www.BlackViper.com: Windows 7 Services 411 - Workstation

Workstation

Default Description:

Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information:

None at this time.

Additional Reading:

• SMB: http://en.wikipedia.org/wiki/Server_Message_Block

Discussion Topic Link:

Windows 7 Services Forum

Defaults Startup Type:

Windows 7 Starter: Automatic (Started)
Windows 7 Home Basic: Automatic (Started)
Windows 7 Home Premium: Automatic (Started)
Windows 7 Professional: Automatic (Started)
Windows 7 Ultimate: Automatic (Started)
Windows 7 Enterprise: Automatic (Started)

Other Settings:

Safe Setting: Automatic

Service Names:

Service Name (registry): LanmanWorkstation

Display Name: Workstation

Default Path and Command Line Options:

C:\Windows\System32\svchost.exe -k NetworkService

Log On As:

Account: Network Service

Dependencies:

What service Workstation needs to function properly:

• Browser Support Driver (S, HB, HP, P, U, E)
• Network Store Interface Service (S, HB, HP, P, U, E)
  • NSI proxy service driver (S, HB, HP, P, U, E)
• SMB 1.x MiniRedirector (S, HB, HP, P, U, E)
  • SMB MiniRedirector Wrapper and Engine (S, HB, HP, P, U, E)
    • Redirected Buffering Sub Sysytem (S, HB, HP, P, U, E) (not a typo)
      • Mup (S, HB, HP, P, U, E)
• SMB 2.0 MiniRedirector (S, HB, HP, P, U, E)
  • SMB MiniRedirector Wrapper and Engine (S, HB, HP, P, U, E)
    • Redirected Buffering Sub Sysytem (S, HB, HP, P, U, E) (not a typo)
      • Mup (S, HB, HP, P, U, E)

What other service require Workstation to function properly:

• Computer Browser (S, HB, HP, P, U, E)
• Netlogon (S, HB, HP, P, U, E)
• Remote Desktop Configuration (S, HB, HP, P, U, E)

Registry Settings (.reg):

