233653 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233654 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007d68db 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8993 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233656 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233657 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007d6903 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 8994 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233672 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007d6cb5 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233690 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007d792c 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9024 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233702 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007d79dd 3 Authz Kerberos WIN-KCON-EXCH16 {1ea50f70-f6f6-211e-d10a-1b3f6db0e672} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233705 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007d7a01 3 Authz Kerberos WIN-KCON-EXCH16 {1ea50f70-f6f6-211e-d10a-1b3f6db0e672} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233744 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e125b 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9070 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233749 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e17d4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9079 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233767 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e3c3f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9104 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 233770 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 9107 4769 0 0 14337 0 0x8020000000000000 233771 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9108 0x00000000 {2cc8ddd1-719b-03ef-ae8e-358922e5fa2d} - 4624 2 0 12544 0 0x8020000000000000 233773 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007e3dcb 8 Advapi Negotiate WIN-KCON-EXCH16 {2cc8ddd1-719b-03ef-ae8e-358922e5fa2d} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 233777 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 9111 4769 0 0 14337 0 0x8020000000000000 233778 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9112 0x00000000 {2cc8ddd1-719b-03ef-ae8e-358922e5fa2d} - 4624 2 0 12544 0 0x8020000000000000 233780 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007e3e66 8 Advapi Negotiate WIN-KCON-EXCH16 {2cc8ddd1-719b-03ef-ae8e-358922e5fa2d} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233787 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e42f8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233795 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e43cf 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233806 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e475d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233824 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e8a0f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9132 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233831 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007e8eb3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233869 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007eaa05 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9162 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233875 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233876 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007eb4e4 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9167 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233884 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233885 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007eb585 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9170 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 233887 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 233888 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000007eb5a6 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9171 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233909 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007eb8e6 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9178 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233914 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007eb96a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 9180 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233919 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007eb9ce 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 9181 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233928 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007ee615 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233961 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007ef8b0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9210 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 233974 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007efec4 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9217 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 234000 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9230 0x00000000 {5def9f90-9090-28ce-830e-32791eb7ae78} - 4768 0 0 14339 0 0x8020000000000000 234003 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 9236 4769 0 0 14337 0 0x8020000000000000 234004 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9237 0x00000000 {3f861187-64d3-2f70-f1d9-33320b2354de} - 4624 2 0 12544 0 0x8020000000000000 234006 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000007f7c6c 8 Advapi Negotiate WIN-KCON-EXCH16 {3f861187-64d3-2f70-f1d9-33320b2354de} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234026 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007f8a4f 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9246 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234038 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007f91cf 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9253 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234043 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007f95bd 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234073 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007fe5b1 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9274 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234074 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007fe5be 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 9273 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234081 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007fe63a 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 9275 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234088 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000007fe73e 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 169.254.202.186 9276 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234113 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000805703 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 234123 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9296 0x00000000 {3e80d8fa-1192-5d5b-562a-7c5ddfe6075a} - 4624 2 0 12544 0 0x8020000000000000 234141 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000805e30 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9303 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234148 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000806118 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9308 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234176 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000809de4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9323 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 234181 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 234182 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000080a628 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 9329 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234194 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000080a963 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9335 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234197 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000080ad12 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 234203 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 234204 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000080b471 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9343 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 234206 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 234207 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000080b495 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9344 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234239 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000080bb68 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234257 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000080cdb2 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9377 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234260 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000081258c 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234282 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000081e042 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9419 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234287 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000081e782 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9427 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234317 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000082113d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9460 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234328 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008285a8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9476 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234331 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000828df6 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234359 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000082b187 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9521 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 234365 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 234366 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000831c0d 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9533 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 234374 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 234375 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000831cb4 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9536 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 234377 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 234378 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000831cd2 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9537 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234397 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008320a5 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9545 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234402 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000832139 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 9547 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234407 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008321bd 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 9548 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234428 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008372ef 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9579 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234433 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000083762a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9584 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234449 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000083d18d 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9606 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234461 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000083de18 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9616 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234466 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000083e207 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 234488 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sparkle.redberry EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 10.158.210.210 47904 4768 0 0 14339 0 0x8020000000000000 234522 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM sparkle.redberry EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1152 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 234523 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM sparkle.redberry@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9651 0x00000000 {7318765e-0f18-4b0d-f8cf-11fc1a2e5e5e} - 4624 2 0 12544 0 0x8020000000000000 234525 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1152 sparkle.redberry EM.KRINGLECON 0x000000000084299a 8 Advapi Negotiate WIN-KCON-EXCH16 {7318765e-0f18-4b0d-f8cf-11fc1a2e5e5e} - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 10.158.210.210 47904 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234531 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000084322d 3 Authz Kerberos WIN-KCON-EXCH16 {1ea50f70-f6f6-211e-d10a-1b3f6db0e672} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234534 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000843253 3 Authz Kerberos WIN-KCON-EXCH16 {1ea50f70-f6f6-211e-d10a-1b3f6db0e672} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234540 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008433a2 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 9657 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234546 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000084340c 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 9658 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234553 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000843511 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 9659 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234560 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000084378d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9660 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234664 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000084c62d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9708 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 234716 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000084ce04 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9713 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 235271 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 9734 4769 0 0 14337 0 0x8020000000000000 235272 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9735 0x00000000 {af4663ca-0524-a856-26bc-e8b69e5c369c} - 4624 2 0 12544 0 0x8020000000000000 235276 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000851e2a 8 Advapi Negotiate WIN-KCON-EXCH16 {af4663ca-0524-a856-26bc-e8b69e5c369c} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235299 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235304 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000854bfe 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9750 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 235306 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 9753 4769 0 0 14337 0 0x8020000000000000 235307 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9754 0x00000000 {c5a41e11-fcaa-1b0d-e61b-bce9d4e416b1} - 4624 2 0 12544 0 0x8020000000000000 235309 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000008551d7 8 Advapi Negotiate WIN-KCON-EXCH16 {c5a41e11-fcaa-1b0d-e61b-bce9d4e416b1} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 235313 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 9757 4769 0 0 14337 0 0x8020000000000000 235314 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9758 0x00000000 {c5a41e11-fcaa-1b0d-e61b-bce9d4e416b1} - 4624 2 0 12544 0 0x8020000000000000 235316 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000085527b 8 Advapi Negotiate WIN-KCON-EXCH16 {c5a41e11-fcaa-1b0d-e61b-bce9d4e416b1} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235323 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000855603 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235331 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008556a0 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235342 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000855a33 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235353 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235354 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000855c03 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 9771 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235366 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000085606d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9783 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235371 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000085645b 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235380 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235381 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000856b0d 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9789 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235383 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235384 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000856b49 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9790 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235401 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000857032 3 C Kerberos WIN-KCON-EXCH16 {0ea3f09e-2f9b-5b70-2b34-709db60081c6} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235428 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000857f76 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9816 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 235432 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 9829 0x00000000 {0c4a6fea-a93d-7c26-d8f3-2381be2be66a} - 4624 2 0 12544 0 0x8020000000000000 235434 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000085d93d 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235475 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000860da1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9844 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235511 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000861684 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9860 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235527 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000086580e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 9879 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235537 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000866765 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9887 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235540 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000086a349 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235576 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000086dab3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 9923 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235582 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235583 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000086e521 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9928 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235591 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235592 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000086e5c3 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9931 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235594 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235595 