Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer] "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\ 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\ 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\ 6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00 "DisplayName"="@%systemroot%\\system32\\srvsvc.dll,-100" "Description"="@%systemroot%\\system32\\srvsvc.dll,-101" "ObjectName"="LocalSystem" "ErrorControl"=dword:00000001 "Start"=dword:00000002 "Type"=dword:00000020 "DependOnService"=hex(7):53,00,61,00,6d,00,53,00,53,00,00,00,53,00,72,00,76,00,\ 00,00,00,00 "ServiceSidType"=dword:00000001 "RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,\ 00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\ 67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,00,6e,\ 00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\ 00,00,53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,00,69,00,76,00,69,\ 00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,4c,00,6f,00,61,00,64,00,44,00,\ 72,00,69,00,76,00,65,00,72,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,\ 00,65,00,00,00,00,00 "FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\ 00,01,00,00,00,60,ea,00,00,01,00,00,00,c0,d4,01,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Aliases] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\AutotunedParameters] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\DefaultSecurity] "SrvsvcConfigInfo"=hex:01,00,04,80,a0,00,00,00,ac,00,00,00,00,00,00,00,14,00,\ 00,00,02,00,8c,00,06,00,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,20,02,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,25,02,00,00,00,00,14,00,17,00,0f,00,01,01,00,00,00,00,00,05,12,\ 00,00,00,00,00,18,00,03,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,\ 00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,00,00,00,00,14,\ 00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,01,01,00,00,00,00,00,05,\ 12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 "SrvsvcTransportEnum"=hex:01,00,04,80,8c,00,00,00,98,00,00,00,00,00,00,00,14,\ 00,00,00,02,00,78,00,05,00,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,20,02,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,25,02,00,00,00,00,14,00,17,00,0f,00,01,01,00,00,00,00,00,05,\ 12,00,00,00,00,00,18,00,03,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\ 02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,0b,00,00,00,01,01,\ 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 "SrvsvcConnection"=hex:01,00,04,80,7c,00,00,00,88,00,00,00,00,00,00,00,14,00,\ 00,00,02,00,68,00,04,00,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,20,02,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,25,02,00,00,00,00,18,00,01,00,00,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,26,02,00,00,00,00,18,00,01,00,00,00,01,02,00,00,00,00,00,05,20,00,\ 00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,\ 05,12,00,00,00 "SrvsvcServerDiskEnum"=hex:01,00,04,80,4c,00,00,00,58,00,00,00,00,00,00,00,14,\ 00,00,00,02,00,38,00,02,00,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,20,02,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,\ 00,00,00,05,12,00,00,00 "SrvsvcFile"=hex:01,00,04,80,64,00,00,00,70,00,00,00,00,00,00,00,14,00,00,00,\ 02,00,50,00,03,00,00,00,00,00,18,00,11,00,0f,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,20,02,00,00,00,00,18,00,11,00,0f,00,01,02,00,00,00,00,00,05,20,00,\ 00,00,25,02,00,00,00,00,18,00,11,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,\ 00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,\ 12,00,00,00 "SrvsvcSessionInfo"=hex:01,00,04,80,78,00,00,00,84,00,00,00,00,00,00,00,14,00,\ 00,00,02,00,64,00,04,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,0b,00,\ 00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,\ 00 "SrvsvcShareFileInfo"=hex:01,00,04,80,b4,00,00,00,c0,00,00,00,00,00,00,00,14,\ 00,00,00,02,00,a0,00,07,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,\ 00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,00,00,\ 14,00,02,00,00,00,01,01,00,00,00,00,00,05,14,00,00,00,00,00,14,00,02,00,00,\ 00,01,01,00,00,00,00,00,05,04,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 