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation]
"DisplayName"="@%systemroot%\\system32\\wkssvc.dll,-100"
"Group"="NetworkProvider"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00,53,00,65,00,72,00,76,\
00,69,00,63,00,65,00,00,00
"Description"="@%systemroot%\\system32\\wkssvc.dll,-101"
"ObjectName"="NT AUTHORITY\\NetworkService"
"ErrorControl"=dword:00000001
"Start"=dword:00000002
"Type"=dword:00000020
"DependOnService"=hex(7):42,00,6f,00,77,00,73,00,65,00,72,00,00,00,4d,00,52,00,\
78,00,53,00,6d,00,62,00,31,00,30,00,00,00,4d,00,52,00,78,00,53,00,6d,00,62,\
00,32,00,30,00,00,00,4e,00,53,00,49,00,00,00,00,00
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,\
00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\
67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,00,6e,\
00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\
00,00,53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,00,69,00,76,00,69,\
00,6c,00,65,00,67,00,65,00,00,00,00,00
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,c0,d4,01,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage]
"Bind"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,\
00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,31,00,43,00,33,00,32,00,\
46,00,33,00,44,00,37,00,2d,00,30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,\
00,32,00,2d,00,42,00,45,00,45,00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,\
39,00,43,00,37,00,42,00,35,00,35,00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,\
00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,\
70,00,36,00,5f,00,7b,00,38,00,33,00,44,00,31,00,43,00,41,00,32,00,33,00,2d,\
00,44,00,43,00,45,00,39,00,2d,00,34,00,35,00,33,00,46,00,2d,00,41,00,45,00,\
31,00,44,00,2d,00,34,00,31,00,34,00,45,00,32,00,43,00,41,00,42,00,32,00,38,\
00,43,00,31,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\
53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,41,\
00,32,00,35,00,36,00,43,00,30,00,43,00,43,00,2d,00,43,00,41,00,37,00,38,00,\
2d,00,34,00,39,00,33,00,42,00,2d,00,41,00,41,00,41,00,39,00,2d,00,35,00,38,\
00,33,00,35,00,37,00,45,00,41,00,33,00,34,00,37,00,41,00,30,00,7d,00,00,00,\
5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,00,54,\
00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,32,00,37,00,31,00,33,00,36,00,\
37,00,38,00,43,00,2d,00,39,00,44,00,36,00,37,00,2d,00,34,00,39,00,39,00,30,\
00,2d,00,39,00,30,00,36,00,45,00,2d,00,33,00,37,00,31,00,32,00,38,00,45,00,\
34,00,42,00,39,00,30,00,46,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,\
00,63,00,65,00,5c,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,\
36,00,5f,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,\
00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,\
44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,\
00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,\
63,00,70,00,69,00,70,00,5f,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,\
00,37,00,2d,00,30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,\
42,00,45,00,45,00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,\
00,42,00,35,00,35,00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
65,00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,38,00,33,00,44,\
00,31,00,43,00,41,00,32,00,33,00,2d,00,44,00,43,00,45,00,39,00,2d,00,34,00,\
35,00,33,00,46,00,2d,00,41,00,45,00,31,00,44,00,2d,00,34,00,31,00,34,00,45,\
00,32,00,43,00,41,00,42,00,32,00,38,00,43,00,31,00,7d,00,00,00,5c,00,44,00,\
65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,\
00,7b,00,41,00,32,00,35,00,36,00,43,00,30,00,43,00,43,00,2d,00,43,00,41,00,\
37,00,38,00,2d,00,34,00,39,00,33,00,42,00,2d,00,41,00,41,00,41,00,39,00,2d,\
00,35,00,38,00,33,00,35,00,37,00,45,00,41,00,33,00,34,00,37,00,41,00,30,00,\
7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,\
00,69,00,70,00,36,00,5f,00,7b,00,32,00,37,00,31,00,33,00,36,00,37,00,38,00,\
43,00,2d,00,39,00,44,00,36,00,37,00,2d,00,34,00,39,00,39,00,30,00,2d,00,39,\
00,30,00,36,00,45,00,2d,00,33,00,37,00,31,00,32,00,38,00,45,00,34,00,42,00,\
39,00,30,00,46,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,\
00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,31,00,43,00,33,00,\