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000086e5e2 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9932 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235614 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000086e89f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 9940 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235619 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000086e92b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 9942 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235625 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000086e98f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 9943 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235649 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000873afe 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235671 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087441a 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 9983 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235676 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087460a 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 9987 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235703 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087a150 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10006 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235717 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087a8d3 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 10016 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235722 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087ab6d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235758 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087e938 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 10052 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235764 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087e9b5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 10053 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235771 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087eabe 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 10054 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235779 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000087ec9a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10055 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235787 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000088018a 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235815 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008865f9 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10084 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235826 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000088735f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10090 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235863 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000088f0f6 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10110 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235866 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235867 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000008914d2 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 10112 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235876 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008918ed 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10118 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235880 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000891c5d 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235886 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235887 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000891cf1 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10123 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 235889 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 235890 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000891d14 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10124 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235923 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000892ef5 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235945 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000893a5c 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 10154 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235960 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000089e24c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10186 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 235967 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000089e4c4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10193 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 235983 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 10207 4769 0 0 14337 0 0x8020000000000000 235984 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 10208 0x00000000 {b00b9af7-50fe-57b6-c4b9-e4c1568c5523} - 4624 2 0 12544 0 0x8020000000000000 235986 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000089fcad 8 Advapi Negotiate WIN-KCON-EXCH16 {b00b9af7-50fe-57b6-c4b9-e4c1568c5523} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236002 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000089fff4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10220 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236010 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008a0a70 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10236 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236013 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008a4abc 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 236044 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 10268 0x00000000 {e48e20cd-8c21-833e-a6ad-af23333f4aaa} - 4624 2 0 12544 0 0x8020000000000000 236046 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000008a65b4 3 Authz Kerberos WIN-KCON-EXCH16 {123e7e3e-3eb1-340c-92c6-cf78f1f4212a} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236049 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000008a66c3 3 Authz Kerberos WIN-KCON-EXCH16 {123e7e3e-3eb1-340c-92c6-cf78f1f4212a} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236054 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008a6a83 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 10272 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 236059 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 236060 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000008a743d 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10279 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 236068 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 236069 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000008a74e1 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10282 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 236071 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 236072 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000008a7502 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10283 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236089 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008a773a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10290 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236094 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008a77bb 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 10292 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236099 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000008a7820 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 10293 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 236116 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM bushy.evergreen EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1153 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 236117 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM bushy.evergreen@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 10307 0x00000000 {355d84d8-b708-858b-77e8-b826a4af8ada} - 4624 2 0 12544 0 0x8020000000000000 236119 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1153 bushy.evergreen EM.KRINGLECON 0x000000000091f400 8 Advapi Negotiate WIN-KCON-EXCH16 {355d84d8-b708-858b-77e8-b826a4af8ada} - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 192.168.190.50 49304 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236157 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000093ab68 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 10339 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236248 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000093b98c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10351 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236785 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000093ff82 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10378 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 236787 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 10380 4769 0 0 14337 0 0x8020000000000000 236788 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 10381 0x00000000 {dfa5b7fa-e542-1fdd-5d76-0537ab6e74fb} - 4624 2 0 12544 0 0x8020000000000000 236790 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000093ffc0 8 Advapi Negotiate WIN-KCON-EXCH16 {dfa5b7fa-e542-1fdd-5d76-0537ab6e74fb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 236794 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::ffff:169.254.202.186 10383 4769 0 0 14337 0 0x8020000000000000 236795 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::ffff:169.254.202.186 10384 0x00000000 {dfa5b7fa-e542-1fdd-5d76-0537ab6e74fb} - 4624 2 0 12544 0 0x8020000000000000 236797 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000940051 8 Advapi Negotiate WIN-KCON-EXCH16 {dfa5b7fa-e542-1fdd-5d76-0537ab6e74fb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236806 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000094051b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236810 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009405b1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236826 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009408ed 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236842 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009411d6 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10405 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236847 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009413ea 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236895 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000943aae 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 10445 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236901 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000943b1f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 10446 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236906 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000943ba3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 10447 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236911 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000943cfe 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10448 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236924 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000945567 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236953 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000946bec 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10485 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 236985 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009472de 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10498 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237018 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000096fcf5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10519 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237021 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237022 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000009d7d99 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10526 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237032 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009d7fcf 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10533 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237044 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009d822d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237050 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237051 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000009d82c9 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10543 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237053 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237054 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000009d82e7 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10544 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237086 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000009d90e2 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237104 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009db4ad 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10577 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237122 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000009ded57 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237142 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009df436 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10609 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237145 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009df629 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10613 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237168 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009e19cf 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10631 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237177 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009e2105 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10639 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237180 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009e229b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237214 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009e42c8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10664 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237219 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237220 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000009e4d84 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 10670 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237228 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237229 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000009e4e27 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10673 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237231 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237232 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000009e4e48 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10674 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237251 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009e5118 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10681 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237256 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009e519d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 10683 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237261 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009e5201 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 10684 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237266 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000009e99dc 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237281 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009edb16 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10717 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237290 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f0165 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10725 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 237304 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 237305 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {28726a8c-b428-9923-fd0e-00bfab8928b1} - 4624 2 0 12544 0 0x8020000000000000 237307 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000009f2c14 8 Advapi Negotiate WIN-KCON-EXCH16 {28726a8c-b428-9923-fd0e-00bfab8928b1} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237322 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f3803 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10754 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237330 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f5a82 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10766 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237335 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f5c18 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237363 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f93b8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 10796 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237369 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f9426 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 10797 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237374 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f94a8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 10798 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237379 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009f956e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10799 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237393 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009fd805 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10833 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237398 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000009fda3f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10839 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237419 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a03d21 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 10854 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237422 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237423 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a0428a 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10857 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237431 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0458c 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 10863 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237436 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a04688 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237442 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237443 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a0470c 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10868 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237445 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237446 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a0472a 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10869 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237474 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a0548a 3 C Kerberos WIN-KCON-EXCH16 {960d0cac-3ead-7563-f119-2f40d27d1a37} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237497 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a05e32 3 Authz Kerberos WIN-KCON-EXCH16 {123e7e3e-3eb1-340c-92c6-cf78f1f4212a} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237500 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a05e56 3 Authz Kerberos WIN-KCON-EXCH16 {123e7e3e-3eb1-340c-92c6-cf78f1f4212a} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237511 