01,01,00,00,00,00,00,05,12,00,00,00 "SrvsvcSharePrintInfo"=hex:01,00,04,80,cc,00,00,00,d8,00,00,00,00,00,00,00,14,\ 00,00,00,02,00,b8,00,08,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,26,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,00,00,14,\ 00,02,00,00,00,01,01,00,00,00,00,00,05,14,00,00,00,00,00,14,00,02,00,00,00,\ 01,01,00,00,00,00,00,05,04,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,\ 01,00,00,00,00,00,05,12,00,00,00 "SrvsvcShareAdminInfo"=hex:01,00,04,80,8c,00,00,00,98,00,00,00,00,00,00,00,14,\ 00,00,00,02,00,78,00,05,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,20,02,00,00,00,00,18,00,02,00,00,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,25,02,00,00,00,00,18,00,02,00,00,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,\ 00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,01,01,\ 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 "SrvsvcShareChange"=hex:01,00,04,80,a4,00,00,00,b0,00,00,00,00,00,00,00,14,00,\ 00,00,02,00,90,00,06,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,01,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,\ 00,00,22,02,00,00,01,00,14,00,13,00,0f,00,01,01,00,00,00,00,00,05,07,00,00,\ 00,00,00,14,00,13,00,0f,00,01,01,00,00,00,00,00,05,0b,00,00,00,01,01,00,00,\ 00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 "SrvsvcShareConnect"=hex:01,00,04,80,8c,00,00,00,98,00,00,00,00,00,00,00,14,00,\ 00,00,02,00,78,00,05,00,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,20,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,25,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,27,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,01,01,00,\ 00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 "SrvsvcShareAdminConnect"=hex:01,00,04,80,78,00,00,00,84,00,00,00,00,00,00,00,\ 14,00,00,00,02,00,64,00,04,00,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,\ 00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,25,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,27,02,00,00,00,00,14,00,03,00,0f,00,01,01,00,00,00,00,00,05,\ 04,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,\ 00,00,00 "SrvsvcStatisticsInfo"=hex:01,00,04,80,60,00,00,00,6c,00,00,00,00,00,00,00,14,\ 00,00,00,02,00,4c,00,03,00,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,\ 00,05,20,00,00,00,20,02,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,\ 05,20,00,00,00,25,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,02,\ 00,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,\ 00,00,00 "AnonymousDescriptorsUpgraded"=dword:00000001 "PreviousAnonymousRestriction"=dword:00000000 "SessionSecurityDescriptorRegenerated"=dword:00000001 "InteractiveDescriptorsRegenerated"=dword:00000002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage] "Bind"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,\ 00,69,00,70,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,\ 2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,\ 00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,\ 45,00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,\ 00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,34,00,41,00,37,00,\ 45,00,46,00,30,00,45,00,2d,00,31,00,36,00,30,00,34,00,2d,00,34,00,44,00,30,\ 00,35,00,2d,00,39,00,44,00,46,00,37,00,2d,00,34,00,35,00,41,00,30,00,37,00,\ 35,00,35,00,43,00,44,00,46,00,35,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,\ 00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,\ 45,00,32,00,33,00,34,00,34,00,37,00,44,00,45,00,2d,00,30,00,46,00,43,00,38,\ 00,2d,00,34,00,38,00,39,00,44,00,2d,00,39,00,37,00,33,00,33,00,2d,00,43,00,\ 33,00,33,00,45,00,36,00,35,00,38,00,41,00,35,00,30,00,33,00,43,00,7d,00,00,\ 00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,\ 70,00,36,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,2d,\ 00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,00,\ 39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,45,\ 00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\ 4e,00,65,00,74,00,62,00,69,00,6f,00,73,00,53,00,6d,00,62,00,00,00,5c,00,44,\ 00,65,00,76,00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,00,54,00,63,00,\ 