32,00,46,00,33,00,44,00,37,00,2d,00,30,00,39,00,32,00,39,00,2d,00,34,00,32,\
00,39,00,32,00,2d,00,42,00,45,00,45,00,44,00,2d,00,38,00,32,00,44,00,46,00,\
39,00,39,00,43,00,37,00,42,00,35,00,35,00,30,00,7d,00,00,00,5c,00,44,00,65,\
00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,62,00,69,00,6f,00,73,00,\
53,00,6d,00,62,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,\
00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,\
31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,00,39,00,32,00,39,\
00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,44,00,2d,00,38,00,\
32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,00,30,00,7d,00,00,\
00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,\
54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,38,00,33,00,44,\
00,31,00,43,00,41,00,32,00,33,00,2d,00,44,00,43,00,45,00,39,00,2d,00,34,00,\
35,00,33,00,46,00,2d,00,41,00,45,00,31,00,44,00,2d,00,34,00,31,00,34,00,45,\
00,32,00,43,00,41,00,42,00,32,00,38,00,43,00,31,00,7d,00,00,00,5c,00,44,00,\
65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,\
00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,41,00,32,00,35,00,36,00,43,00,\
30,00,43,00,43,00,2d,00,43,00,41,00,37,00,38,00,2d,00,34,00,39,00,33,00,42,\
00,2d,00,41,00,41,00,41,00,39,00,2d,00,35,00,38,00,33,00,35,00,37,00,45,00,\
41,00,33,00,34,00,37,00,41,00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,\
00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,\
69,00,70,00,36,00,5f,00,7b,00,32,00,37,00,31,00,33,00,36,00,37,00,38,00,43,\
00,2d,00,39,00,44,00,36,00,37,00,2d,00,34,00,39,00,39,00,30,00,2d,00,39,00,\
30,00,36,00,45,00,2d,00,33,00,37,00,31,00,32,00,38,00,45,00,34,00,42,00,39,\
00,30,00,46,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,\
5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,\
00,5f,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,00,\
39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,44,\
00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,00,\
30,00,7d,00,00,00,00,00
"Route"=hex(7):22,00,53,00,6d,00,62,00,22,00,20,00,22,00,54,00,63,00,70,00,69,\
00,70,00,22,00,20,00,22,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,\
37,00,2d,00,30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,\
00,45,00,45,00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,\
42,00,35,00,35,00,30,00,7d,00,22,00,00,00,22,00,53,00,6d,00,62,00,22,00,20,\
00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,38,00,\
33,00,44,00,31,00,43,00,41,00,32,00,33,00,2d,00,44,00,43,00,45,00,39,00,2d,\
00,34,00,35,00,33,00,46,00,2d,00,41,00,45,00,31,00,44,00,2d,00,34,00,31,00,\
34,00,45,00,32,00,43,00,41,00,42,00,32,00,38,00,43,00,31,00,7d,00,22,00,00,\
00,22,00,53,00,6d,00,62,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,\
36,00,22,00,20,00,22,00,7b,00,41,00,32,00,35,00,36,00,43,00,30,00,43,00,43,\
00,2d,00,43,00,41,00,37,00,38,00,2d,00,34,00,39,00,33,00,42,00,2d,00,41,00,\
41,00,41,00,39,00,2d,00,35,00,38,00,33,00,35,00,37,00,45,00,41,00,33,00,34,\
00,37,00,41,00,30,00,7d,00,22,00,00,00,22,00,53,00,6d,00,62,00,22,00,20,00,\
22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,32,00,37,\
00,31,00,33,00,36,00,37,00,38,00,43,00,2d,00,39,00,44,00,36,00,37,00,2d,00,\
34,00,39,00,39,00,30,00,2d,00,39,00,30,00,36,00,45,00,2d,00,33,00,37,00,31,\
00,32,00,38,00,45,00,34,00,42,00,39,00,30,00,46,00,43,00,7d,00,22,00,00,00,\
22,00,53,00,6d,00,62,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,36,\
00,22,00,20,00,22,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,\
2d,00,30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,\
00,45,00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,\
35,00,35,00,30,00,7d,00,22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,22,\
00,20,00,22,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,\
30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,\
00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,\
35,00,30,00,7d,00,22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,\
00,20,00,22,00,7b,00,38,00,33,00,44,00,31,00,43,00,41,00,32,00,33,00,2d,00,\
44,00,43,00,45,00,39,00,2d,00,34,00,35,00,33,00,46,00,2d,00,41,00,45,00,31,\