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0621c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10891 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237524 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0bcae 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10931 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237527 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0be84 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10936 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237542 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0d62b 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 10949 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 237544 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 237545 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {01175e2e-538a-c4c7-1cf9-6ef16873a703} - 4624 2 0 12544 0 0x8020000000000000 237547 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a0d6d8 8 Advapi Negotiate WIN-KCON-EXCH16 {01175e2e-538a-c4c7-1cf9-6ef16873a703} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 237552 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 237553 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {01175e2e-538a-c4c7-1cf9-6ef16873a703} - 4624 2 0 12544 0 0x8020000000000000 237555 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a0d846 8 Advapi Negotiate WIN-KCON-EXCH16 {01175e2e-538a-c4c7-1cf9-6ef16873a703} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237560 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0de19 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237569 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0dec0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237580 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a0e233 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237605 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a12735 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 10964 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237608 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a127e6 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237638 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a143e3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 10987 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237649 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237650 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a14c9b 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 10992 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237658 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237659 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a14d4e 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10995 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237661 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237662 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a14d72 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 10996 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237681 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a14f9c 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11002 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237686 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a1501d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 11004 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237691 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a15081 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 11005 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 237716 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {d0effbd0-733b-86b7-ed5f-8e3c61b33875} - 4624 2 0 12544 0 0x8020000000000000 237718 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a186f7 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237745 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a19d0e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11040 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237777 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a1a65a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11054 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237791 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a23920 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11076 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237805 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a243f8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11092 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237808 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a244af 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237858 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a2a588 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 11128 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237863 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a2a609 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 11130 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237880 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a2a691 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 11131 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237886 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a2a7dc 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11133 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237906 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a31645 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237928 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a3201a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11173 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237931 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a321e1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11176 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 237942 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 237943 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {dcedd2ec-8887-f2d2-4c49-41b61641b5dd} - 4624 2 0 12544 0 0x8020000000000000 237945 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a336f6 8 Advapi Negotiate WIN-KCON-EXCH16 {dcedd2ec-8887-f2d2-4c49-41b61641b5dd} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237960 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a35ab7 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11194 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237964 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237965 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a35fcf 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11200 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237973 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a365f2 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11210 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 237978 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a366c7 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237984 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237985 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a36840 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11213 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 237987 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 237988 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a3685e 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11214 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238003 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a37747 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 238011 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 test.user EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40634 4624 2 0 12544 0 0x8020000000000000 238022 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a38a68 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11248 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238029 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a3e0e3 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238050 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a41f66 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 11273 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238070 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a42cf2 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 11280 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238092 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a45db2 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11296 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238100 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a4a5d9 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11303 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238103 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a4a6a5 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238140 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a53b3d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11330 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 238147 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 238148 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a56f3f 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 11333 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 238156 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 238157 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a571c8 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11336 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 238159 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 238160 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a571e4 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11337 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238179 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a57493 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11345 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238184 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a57516 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 11347 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238189 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a5757a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 11348 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238200 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a5c25f 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 11372 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238204 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a5c434 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11375 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238219 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a61dbf 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11394 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238227 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a6258d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11403 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238230 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a6264a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 238264 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {bc15561e-907b-90b3-ffb9-49a6b91d8c9f} - 4624 2 0 12544 0 0x8020000000000000 238266 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a65de0 3 Authz Kerberos WIN-KCON-EXCH16 {89fb82ee-b231-db2b-aa32-1cd326665901} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238269 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a65e05 3 Authz Kerberos WIN-KCON-EXCH16 {89fb82ee-b231-db2b-aa32-1cd326665901} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238273 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a65ee8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 11433 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238289 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a65f5d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 11434 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238295 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a65fde 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 169.254.202.186 11435 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238311 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a66358 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11437 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238324 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a6cee7 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11472 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238327 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a6d106 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 11476 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238351 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a6ea39 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11497 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 238353 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 238354 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {94808536-1a08-9570-4ea5-8d0de62a2edb} - 4624 2 0 12544 0 0x8020000000000000 238356 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a6ea5e 8 Advapi Negotiate WIN-KCON-EXCH16 {94808536-1a08-9570-4ea5-8d0de62a2edb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 238360 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 238361 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {94808536-1a08-9570-4ea5-8d0de62a2edb} - 4624 2 0 12544 0 0x8020000000000000 238363 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a6ead7 8 Advapi Negotiate WIN-KCON-EXCH16 {94808536-1a08-9570-4ea5-8d0de62a2edb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238370 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a70eac 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238374 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a70f42 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 238387 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 238388 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a71163 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11507 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238400 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a7159c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11519 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238403 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a7165e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 238409 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 238410 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a716ce 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11522 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 238412 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 238413 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a716ea 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11523 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238433 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a721db 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238459 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a72742 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238473 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a73c59 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11562 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 238475 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM shinny.upatree EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1157 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 238476 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM shinny.upatree@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {39096cb6-8d74-c252-c5e0-f14cf97da8b8} - 4624 2 0 12544 0 0x8020000000000000 238478 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1157 shinny.upatree EM.KRINGLECON 0x0000000000a789e3 8 Advapi Negotiate WIN-KCON-EXCH16 {39096cb6-8d74-c252-c5e0-f14cf97da8b8} - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.18.101.231 2319 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238903 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a7b83a 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238958 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a7efbc 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11611 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 238983 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a7f4f5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11622 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 238993 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 238994 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {2e6a836b-6848-6a26-5a1a-210b563b0a55} - 4624 2 0 12544 0 0x8020000000000000 238996 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a81a89 8 Advapi Negotiate WIN-KCON-EXCH16 {2e6a836b-6848-6a26-5a1a-210b563b0a55} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239011 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a83682 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11642 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239020 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a83ef0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11651 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239023 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a83fa1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239050 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a8b289 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 11675 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239055 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239056 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a8b40c 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 11678 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239064 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239065 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a8b636 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11682 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239067 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239068 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000a8b656 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11683 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239087 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a8bfb9 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11690 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239092 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a8c03a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 11692 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239097 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a8c09e 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 11693 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239124 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000a902da 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239145 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a90c56 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11726 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239152 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a911a4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11733 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239169 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a96ddb 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11754 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239177 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a97eec 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11767 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239180 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a97fa3 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239243 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a9cda6 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 11813 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239248 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a9ce11 