70,00,69,00,70,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,\ 00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,\ 41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,\ 00,45,00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,\ 5c,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,\ 00,31,00,34,00,41,00,37,00,45,00,46,00,30,00,45,00,2d,00,31,00,36,00,30,00,\ 34,00,2d,00,34,00,44,00,30,00,35,00,2d,00,39,00,44,00,46,00,37,00,2d,00,34,\ 00,35,00,41,00,30,00,37,00,35,00,35,00,43,00,44,00,46,00,35,00,46,00,7d,00,\ 00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,\ 00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,45,00,32,00,33,00,34,00,\ 34,00,37,00,44,00,45,00,2d,00,30,00,46,00,43,00,38,00,2d,00,34,00,38,00,39,\ 00,44,00,2d,00,39,00,37,00,33,00,33,00,2d,00,43,00,33,00,33,00,45,00,36,00,\ 35,00,38,00,41,00,35,00,30,00,33,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,\ 00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,\ 70,00,36,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,2d,\ 00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,00,\ 39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,45,\ 00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\ 4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,\ 00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,2d,00,36,00,32,00,31,00,\ 39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,00,39,00,41,00,2d,00,41,\ 00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,45,00,33,00,45,00,7d,00,\ 00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,\ 00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,34,00,\ 41,00,37,00,45,00,46,00,30,00,45,00,2d,00,31,00,36,00,30,00,34,00,2d,00,34,\ 00,44,00,30,00,35,00,2d,00,39,00,44,00,46,00,37,00,2d,00,34,00,35,00,41,00,\ 30,00,37,00,35,00,35,00,43,00,44,00,46,00,35,00,46,00,7d,00,00,00,5c,00,44,\ 00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,\ 54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,45,00,32,00,33,00,34,00,34,\ 00,37,00,44,00,45,00,2d,00,30,00,46,00,43,00,38,00,2d,00,34,00,38,00,39,00,\ 44,00,2d,00,39,00,37,00,33,00,33,00,2d,00,43,00,33,00,33,00,45,00,36,00,35,\ 00,38,00,41,00,35,00,30,00,33,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\ 69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,\ 00,69,00,70,00,36,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,\ 39,00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,\ 00,41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,\ 35,00,45,00,33,00,45,00,7d,00,00,00,00,00 "Route"=hex(7):22,00,54,00,63,00,70,00,69,00,70,00,22,00,20,00,22,00,7b,00,30,\ 00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,2d,00,36,00,32,00,31,00,39,00,\ 2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,00,39,00,41,00,2d,00,41,00,30,\ 00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,45,00,33,00,45,00,7d,00,22,00,\ 00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,31,\ 00,34,00,41,00,37,00,45,00,46,00,30,00,45,00,2d,00,31,00,36,00,30,00,34,00,\ 2d,00,34,00,44,00,30,00,35,00,2d,00,39,00,44,00,46,00,37,00,2d,00,34,00,35,\ 00,41,00,30,00,37,00,35,00,35,00,43,00,44,00,46,00,35,00,46,00,7d,00,22,00,\ 00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,45,\ 00,32,00,33,00,34,00,34,00,37,00,44,00,45,00,2d,00,30,00,46,00,43,00,38,00,\ 2d,00,34,00,38,00,39,00,44,00,2d,00,39,00,37,00,33,00,33,00,2d,00,43,00,33,\ 00,33,00,45,00,36,00,35,00,38,00,41,00,35,00,30,00,33,00,43,00,7d,00,22,00,\ 00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,30,\ 00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,2d,00,36,00,32,00,31,00,39,00,\ 2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,00,39,00,41,00,2d,00,41,00,30,\ 00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,45,00,33,00,45,00,7d,00,22,00,\ 00,00,22,00,4e,00,65,00,74,00,62,00,69,00,6f,00,73,00,53,00,6d,00,62,00,22,\ 00,00,00,22,00,53,00,6d,00,62,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,\ 70,00,22,00,20,00,22,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,\ 00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,\ 41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,\ 