00,44,00,2d,00,34,00,31,00,34,00,45,00,32,00,43,00,41,00,42,00,32,00,38,00,\
43,00,31,00,7d,00,22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,\
00,20,00,22,00,7b,00,41,00,32,00,35,00,36,00,43,00,30,00,43,00,43,00,2d,00,\
43,00,41,00,37,00,38,00,2d,00,34,00,39,00,33,00,42,00,2d,00,41,00,41,00,41,\
00,39,00,2d,00,35,00,38,00,33,00,35,00,37,00,45,00,41,00,33,00,34,00,37,00,\
41,00,30,00,7d,00,22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,\
00,20,00,22,00,7b,00,32,00,37,00,31,00,33,00,36,00,37,00,38,00,43,00,2d,00,\
39,00,44,00,36,00,37,00,2d,00,34,00,39,00,39,00,30,00,2d,00,39,00,30,00,36,\
00,45,00,2d,00,33,00,37,00,31,00,32,00,38,00,45,00,34,00,42,00,39,00,30,00,\
46,00,43,00,7d,00,22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,\
00,20,00,22,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,\
30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,\
00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,\
35,00,30,00,7d,00,22,00,00,00,22,00,4e,00,65,00,74,00,62,00,69,00,6f,00,73,\
00,53,00,6d,00,62,00,22,00,00,00,22,00,4e,00,65,00,74,00,42,00,54,00,22,00,\
20,00,22,00,54,00,63,00,70,00,69,00,70,00,22,00,20,00,22,00,7b,00,31,00,43,\
00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,00,39,00,32,00,39,00,2d,00,\
34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,44,00,2d,00,38,00,32,00,44,\
00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,00,30,00,7d,00,22,00,00,00,\
22,00,4e,00,65,00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,00,70,00,69,\
00,70,00,36,00,22,00,20,00,22,00,7b,00,38,00,33,00,44,00,31,00,43,00,41,00,\
32,00,33,00,2d,00,44,00,43,00,45,00,39,00,2d,00,34,00,35,00,33,00,46,00,2d,\
00,41,00,45,00,31,00,44,00,2d,00,34,00,31,00,34,00,45,00,32,00,43,00,41,00,\
42,00,32,00,38,00,43,00,31,00,7d,00,22,00,00,00,22,00,4e,00,65,00,74,00,42,\
00,54,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,\
22,00,7b,00,41,00,32,00,35,00,36,00,43,00,30,00,43,00,43,00,2d,00,43,00,41,\
00,37,00,38,00,2d,00,34,00,39,00,33,00,42,00,2d,00,41,00,41,00,41,00,39,00,\
2d,00,35,00,38,00,33,00,35,00,37,00,45,00,41,00,33,00,34,00,37,00,41,00,30,\
00,7d,00,22,00,00,00,22,00,4e,00,65,00,74,00,42,00,54,00,22,00,20,00,22,00,\
54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,00,32,00,37,00,31,\
00,33,00,36,00,37,00,38,00,43,00,2d,00,39,00,44,00,36,00,37,00,2d,00,34,00,\
39,00,39,00,30,00,2d,00,39,00,30,00,36,00,45,00,2d,00,33,00,37,00,31,00,32,\
00,38,00,45,00,34,00,42,00,39,00,30,00,46,00,43,00,7d,00,22,00,00,00,22,00,\
4e,00,65,00,74,00,42,00,54,00,22,00,20,00,22,00,54,00,63,00,70,00,69,00,70,\
00,36,00,22,00,20,00,22,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,\
37,00,2d,00,30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,\
00,45,00,45,00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,\
42,00,35,00,35,00,30,00,7d,00,22,00,00,00,00,00
"Export"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\
00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,\
6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,\
00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,00,39,00,\
32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,44,00,2d,\
00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,00,30,00,\
7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\
00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,\
6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,\
00,5f,00,7b,00,38,00,33,00,44,00,31,00,43,00,41,00,32,00,33,00,2d,00,44,00,\
43,00,45,00,39,00,2d,00,34,00,35,00,33,00,46,00,2d,00,41,00,45,00,31,00,44,\
00,2d,00,34,00,31,00,34,00,45,00,32,00,43,00,41,00,42,00,32,00,38,00,43,00,\
31,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,\
00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,\
69,00,6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,00,70,\
00,36,00,5f,00,7b,00,41,00,32,00,35,00,36,00,43,00,30,00,43,00,43,00,2d,00,\
43,00,41,00,37,00,38,00,2d,00,34,00,39,00,33,00,42,00,2d,00,41,00,41,00,41,\
00,39,00,2d,00,35,00,38,00,33,00,35,00,37,00,45,00,41,00,33,00,34,00,37,00,\
41,00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,\
00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,\
74,00,69,00,6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,00,69,\