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::34a2:32ea:3f57:aa6a 11814 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239253 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a9ceae 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 11815 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239269 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000a9cf89 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 11816 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239293 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000b9b1f3 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239314 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000d33da8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11884 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239324 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000d9a538 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 11899 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239365 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000e7156e 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 11931 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239369 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239370 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000edbc48 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11940 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239383 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000efaf75 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 11950 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239392 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000000efb613 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239398 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239399 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000f67232 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11964 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239401 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239402 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000000f673b2 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 11965 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239410 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000000f818c8 3 C Kerberos WIN-KCON-EXCH16 {cdd6f990-8dcb-cf9b-0394-ba2d17b65db8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239426 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001044d47 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 11996 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239441 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000010f8643 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12045 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239446 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000010fcf26 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12053 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239459 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000010fece3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12078 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239465 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000010ff958 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12096 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239468 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000010ffa4e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239513 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001104952 3 Authz Kerberos WIN-KCON-EXCH16 {89fb82ee-b231-db2b-aa32-1cd326665901} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239516 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001104976 3 Authz Kerberos WIN-KCON-EXCH16 {89fb82ee-b231-db2b-aa32-1cd326665901} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239532 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001104e16 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12128 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239539 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239540 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000011051d7 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 12133 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239550 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239551 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001105302 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12137 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239553 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239554 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000110532b 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12139 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239573 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001105dcf 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12148 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239580 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001105eee 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 12152 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239585 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001105f54 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 12153 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239613 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000110c8d1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12198 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239616 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000110ced0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12204 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 239623 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 239624 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {3e4e5028-f57f-53a1-7476-9e8021e04515} - 4624 2 0 12544 0 0x8020000000000000 239626 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001110a32 8 Advapi Negotiate WIN-KCON-EXCH16 {3e4e5028-f57f-53a1-7476-9e8021e04515} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 239647 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 239648 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {b0667115-342b-976c-bb8a-4a3dcfac82ea} - 4624 2 0 12544 0 0x8020000000000000 239650 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001110dd5 8 Advapi Negotiate WIN-KCON-EXCH16 {b0667115-342b-976c-bb8a-4a3dcfac82ea} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 239655 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 239656 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {b0667115-342b-976c-bb8a-4a3dcfac82ea} - 4624 2 0 12544 0 0x8020000000000000 239658 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001110e8f 8 Advapi Negotiate WIN-KCON-EXCH16 {b0667115-342b-976c-bb8a-4a3dcfac82ea} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239663 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001110f59 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12237 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239670 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011120ed 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239678 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011121cb 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239688 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001112518 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239706 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001112dc0 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 12263 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239709 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001112e68 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239732 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000111846d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 12299 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239738 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011184f0 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::34cb:3c75:3f57:aa6a 12300 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239743 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011185a6 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 169.254.202.186 12301 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239748 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001118909 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12302 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 239751 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {22d243d9-6703-f814-5778-ae66783c6d1a} - 4624 2 0 12544 0 0x8020000000000000 239753 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000111a62c 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239801 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001124127 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12352 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239825 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001124701 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12365 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 239827 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 aaron.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34049 4625 0 0 12544 0 0x8010000000000000 239830 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 abhishek.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34397 4625 0 0 12544 0 0x8010000000000000 239831 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 adam.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38341 4625 0 0 12544 0 0x8010000000000000 239832 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ahmed.ali EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46825 4625 0 0 12544 0 0x8010000000000000 239837 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ahmed.hassan EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40647 4625 0 0 12544 0 0x8010000000000000 239838 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ahmed.mohamed EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44909 4625 0 0 12544 0 0x8010000000000000 239839 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ajay.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45685 4625 0 0 12544 0 0x8010000000000000 239840 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 alex.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46395 4625 0 0 12544 0 0x8010000000000000 239841 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ali.khan EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46055 4625 0 0 12544 0 0x8010000000000000 239842 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ali.raza EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38589 4625 0 0 12544 0 0x8010000000000000 239848 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 amanda.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36389 4625 0 0 12544 0 0x8010000000000000 239858 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 amit.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45367 4625 0 0 12544 0 0x8010000000000000 239860 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 amit.sharma EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42835 4624 2 0 12544 0 0x8020000000000000 239862 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001128c10 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 12383 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 239864 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 amit.singh EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45215 4625 0 0 12544 0 0x8010000000000000 239865 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 amy.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37391 4625 0 0 12544 0 0x8010000000000000 239866 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 andrew.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38457 4625 0 0 12544 0 0x8010000000000000 239867 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 anil.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33061 4625 0 0 12544 0 0x8010000000000000 239868 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 arun.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40427 4625 0 0 12544 0 0x8010000000000000 239869 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ashley.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38951 4625 0 0 12544 0 0x8010000000000000 239870 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ashley.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 32835 4776 0 0 14336 0 0x8020000000000000 239872 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239873 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000112d8e3 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12389 %%1833 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 239877 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ashley.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38593 4625 0 0 12544 0 0x8010000000000000 239881 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ashley.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46041 4625 0 0 12544 0 0x8010000000000000 239882 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ashley.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43043 4625 0 0 12544 0 0x8010000000000000 239883 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ashok.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39311 4625 0 0 12544 0 0x8010000000000000 239884 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ben.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37287 4776 0 0 14336 0 0x8020000000000000 239889 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239890 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000112dbe1 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12398 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 239892 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 239893 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000112dc00 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12399 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239908 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000112dec1 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 239911 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000112df2a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12408 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 239913 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 bob.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35623 4625 0 0 12544 0 0x8010000000000000 239914 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 brandon.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35347 4625 0 0 12544 0 0x8010000000000000 239915 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 brian.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33475 4625 0 0 12544 0 0x8010000000000000 239917 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 brian.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35783 4625 0 0 12544 0 0x8010000000000000 239918 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 brian.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36227 4625 0 0 12544 0 0x8010000000000000 239933 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 bushy.evergreen EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40493 4624 2 0 12544 0 0x8020000000000000 239936 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000112e65d 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 239940 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.anderson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41415 4625 0 0 12544 0 0x8010000000000000 239941 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36249 4625 0 0 12544 0 0x8010000000000000 239942 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.davis EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34387 4625 0 0 12544 0 0x8010000000000000 239943 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33439 4625 0 0 12544 0 0x8010000000000000 239944 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38709 4625 0 0 12544 0 0x8010000000000000 239945 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.lee EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41107 4625 0 0 12544 0 0x8010000000000000 239946 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.martin EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39243 4625 0 0 12544 0 0x8010000000000000 239947 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.miller EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39521 4625 0 0 12544 0 0x8010000000000000 239948 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41487 4625 0 0 12544 0 0x8010000000000000 239958 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.taylor EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35849 4625 0 0 12544 0 0x8010000000000000 239959 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34463 4625 0 0 12544 0 0x8010000000000000 239960 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 chris.wilson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34605 4625 0 0 12544 0 0x8010000000000000 239966 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 christopher.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43163 4625 0 0 12544 0 0x8010000000000000 239967 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 dan.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41555 4625 0 0 12544 0 0x8010000000000000 239968 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 daniel.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34815 4625 0 0 12544 0 0x8010000000000000 239969 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 dave.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34685 4625 0 0 12544 0 0x8010000000000000 239970 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.anderson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42105 4624 2 0 12544 0 0x8020000000000000 239972 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011314b5 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 12432 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 239974 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40823 4625 0 0 12544 0 0x8010000000000000 239976 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33513 4625 0 0 12544 0 0x8010000000000000 239977 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38441 4625 0 0 12544 0 0x8010000000000000 239978 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.lee EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43599 4625 0 0 12544 0 0x8010000000000000 239979 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.miller EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34159 4625 0 0 12544 0 0x8010000000000000 239980 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42523 4625 0 0 12544 0 0x8010000000000000 239984 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44955 4625 0 0 12544 0 0x8010000000000000 239985 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 david.wilson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37957 4625 0 0 12544 0 0x8010000000000000 239986 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 deepak.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43671 4625 0 0 12544 0 0x8010000000000000 239987 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 deepak.sharma EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40211 4625 0 0 12544 0 0x8010000000000000 239988 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 dinesh.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41163 4625 0 0 12544 0 0x8010000000000000 239989 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 eric.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40631 4625 0 0 12544 0 0x8010000000000000 239990 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 eric.