00,45,00,33,00,45,00,7d,00,22,00,00,00,22,00,53,00,6d,00,62,00,22,00,20,00,\ 22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,31,00,34,\ 00,41,00,37,00,45,00,46,00,30,00,45,00,2d,00,31,00,36,00,30,00,34,00,2d,00,\ 34,00,44,00,30,00,35,00,2d,00,39,00,44,00,46,00,37,00,2d,00,34,00,35,00,41,\ 00,30,00,37,00,35,00,35,00,43,00,44,00,46,00,35,00,46,00,7d,00,22,00,00,00,\ 22,00,53,00,6d,00,62,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,36,\ 00,22,00,20,00,22,00,7b,00,45,00,32,00,33,00,34,00,34,00,37,00,44,00,45,00,\ 2d,00,30,00,46,00,43,00,38,00,2d,00,34,00,38,00,39,00,44,00,2d,00,39,00,37,\ 00,33,00,33,00,2d,00,43,00,33,00,33,00,45,00,36,00,35,00,38,00,41,00,35,00,\ 30,00,33,00,43,00,7d,00,22,00,00,00,22,00,53,00,6d,00,62,00,22,00,20,00,22,\ 00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,30,00,34,00,\ 32,00,43,00,34,00,39,00,32,00,39,00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,\ 00,34,00,31,00,35,00,2d,00,38,00,41,00,39,00,41,00,2d,00,41,00,30,00,30,00,\ 36,00,31,00,39,00,33,00,36,00,35,00,45,00,33,00,45,00,7d,00,22,00,00,00,22,\ 00,4e,00,65,00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,\ 70,00,22,00,20,00,22,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,\ 00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,\ 41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,\ 00,45,00,33,00,45,00,7d,00,22,00,00,00,22,00,4e,00,65,00,74,00,42,00,54,00,\ 22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,\ 00,31,00,34,00,41,00,37,00,45,00,46,00,30,00,45,00,2d,00,31,00,36,00,30,00,\ 34,00,2d,00,34,00,44,00,30,00,35,00,2d,00,39,00,44,00,46,00,37,00,2d,00,34,\ 00,35,00,41,00,30,00,37,00,35,00,35,00,43,00,44,00,46,00,35,00,46,00,7d,00,\ 22,00,00,00,22,00,4e,00,65,00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,\ 00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,45,00,32,00,33,00,34,00,\ 34,00,37,00,44,00,45,00,2d,00,30,00,46,00,43,00,38,00,2d,00,34,00,38,00,39,\ 00,44,00,2d,00,39,00,37,00,33,00,33,00,2d,00,43,00,33,00,33,00,45,00,36,00,\ 35,00,38,00,41,00,35,00,30,00,33,00,43,00,7d,00,22,00,00,00,22,00,4e,00,65,\ 00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,\ 22,00,20,00,22,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,2d,\ 00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,00,\ 39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,45,\ 00,33,00,45,00,7d,00,22,00,00,00,00,00 "Export"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\ 00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,00,5f,00,54,00,63,00,\ 70,00,69,00,70,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,39,\ 00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,\ 41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,35,\ 00,45,00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,\ 5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,\ 00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,34,00,41,00,\ 37,00,45,00,46,00,30,00,45,00,2d,00,31,00,36,00,30,00,34,00,2d,00,34,00,44,\ 00,30,00,35,00,2d,00,39,00,44,00,46,00,37,00,2d,00,34,00,35,00,41,00,30,00,\ 37,00,35,00,35,00,43,00,44,00,46,00,35,00,46,00,7d,00,00,00,5c,00,44,00,65,\ 00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,53,00,\ 65,00,72,00,76,00,65,00,72,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,\ 00,7b,00,45,00,32,00,33,00,34,00,34,00,37,00,44,00,45,00,2d,00,30,00,46,00,\ 43,00,38,00,2d,00,34,00,38,00,39,00,44,00,2d,00,39,00,37,00,33,00,33,00,2d,\ 00,43,00,33,00,33,00,45,00,36,00,35,00,38,00,41,00,35,00,30,00,33,00,43,00,\ 7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\ 00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,00,5f,00,54,00,63,00,\ 70,00,69,00,70,00,36,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,\ 00,39,00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,\ 38,00,41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,\ 00,35,00,45,00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,\ 65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,\ 00,72,00,5f,00,4e,00,65,00,74,00,62,00,69,00,6f,00,73,00,53,00,6d,00,62,00,\ 00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,\ 00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,00,5f,00,53,00,6d,00,62,00,\ 