ÿþWindows Registry Editor Version 5.00



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"Authentication Packages"=hex(7):6d,00,73,00,76,00,31,00,5f,00,30,00,00,00,00,\

  00

"Bounds"=hex:00,30,00,00,00,20,00,00

"Security Packages"=hex(7):6b,00,65,00,72,00,62,00,65,00,72,00,6f,00,73,00,00,\

  00,6d,00,73,00,76,00,31,00,5f,00,30,00,00,00,73,00,63,00,68,00,61,00,6e,00,\

  6e,00,65,00,6c,00,00,00,77,00,64,00,69,00,67,00,65,00,73,00,74,00,00,00,00,\

  00

"ImpersonatePrivilegeUpgradeToolHasRun"=dword:00000001

"LsaPid"=dword:000003c4

"SecureBoot"=dword:00000001

"auditbaseobjects"=dword:00000000

"crashonauditfail"=dword:00000000

"disabledomaincreds"=dword:00000000

"everyoneincludesanonymous"=dword:00000000

"fipsalgorithmpolicy"=dword:00000000

"forceguest"=dword:00000001

"fullprivilegeauditing"=hex:00

"limitblankpassworduse"=dword:00000000

"lmcompatibilitylevel"=dword:00000000

"nodefaultadminowner"=dword:00000001

"nolmhash"=dword:00000000

"restrictanonymous"=dword:00000000

"restrictanonymoussam"=dword:00000001

"Notification Packages"=hex(7):73,00,63,00,65,00,63,00,6c,00,69,00,00,00,00,00



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders]

"ProviderOrder"=hex(7):57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,20,00,4e,00,\

  54,00,20,00,41,00,63,00,63,00,65,00,73,00,73,00,20,00,50,00,72,00,6f,00,76,\

  00,69,00,64,00,65,00,72,00,00,00,00,00



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\Windows NT Access Provider]

"ProviderPath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\

  00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\

  6e,00,74,00,6d,00,61,00,72,00,74,00,61,00,2e,00,64,00,6c,00,6c,00,00,00



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\PerUserAuditing]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit\PerUserAuditing\System]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Data]

"Pattern"=hex:e0,41,82,6b,97,1f,ea,10,f1,fe,28,43,75,ae,48,e5,39,61,66,33,37,\

  36,37,36,00,fd,07,00,3d,4a,00,00,34,fa,07,00,46,98,7c,75,20,fa,07,00,40,fd,\

  07,00,4c,fd,07,00,f2,95,ea,bd,75,91,f3,87,68,2d,6e,9a



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\GBG]

"GrafBlumGroup"=hex:b7,34,60,bb,d6,84,20,2d,2d



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\JD]

"Lookup"=hex:65,0e,21,79,da,df



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\SidCache]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\msv1_0]

"ntlmminclientsec"=dword:00000000

"ntlmminserversec"=dword:00000000



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Skew1]

"SkewMatrix"=hex:7d,90,5e,2f,2b,ce,53,0e,a8,ec,41,ad,e7,1e,98,0b



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO\Passport1.4]

"SSOURL"="http://www.passport.com"



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache]

"Time"=hex:ca,59,6d,63,c8,72,c9,01



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\digest.dll]

"Name"="Digest"

"Comment"="Digest SSPI Authentication Package"

"Capabilities"=dword:00004050

"RpcId"=dword:0000ffff

"Version"=dword:00000001

"TokenSize"=dword:0000ffff

"Time"=hex:00,f5,05,64,0b,9e,c8,01

"Type"=dword:00000031



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msapsspc.dll]

"Name"="DPA"

"Comment"="DPA Security Package"

"Capabilities"=dword:00000037

"RpcId"=dword:00000011

"Version"=dword:00000001

"TokenSize"=dword:00000300

"Time"=hex:00,7c,99,67,0b,9e,c8,01

"Type"=dword:00000031



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache\msnsspc.dll]

"Name"="MSN"

"Comment"="MSN Security Package"

"Capabilities"=dword:00000037

"RpcId"=dword:00000012

"Version"=dword:00000001

"TokenSize"=dword:00000300

"Time"=hex:00,a9,ca,68,0b,9e,c8,01

"Type"=dword:00000031