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42465 4625 0 0 12544 0 0x8010000000000000 239991 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 gaurav.sharma EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35367 4625 0 0 12544 0 0x8010000000000000 239992 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 greg.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34849 4625 0 0 12544 0 0x8010000000000000 239993 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 gurpreet.singh EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35343 4625 0 0 12544 0 0x8010000000000000 239994 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 harpreet.singh EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33813 4625 0 0 12544 0 0x8010000000000000 239995 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 heather.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37285 4625 0 0 12544 0 0x8010000000000000 240002 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 holly.evergreen EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33931 4625 0 0 12544 0 0x8010000000000000 240008 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 imran.khan EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46689 4625 0 0 12544 0 0x8010000000000000 240009 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 james.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43193 4625 0 0 12544 0 0x8010000000000000 240010 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 james.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37651 4625 0 0 12544 0 0x8010000000000000 240011 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 james.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37669 4625 0 0 12544 0 0x8010000000000000 240012 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 james.lee EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34061 4625 0 0 12544 0 0x8010000000000000 240013 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 james.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33819 4625 0 0 12544 0 0x8010000000000000 240014 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 james.taylor EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39699 4625 0 0 12544 0 0x8010000000000000 240015 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 james.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44769 4625 0 0 12544 0 0x8010000000000000 240017 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jamie.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38217 4625 0 0 12544 0 0x8010000000000000 240018 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jane.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38339 4625 0 0 12544 0 0x8010000000000000 240021 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jason.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 32867 4625 0 0 12544 0 0x8010000000000000 240022 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jason.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39961 4625 0 0 12544 0 0x8010000000000000 240023 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jason.lee EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35863 4625 0 0 12544 0 0x8010000000000000 240024 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jason.miller EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44661 4624 2 0 12544 0 0x8020000000000000 240026 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001137590 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240028 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jason.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43803 4625 0 0 12544 0 0x8010000000000000 240033 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jason.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45137 4625 0 0 12544 0 0x8010000000000000 240039 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jeff.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44045 4625 0 0 12544 0 0x8010000000000000 240041 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jennifer.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34619 4625 0 0 12544 0 0x8010000000000000 240044 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jennifer.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35123 4625 0 0 12544 0 0x8010000000000000 240045 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jennifer.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45631 4625 0 0 12544 0 0x8010000000000000 240046 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jessica.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45939 4625 0 0 12544 0 0x8010000000000000 240051 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jessica.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35717 4625 0 0 12544 0 0x8010000000000000 240052 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jessica.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38581 4625 0 0 12544 0 0x8010000000000000 240053 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jessica.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34005 4624 2 0 12544 0 0x8020000000000000 240055 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001137e08 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 12470 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240057 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jessica.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40447 4625 0 0 12544 0 0x8010000000000000 240058 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 joe.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36279 4625 0 0 12544 0 0x8010000000000000 240059 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.anderson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40349 4625 0 0 12544 0 0x8010000000000000 240060 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46561 4625 0 0 12544 0 0x8010000000000000 240061 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.davis EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36759 4625 0 0 12544 0 0x8010000000000000 240062 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36553 4624 2 0 12544 0 0x8020000000000000 240064 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000113ebd1 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 12474 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240066 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33769 4625 0 0 12544 0 0x8010000000000000 240069 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.lee EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38159 4625 0 0 12544 0 0x8010000000000000 240070 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.miller EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39167 4625 0 0 12544 0 0x8010000000000000 240071 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45261 4625 0 0 12544 0 0x8010000000000000 240072 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.taylor EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40461 4625 0 0 12544 0 0x8010000000000000 240074 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43417 4625 0 0 12544 0 0x8010000000000000 240075 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 john.wilson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40105 4625 0 0 12544 0 0x8010000000000000 240076 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jose.garcia EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37491 4625 0 0 12544 0 0x8010000000000000 240077 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 jose.rodriguez EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37049 4625 0 0 12544 0 0x8010000000000000 240078 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 josh.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33853 4625 0 0 12544 0 0x8010000000000000 240079 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 justin.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35017 4625 0 0 12544 0 0x8010000000000000 240081 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 karen.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37563 4625 0 0 12544 0 0x8010000000000000 240082 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 katie.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46229 4625 0 0 12544 0 0x8010000000000000 240083 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kelly.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44259 4625 0 0 12544 0 0x8010000000000000 240084 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kevin.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36519 4625 0 0 12544 0 0x8010000000000000 240085 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kevin.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44897 4625 0 0 12544 0 0x8010000000000000 240096 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kevin.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43503 4625 0 0 12544 0 0x8010000000000000 240097 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kevin.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33639 4624 2 0 12544 0 0x8020000000000000 240099 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001144e78 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12496 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240101 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kim.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41309 4625 0 0 12544 0 0x8010000000000000 240102 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kiran.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45933 4625 0 0 12544 0 0x8010000000000000 240103 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 kyle.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39267 4625 0 0 12544 0 0x8010000000000000 240104 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 laura.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44953 4625 0 0 12544 0 0x8010000000000000 240105 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 lee EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36355 4625 0 0 12544 0 0x8010000000000000 240106 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 linda.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38879 4625 0 0 12544 0 0x8010000000000000 240107 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 lisa.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37109 4625 0 0 12544 0 0x8010000000000000 240111 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 manish.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33595 4625 0 0 12544 0 0x8010000000000000 240112 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 manoj.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34721 4625 0 0 12544 0 0x8010000000000000 240113 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mark.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41313 4625 0 0 12544 0 0x8010000000000000 240114 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mark.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40379 4624 2 0 12544 0 0x8020000000000000 240119 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001145b81 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12506 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240121 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001145be0 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240123 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mark.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42705 4625 0 0 12544 0 0x8010000000000000 240124 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mark.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45945 4625 0 0 12544 0 0x8010000000000000 240125 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mark.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41139 4625 0 0 12544 0 0x8010000000000000 240126 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mary.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43411 4625 0 0 12544 0 0x8010000000000000 240131 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 matt.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45117 4625 0 0 12544 0 0x8010000000000000 240134 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 matt.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44221 4625 0 0 12544 0 0x8010000000000000 240135 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 matthew.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36293 4625 0 0 12544 0 0x8010000000000000 240136 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 melissa.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40271 4625 0 0 12544 0 0x8010000000000000 240137 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44067 4625 0 0 12544 0 0x8010000000000000 240138 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.davis EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41001 4625 0 0 12544 0 0x8010000000000000 240141 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35915 4625 0 0 12544 0 0x8010000000000000 240142 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40213 4625 0 0 12544 0 0x8010000000000000 240143 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.lee EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37347 4625 0 0 12544 0 0x8010000000000000 240144 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.miller EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40855 4625 0 0 12544 0 0x8010000000000000 240145 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41753 4625 0 0 12544 0 0x8010000000000000 240155 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.taylor EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46359 4625 0 0 12544 0 0x8010000000000000 240156 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43055 4625 0 0 12544 0 0x8010000000000000 240157 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michael.wilson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39431 4625 0 0 12544 0 0x8010000000000000 240158 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 michelle.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35847 4625 0 0 12544 0 0x8010000000000000 240159 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mike.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44137 4625 0 0 12544 0 0x8010000000000000 240160 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mike.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37685 4625 0 0 12544 0 0x8010000000000000 240161 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mike.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39899 4624 2 0 12544 0 0x8020000000000000 240163 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000114a0bc 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12532 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240165 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mike.miller EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35173 4625 0 0 12544 0 0x8010000000000000 240166 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mike.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33661 4625 0 0 12544 0 0x8010000000000000 240167 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mike.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38883 4768 0 0 14339 0 0x8020000000000000 240168 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM minty.candycane EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1156 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 240169 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM minty.candycane@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {d1a830e3-d804-588d-aea1-48b8610c3cc1} - 4624 2 0 12544 0 0x8020000000000000 240171 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1156 minty.candycane EM.KRINGLECON 0x000000000114a4fe 8 Advapi Negotiate WIN-KCON-EXCH16 {d1a830e3-d804-588d-aea1-48b8610c3cc1} - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38283 %%1833 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240176 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mohamed.ahmed EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44011 4625 0 0 12544 0 0x8010000000000000 240177 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 mohamed.ali EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35577 4776 0 0 14336 0 0x8020000000000000 240179 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 240180 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000114a65e 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 12536 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 240188 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 240189 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000114a6fd 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12539 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 240191 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 240192 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000114a71b 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12540 %%1833 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240210 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 muhammad.ali EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35871 4625 0 0 12544 0 0x8010000000000000 240211 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 naveen.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38409 4624 2 0 12544 0 0x8020000000000000 240213 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000114aa13 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12548 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240218 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000114aab4 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 12550 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240223 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000114ab1c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 12551 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240227 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 nicole.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42331 4625 0 0 12544 0 0x8010000000000000 240228 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 paul.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39555 4625 0 0 12544 0 0x8010000000000000 240229 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 pepper.minstix EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41835 4625 0 0 12544 0 0x8010000000000000 240230 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 pradeep.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46629 4625 0 0 12544 0 0x8010000000000000 240231 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 praveen.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34683 4625 0 0 12544 0 0x8010000000000000 240232 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 rachel.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40545 4625 0 0 12544 0 0x8010000000000000 240235 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 rahul.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44923 4625 0 0 12544 0 0x8010000000000000 240236 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 rahul.sharma EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36323 4625 0 0 12544 0 0x8010000000000000 240237 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 rahul.singh EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37411 4625 0 0 12544 0 0x8010000000000000 240242 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 raj.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40999 4624 2 0 12544 0 0x8020000000000000 240244 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000114bced 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240251 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 rajesh.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43989 4625 0 0 12544 0 0x8010000000000000 240252 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 rakesh.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44947 4625 0 0 12544 0 0x8010000000000000 240253 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ravi.