5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,\ 00,39,00,32,00,39,00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,\ 35,00,2d,00,38,00,41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,\ 00,33,00,36,00,35,00,45,00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\ 69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,53,00,65,00,72,\ 00,76,00,65,00,72,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,\ 70,00,36,00,5f,00,7b,00,31,00,34,00,41,00,37,00,45,00,46,00,30,00,45,00,2d,\ 00,31,00,36,00,30,00,34,00,2d,00,34,00,44,00,30,00,35,00,2d,00,39,00,44,00,\ 46,00,37,00,2d,00,34,00,35,00,41,00,30,00,37,00,35,00,35,00,43,00,44,00,46,\ 00,35,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\ 4c,00,61,00,6e,00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,00,5f,\ 00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,\ 45,00,32,00,33,00,34,00,34,00,37,00,44,00,45,00,2d,00,30,00,46,00,43,00,38,\ 00,2d,00,34,00,38,00,39,00,44,00,2d,00,39,00,37,00,33,00,33,00,2d,00,43,00,\ 33,00,33,00,45,00,36,00,35,00,38,00,41,00,35,00,30,00,33,00,43,00,7d,00,00,\ 00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,\ 61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,00,5f,00,53,00,6d,00,62,00,5f,\ 00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,30,00,34,00,32,00,43,00,\ 34,00,39,00,32,00,39,00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,\ 00,35,00,2d,00,38,00,41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,\ 39,00,33,00,36,00,35,00,45,00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,\ 00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,53,00,65,00,\ 72,00,76,00,65,00,72,00,5f,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,\ 00,70,00,69,00,70,00,5f,00,7b,00,30,00,34,00,32,00,43,00,34,00,39,00,32,00,\ 39,00,2d,00,36,00,32,00,31,00,39,00,2d,00,34,00,34,00,31,00,35,00,2d,00,38,\ 00,41,00,39,00,41,00,2d,00,41,00,30,00,30,00,36,00,31,00,39,00,33,00,36,00,\ 35,00,45,00,33,00,45,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,\ 00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,\ 72,00,5f,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\ 00,36,00,5f,00,7b,00,31,00,34,00,41,00,37,00,45,00,46,00,30,00,45,00,2d,00,\ 31,00,36,00,30,00,34,00,2d,00,34,00,44,00,30,00,35,00,2d,00,39,00,44,00,46,\ 00,37,00,2d,00,34,00,35,00,41,00,30,00,37,00,35,00,35,00,43,00,44,00,46,00,\ 35,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,\ 00,61,00,6e,00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,00,5f,00,\ 4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,\ 00,7b,00,45,00,32,00,33,00,34,00,34,00,37,00,44,00,45,00,2d,00,30,00,46,00,\ 43,00,38,00,2d,00,34,00,38,00,39,00,44,00,2d,00,39,00,37,00,33,00,33,00,2d,\ 00,43,00,33,00,33,00,45,00,36,00,35,00,38,00,41,00,35,00,30,00,33,00,43,00,\ 7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\ 00,6d,00,61,00,6e,00,53,00,65,00,72,00,76,00,65,00,72,00,5f,00,4e,00,65,00,\ 74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,30,\ 00,34,00,32,00,43,00,34,00,39,00,32,00,39,00,2d,00,36,00,32,00,31,00,39,00,\ 2d,00,34,00,34,00,31,00,35,00,2d,00,38,00,41,00,39,00,41,00,2d,00,41,00,30,\ 00,30,00,36,00,31,00,39,00,33,00,36,00,35,00,45,00,33,00,45,00,7d,00,00,00,\ 00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters] "ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\ 00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\ 73,00,72,00,76,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00 "ServiceDllUnloadOnStop"=dword:00000001 "EnableAuthenticateUserSharing"=dword:00000000 "NullSessionPipes"=hex(7):00,00 "autodisconnect"=dword:0000000f "enableforcedlogoff"=dword:00000001 "enablesecuritysignature"=dword:00000000 "requiresecuritysignature"=dword:00000000 "restrictnullsessaccess"=dword:00000001 "Lmannounce"=dword:00000000 "Size"=dword:00000003 "AdjustedNullSessionPipes"=dword:00000003 "srvcomment"="" "Guid"=hex:50,ed,76,f2,ae,e0,5d,49,b0,ca,c5,1f,af,d3,c7,99 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\ShareProviders] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Shares] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Shares\Security]