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39523 4625 0 0 12544 0 0x8010000000000000 240254 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 richard.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43893 4625 0 0 12544 0 0x8010000000000000 240255 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 robert.brown EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46511 4625 0 0 12544 0 0x8010000000000000 240266 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 robert.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38361 4625 0 0 12544 0 0x8010000000000000 240267 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 robert.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44107 4625 0 0 12544 0 0x8010000000000000 240268 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 robert.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38909 4625 0 0 12544 0 0x8010000000000000 240269 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 robert.williams EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46847 4625 0 0 12544 0 0x8010000000000000 240272 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 rohit.sharma EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 38907 4625 0 0 12544 0 0x8010000000000000 240273 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ryan.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45777 4625 0 0 12544 0 0x8010000000000000 240281 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 ryan.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39107 4625 0 0 12544 0 0x8010000000000000 240282 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 salman.khan EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37089 4625 0 0 12544 0 0x8010000000000000 240283 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sam.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33931 4625 0 0 12544 0 0x8010000000000000 240286 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 samantha.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46483 4625 0 0 12544 0 0x8010000000000000 240287 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sameer.khan EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36429 4625 0 0 12544 0 0x8010000000000000 240288 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sana.khan EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39507 4625 0 0 12544 0 0x8010000000000000 240289 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sandeep.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34119 4625 0 0 12544 0 0x8010000000000000 240290 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sandeep.singh EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46397 4625 0 0 12544 0 0x8010000000000000 240291 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sanjay.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33519 4625 0 0 12544 0 0x8010000000000000 240292 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 santhosh.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43155 4625 0 0 12544 0 0x8010000000000000 240293 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 santosh.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35377 4625 0 0 12544 0 0x8010000000000000 240294 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sara.khan EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43401 4625 0 0 12544 0 0x8010000000000000 240299 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sarah.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39007 4625 0 0 12544 0 0x8010000000000000 240300 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sarah.jones EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 33207 4624 2 0 12544 0 0x8020000000000000 240302 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001157403 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12581 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240304 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sarah.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41459 4625 0 0 12544 0 0x8010000000000000 240305 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sathish.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40415 4625 0 0 12544 0 0x8010000000000000 240306 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 scott.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36913 4625 0 0 12544 0 0x8010000000000000 240313 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 scott.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34939 4625 0 0 12544 0 0x8010000000000000 240314 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 senthil.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43575 4625 0 0 12544 0 0x8010000000000000 240315 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 shinny.upatree EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 44523 4624 2 0 12544 0 0x8020000000000000 240317 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011578ec 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12589 %%1840 - - - %%1843 0x0000000000000000 %%1842 4625 0 0 12544 0 0x8010000000000000 240319 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sparkle.redberry EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 32943 4625 0 0 12544 0 0x8010000000000000 240321 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 stephanie.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 37247 4625 0 0 12544 0 0x8010000000000000 240322 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 steve.johnson EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 45979 4625 0 0 12544 0 0x8010000000000000 240323 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 steve.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42643 4625 0 0 12544 0 0x8010000000000000 240324 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 steven.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 42521 4625 0 0 12544 0 0x8010000000000000 240331 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sugerplum.mary EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 39805 4625 0 0 12544 0 0x8010000000000000 240332 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 sunil.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 41195 4625 0 0 12544 0 0x8010000000000000 240333 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 suresh.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36289 4625 0 0 12544 0 0x8010000000000000 240334 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 tim.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 46305 4625 0 0 12544 0 0x8010000000000000 240335 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 tom.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 34349 4625 0 0 12544 0 0x8010000000000000 240336 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 tyler.smith EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 35291 4625 0 0 12544 0 0x8010000000000000 240337 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 vijay.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 43345 4625 0 0 12544 0 0x8010000000000000 240338 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 vinod.kumar EM.KRINGLECON 0xc000006d %%2313 0xc0000064 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40823 4625 0 0 12544 0 0x8010000000000000 240339 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-0-0 wunorse.openslae EM.KRINGLECON 0xc000006d %%2313 0xc000006a 8 Advapi Negotiate WIN-KCON-EXCH16 - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 36161 4624 2 0 12544 0 0x8020000000000000 240350 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000115bca4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12619 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240358 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000115daae 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 12633 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240361 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000115db6c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240411 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011644ba 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 12672 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240422 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011645a5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::34cb:3c75:3f57:aa6a 12674 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240427 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001164626 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 12675 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240432 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001164a0e 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 12677 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240450 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000116ac4a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12724 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240453 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000116ae95 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12731 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 240464 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 240466 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {fc0bb33f-c63b-87f1-b061-594e4d5ddae9} - 4624 2 0 12544 0 0x8020000000000000 240468 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000116c31b 8 Advapi Negotiate WIN-KCON-EXCH16 {fc0bb33f-c63b-87f1-b061-594e4d5ddae9} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240487 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000116cd85 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 12759 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 240490 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 240491 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001171374 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12764 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 240502 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 240503 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001171880 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12771 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 240505 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 240506 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000117189e 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12772 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240522 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001172435 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240530 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001174d39 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12781 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240533 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001174e2b 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 240550 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {36fb08ee-3e8b-2e7e-1b8a-098ba11e1097} - 4624 2 0 12544 0 0x8020000000000000 240552 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001175767 3 Authz Kerberos WIN-KCON-EXCH16 {05b79082-7474-6bf8-2db3-7095371a7ff4} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240555 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001175797 3 Authz Kerberos WIN-KCON-EXCH16 {05b79082-7474-6bf8-2db3-7095371a7ff4} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 240568 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001175c0e 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 12808 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 240570 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM minty.candycane EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1156 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 240571 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM minty.candycane@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {5b50bc0d-2707-1b79-e2cb-6e5872170f2d} - 4624 2 0 12544 0 0x8020000000000000 240573 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1156 minty.candycane EM.KRINGLECON 0x0000000001175cd9 8 Advapi Negotiate WIN-KCON-EXCH16 {5b50bc0d-2707-1b79-e2cb-6e5872170f2d} - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 172.31.254.101 40762 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241261 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000117f5a7 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12857 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241298 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001183c69 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12863 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 241319 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 241320 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {bc1e9b55-30ce-6592-297e-5dbaa65f7d1c} - 4624 2 0 12544 0 0x8020000000000000 241322 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000118579d 8 Advapi Negotiate WIN-KCON-EXCH16 {bc1e9b55-30ce-6592-297e-5dbaa65f7d1c} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 241326 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 241327 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {bc1e9b55-30ce-6592-297e-5dbaa65f7d1c} - 4624 2 0 12544 0 0x8020000000000000 241329 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001185821 8 Advapi Negotiate WIN-KCON-EXCH16 {bc1e9b55-30ce-6592-297e-5dbaa65f7d1c} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241334 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011859f9 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12882 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241337 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001185c31 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241341 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001185cc8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241357 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001185fe0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241381 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001186605 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 12897 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241384 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000118672a 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241415 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000118a5d1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 12924 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 241420 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 241421 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000118a78c 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 12928 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 241429 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 241430 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000118a82b 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12931 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 241432 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 241433 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000118a84b 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12932 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241452 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000118ac19 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 12941 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241457 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000118acd9 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 12944 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241462 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000118ad57 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 12945 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241467 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000118c18e 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241504 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000011bd5a1 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 12975 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241507 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000012395c8 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 12977 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241561 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000013a73e7 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13028 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241615 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000140f8ad 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13052 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241620 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000140f991 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241655 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000014d956b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 13092 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241662 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000014db0ad 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13097 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241664 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015042b2 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 13100 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241669 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000150431b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 13101 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241698 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001506aea 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241726 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000150a1e2 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13143 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241732 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000150a4cb 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13151 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241762 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000150ecab 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13175 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 241765 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 241766 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000150f270 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13182 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241790 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000150fce0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13198 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241793 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000150fe85 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 241799 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 241800 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001514526 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13202 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 241802 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 241803 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001514548 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13203 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241819 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000151479e 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241870 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001516ccc 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 13238 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241873 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001518556 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 241882 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM wunorse.openslae EM.KRINGLECON S-1-5-21-25059752-1411454016-2901770228-1158 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 241883 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM wunorse.openslae@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {70530bbf-9034-ad3c-d6bf-77e55c3f1ef4} - 4624 2 0 12544 0 0x8020000000000000 241885 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1158 wunorse.openslae EM.KRINGLECON 0x000000000151e894 8 Advapi Negotiate WIN-KCON-EXCH16 {70530bbf-9034-ad3c-d6bf-77e55c3f1ef4} - - 0 0x00000000000019f0 C:\Windows\System32\inetsrv\w3wp.exe 10.231.108.200 34610 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241900 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001521e44 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13273 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241911 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001522425 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13278 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 241951 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 241952 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {0819e650-26ed-a087-9250-493882396bea} - 4624 2 0 12544 0 0x8020000000000000 241954 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001523dc3 8 Advapi Negotiate WIN-KCON-EXCH16 {0819e650-26ed-a087-9250-493882396bea} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 241968 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000152861d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13299 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242023 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000152a5e5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13314 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242026 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000152a75d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242613 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000152e97c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13333 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 242642 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 242643 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001530f92 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 13335 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 242651 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 242652 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000153106f 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13338 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 242654 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 242655 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001531091 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13339 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242674 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015312c5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13346 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242679 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001531388 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 13348 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242684 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015313fc 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 13349 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242703 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001538b4e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13369 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242706 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001538f30 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13372 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242722 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000153aa35 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13387 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242740 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000153b26e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13396 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242745 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000153b427 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242811 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000153fe81 3 Authz Kerberos WIN-KCON-EXCH16 {05b79082-7474-6bf8-2db3-7095371a7ff4} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242814 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000153ff1e 3 Authz Kerberos WIN-KCON-EXCH16 {05b79082-7474-6bf8-2db3-7095371a7ff4} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242817 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000153ff89 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 13433 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242822 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000153fff4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::107e:3fd:3f57:aa6a 13434 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242842 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015400a5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 13435 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242856 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015405d7 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13438 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242928 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000154c53f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13476 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 242939 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000154e88b 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 13486 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 243085 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 243086 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {b5e0c6aa-7fd1-b6c2-6ed1-a986d92d630f} - 4624 2 0 12544 0 0x8020000000000000 243088 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001555cab 8 Advapi Negotiate WIN-KCON-EXCH16 {b5e0c6aa-7fd1-b6c2-6ed1-a986d92d630f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 243092 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 243093 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {b5e0c6aa-7fd1-b6c2-6ed1-a986d92d630f} - 4624 2 0 12544 0 0x8020000000000000 243095 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001555d76 8 Advapi Negotiate WIN-KCON-EXCH16 {b5e0c6aa-7fd1-b6c2-6ed1-a986d92d630f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243113 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001555f94 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13516 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243128 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001556942 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243132 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001556a20 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243155 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001556e7e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243173 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243174 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000015571e8 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13526 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243220 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243221 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001557b64 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13537 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243223 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243224 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001557b85 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13538 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243237 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000155843a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13547 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243242 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000155851b 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243250 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001558b42 3 C Kerberos WIN-KCON-EXCH16 {9a3ccb55-e534-7379-c43b-132f78e8e79f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243274 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001560316 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13573 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 243326 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {48c035cb-f633-70f3-14dc-e052f326c026} - 4624 2 0 12544 0 0x8020000000000000 243328 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000015652a2 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243342 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-18 SYSTEM NT AUTHORITY 0x00000000000003e7 5 Advapi Negotiate - {e4acbae0-c02c-a715-8863-4f990af88f6d} - - 0 0x0000000000000290 C:\Windows\System32\services.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243369 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000156f921 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13615 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243393 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015702de 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 13626 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243408 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001576c00 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13642 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243430 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000157c0a9 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13652 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243433 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000157c163 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243469 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015882c1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13675 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243474 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243475 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000158d965 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 13677 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243483 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243484 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000158dcff 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13680 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243486 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243487 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000158dd20 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13681 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243506 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015914ae 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13689 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243511 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001591537 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 13691 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243516 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000159159e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 13692 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243535 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000015a6fd4 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243553 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015adcb6 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 13717 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243556 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015b5fc5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13721 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 243562 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 243563 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {1d43be09-9149-b132-20a8-b12ebf7b54e2} - 4624 2 0 12544 0 0x8020000000000000 243565 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000015c094b 8 Advapi Negotiate WIN-KCON-EXCH16 {1d43be09-9149-b132-20a8-b12ebf7b54e2} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243598 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015cb44c 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 13735 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243615 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015e6e08 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13744 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243618 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000015e751d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243654 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016084ae 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 13776 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243660 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000160851d 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::107e:3fd:3f57:aa6a 13778 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243665 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016085a5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 13779 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243670 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001608787 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13783 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243680 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001609bc6 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243713 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016172c3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13835 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243723 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016179b0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13845 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243755 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000161c5d8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13880 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243758 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243759 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000161daa9 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13887 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243778 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243779 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000161df50 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13899 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243781 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243782 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000161df73 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 13900 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243800 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000161e574 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13910 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243803 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000161e66e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243815 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000161ef23 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243845 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016247c8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13945 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243867 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000162af25 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 13989 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243870 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000162b422 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 13997 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243888 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000162d322 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14020 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243907 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000163237b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14032 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243910 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001632413 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 243941 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {9abec518-2616-aba9-d553-42f308a56b52} - 4624 2 0 12544 0 0x8020000000000000 243943 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001633cf9 3 Authz Kerberos WIN-KCON-EXCH16 {2f4df08a-41cc-95d1-9bfa-03bf0a873f7f} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243946 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001633d2a 3 Authz Kerberos WIN-KCON-EXCH16 {2f4df08a-41cc-95d1-9bfa-03bf0a873f7f} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243959 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016341b9 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 14058 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243966 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243967 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001634345 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 14062 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243975 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243976 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000016343e4 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14065 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 243978 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 243979 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001634403 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14066 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 243998 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000163462e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14072 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244003 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016346b1 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 14074 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244008 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001634716 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 14075 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244028 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016390b4 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 14096 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244033 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000163d903 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14100 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 244035 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 244036 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {e31aa65a-a4ec-ee7e-4597-1c2c32fbbef8} - 4624 2 0 12544 0 0x8020000000000000 244038 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000163f107 8 Advapi Negotiate WIN-KCON-EXCH16 {e31aa65a-a4ec-ee7e-4597-1c2c32fbbef8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 244057 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 244058 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {0e6995d1-16c5-529e-5f5b-455823903b27} - 4624 2 0 12544 0 0x8020000000000000 244060 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000163f40a 8 Advapi Negotiate WIN-KCON-EXCH16 {0e6995d1-16c5-529e-5f5b-455823903b27} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244067 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000163f6ba 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 14117 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244070 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000163f84e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244074 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000163f8f0 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244091 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000163fbdc 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244122 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016406de 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14132 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244125 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016407c3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244185 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001645024 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 14160 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244191 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000164508e 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::107e:3fd:3f57:aa6a 14161 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244198 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000164519d 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 169.254.202.186 14162 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244205 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001645408 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 14168 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244208 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000016465ed 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244263 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000164ccc1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14201 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244289 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000164d47e 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 14212 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 244304 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 244305 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {0585a210-be27-bcf6-9e76-68ce3f77c7c8} - 4624 2 0 12544 0 0x8020000000000000 244307 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000164eac3 8 Advapi Negotiate WIN-KCON-EXCH16 {0585a210-be27-bcf6-9e76-68ce3f77c7c8} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244326 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001651a51 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14238 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244330 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244331 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x0000000001652201 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14243 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244352 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4776 0 0 14336 0 0x8020000000000000 244353 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244354 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000016526b6 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14249 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244355 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000016526c3 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14250 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244372 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001652df3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14259 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244377 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001652fa7 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244381 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x0000000001653173 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244408 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000165a3de 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14285 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244433 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000165ee21 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244463 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001661d10 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14329 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244466 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016625c8 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 14332 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244482 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001664120 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14354 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244498 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001669725 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14363 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244501 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001669818 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244534 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000166bb63 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14386 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244537 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244538 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000166bc27 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 14387 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244546 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244547 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000166bd48 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14391 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244549 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244550 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000166bd68 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14392 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244571 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000166bfe5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14401 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244576 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000166c0f5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 14403 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244581 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000166c15f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 14404 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244586 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000166ea8a 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244601 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001674f75 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14424 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244613 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000167a114 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14429 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244631 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000167c06d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14447 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244649 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000167d8f4 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14455 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244652 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000167d9be 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244672 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016810be 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 14470 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244688 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000168112c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::107e:3fd:3f57:aa6a 14471 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244693 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016811ae 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 14472 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244700 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001681361 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14475 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244719 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001689391 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14498 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244722 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001689bef 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14501 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244744 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000168d89b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14519 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244756 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244757 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000168e0fe 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14521 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244771 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244772 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000168e6a5 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14530 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 244774 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 244775 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000168e6da 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14531 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244798 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000168eb33 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244800 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000168eb55 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14541 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244812 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000168efb9 3 C Kerberos WIN-KCON-EXCH16 {c9eb85e1-cc17-bd4c-a580-10c8a53e3acb} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244836 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000168fc2d 3 Authz Kerberos WIN-KCON-EXCH16 {2f4df08a-41cc-95d1-9bfa-03bf0a873f7f} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244839 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000168fcd3 3 Authz Kerberos WIN-KCON-EXCH16 {2f4df08a-41cc-95d1-9bfa-03bf0a873f7f} - - 0 0x0000000000003600 C:\Windows\System32\inetsrv\w3wp.exe - - %%1832 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244855 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001694dc3 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14569 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244865 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000169a0ee 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14612 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244870 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000169aacd 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14618 %%1840 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 244873 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 244875 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {e8464b78-1317-20ff-c0d0-6759e2721bef} - 4624 2 0 12544 0 0x8020000000000000 244877 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000169b868 8 Advapi Negotiate WIN-KCON-EXCH16 {e8464b78-1317-20ff-c0d0-6759e2721bef} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 244898 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 244899 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {022b802f-0adf-19c9-fb45-7f27495166f3} - 4624 2 0 12544 0 0x8020000000000000 244901 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000169c273 8 Advapi Negotiate WIN-KCON-EXCH16 {022b802f-0adf-19c9-fb45-7f27495166f3} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4768 0 0 14339 0 0x8020000000000000 244905 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6 EM.KRINGLECON.COM S-1-5-21-25059752-1411454016-2901770228-1133 krbtgt S-1-5-21-25059752-1411454016-2901770228-502 0x40810010 0x00000000 0x00000012 2 ::1 0 4769 0 0 14337 0 0x8020000000000000 244906 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM HealthMailboxbab78a6@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {f432a08f-cab0-ae0c-9760-ec61972e464a} - 4624 2 0 12544 0 0x8020000000000000 244908 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000169c3cd 8 Advapi Negotiate WIN-KCON-EXCH16 {f432a08f-cab0-ae0c-9760-ec61972e464a} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244926 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000169c897 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 14642 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244929 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000169ca5a 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244933 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000169cb04 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244952 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000169cf6b 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244978 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016a220c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14658 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 244981 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016a23c2 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245002 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016a40b1 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14678 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 245005 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 245006 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000016a42fe 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 14683 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 245014 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 245015 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000016a439c 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14686 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 245017 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 245018 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x00000000016a43be 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14687 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245039 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016a4620 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14694 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245044 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016a4719 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::3085:5155:bb47:8b3e 14696 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245049 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016a477d 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:169.254.202.186 14697 %%1840 - - - %%1843 0x0000000000000000 %%1842 4769 0 0 14337 0 0x8020000000000000 245053 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM WIN-KCON-EXCH16$@EM.KRINGLECON.COM EM.KRINGLECON.COM WIN-KCON-EXCH16$ S-1-5-21-25059752-1411454016-2901770228-1000 0x40810000 0x00000012 ::1 0 0x00000000 {f82229ef-be4f-e5b6-6870-9dc0d8ddf00a} - 4624 2 0 12544 0 0x8020000000000000 245055 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000016a762f 3 C Kerberos WIN-KCON-EXCH16 {300f638b-1ce7-40d3-2446-126b9bc6959f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245099 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016a8e0f 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 14728 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245123 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016ae5da 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 14739 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245148 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016b05be 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14757 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245162 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016b227e 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 14768 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245167 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016b2443 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245224 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016b7eb2 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::5efe:192.168.85.149 14799 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245230 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016b7f1f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - fe80::107e:3fd:3f57:aa6a 14800 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245237 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016b8024 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 169.254.202.186 14801 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245242 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016b8a59 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - 127.0.0.1 14803 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245265 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000016c0fb6 3 C Kerberos WIN-KCON-EXCH16 {300f638b-1ce7-40d3-2446-126b9bc6959f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245288 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016c1b7f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14835 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245297 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x00000000016c54c5 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14838 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245329 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001738df8 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14851 %%1840 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 245332 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 245333 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000177dab6 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14857 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 245344 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 245345 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000177e502 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14865 %%1833 - - - %%1843 0x0000000000000000 %%1842 4776 0 0 14336 0 0x8020000000000000 245347 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 HealthMailboxbe58608d4925422d8e4ea458cfedc612@EM.KRINGLECON.COM WIN-KCON-EXCH16 0x00000000 4624 2 0 12544 0 0x8020000000000000 245348 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON 0x000000000177e521 3 NtLmSsp NTLM WIN-KCON-EXCH16 {00000000-0000-0000-0000-000000000000} - NTLM V2 0 0x0000000000000000 - fe80::b0d8:bf3b:51aa:caba 14866 %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245372 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000177e88c 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14873 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245377 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000177ea65 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245381 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x000000000177ff7e 3 C Kerberos WIN-KCON-EXCH16 {300f638b-1ce7-40d3-2446-126b9bc6959f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245408 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001781efb 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14900 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245411 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-5-18 WIN-KCON-EXCH16$ EM.KRINGLECON 0x00000000000003e7 S-1-5-21-25059752-1411454016-2901770228-1133 HealthMailboxbab78a6 EM.KRINGLECON 0x00000000017874dc 3 C Kerberos WIN-KCON-EXCH16 {300f638b-1ce7-40d3-2446-126b9bc6959f} - - 0 0x0000000000002494 C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe - - %%1833 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245443 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000178d621 3 Kerberos Kerberos - {07b73b89-15b3-b7c4-e678-b6ee566f408f} - - 0 0x0000000000000000 - ::1 14945 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245454 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000178e9db 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - 127.0.0.1 14951 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245473 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x0000000001793819 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1 14971 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245489 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000179466f 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - ::1ventID> 0 0 12545 14984 %%1840 - - - %%1843 0x0000000000000000 %%1842 4624 2 0 12544 0 0x8020000000000000 245492 Security WIN-KCON-EXCH16.EM.KRINGLECON.COM S-1-0-0 - - 0x0000000000000000 S-1-5-21-25059752-1411454016-2901770228-1134 HealthMailboxbe58608 EM.KRINGLECON.COM 0x000000000179476b 3 Kerberos Kerberos - {66b54d86-4302-a414-4b44-b4078e2c002e} - - 0 0x0000000000000000 - - - %%1840 - - - %%1843 0x0000000000000000 %%1842