00,70,00,36,00,5f,00,7b,00,32,00,37,00,31,00,33,00,36,00,37,00,38,00,43,00,\
2d,00,39,00,44,00,36,00,37,00,2d,00,34,00,39,00,39,00,30,00,2d,00,39,00,30,\
00,36,00,45,00,2d,00,33,00,37,00,31,00,32,00,38,00,45,00,34,00,42,00,39,00,\
30,00,46,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,\
00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,\
61,00,74,00,69,00,6f,00,6e,00,5f,00,53,00,6d,00,62,00,5f,00,54,00,63,00,70,\
00,69,00,70,00,36,00,5f,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,\
37,00,2d,00,30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,\
00,45,00,45,00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,\
42,00,35,00,35,00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,\
00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,\
74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,\
00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,00,39,00,\
32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,44,00,2d,\
00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,00,30,00,\
7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\
00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,\
6f,00,6e,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,38,00,33,\
00,44,00,31,00,43,00,41,00,32,00,33,00,2d,00,44,00,43,00,45,00,39,00,2d,00,\
34,00,35,00,33,00,46,00,2d,00,41,00,45,00,31,00,44,00,2d,00,34,00,31,00,34,\
00,45,00,32,00,43,00,41,00,42,00,32,00,38,00,43,00,31,00,7d,00,00,00,5c,00,\
44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,\
00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,\
54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,41,00,32,00,35,00,36,00,43,\
00,30,00,43,00,43,00,2d,00,43,00,41,00,37,00,38,00,2d,00,34,00,39,00,33,00,\
42,00,2d,00,41,00,41,00,41,00,39,00,2d,00,35,00,38,00,33,00,35,00,37,00,45,\
00,41,00,33,00,34,00,37,00,41,00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\
69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,\
00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,54,00,63,00,70,00,\
69,00,70,00,36,00,5f,00,7b,00,32,00,37,00,31,00,33,00,36,00,37,00,38,00,43,\
00,2d,00,39,00,44,00,36,00,37,00,2d,00,34,00,39,00,39,00,30,00,2d,00,39,00,\
30,00,36,00,45,00,2d,00,33,00,37,00,31,00,32,00,38,00,45,00,34,00,42,00,39,\
00,30,00,46,00,43,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,\
5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,\
00,61,00,74,00,69,00,6f,00,6e,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,\
5f,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,00,39,\
00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,44,00,\
2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,00,30,\
00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,\
6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,\
00,6f,00,6e,00,5f,00,4e,00,65,00,74,00,62,00,69,00,6f,00,73,00,53,00,6d,00,\
62,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,\
00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,\
6f,00,6e,00,5f,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,\
00,70,00,5f,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,\
30,00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,\
00,44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,\
35,00,30,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,\
00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,\
74,00,69,00,6f,00,6e,00,5f,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,\
00,70,00,69,00,70,00,36,00,5f,00,7b,00,38,00,33,00,44,00,31,00,43,00,41,00,\
32,00,33,00,2d,00,44,00,43,00,45,00,39,00,2d,00,34,00,35,00,33,00,46,00,2d,\
00,41,00,45,00,31,00,44,00,2d,00,34,00,31,00,34,00,45,00,32,00,43,00,41,00,\
42,00,32,00,38,00,43,00,31,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,\
00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,6b,00,\
73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,4e,00,65,00,74,00,42,00,54,\
00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,41,00,32,00,35,00,\
36,00,43,00,30,00,43,00,43,00,2d,00,43,00,41,00,37,00,38,00,2d,00,34,00,39,\
00,33,00,42,00,2d,00,41,00,41,00,41,00,39,00,2d,00,35,00,38,00,33,00,35,00,\
37,00,45,00,41,00,33,00,34,00,37,00,41,00,30,00,7d,00,00,00,5c,00,44,00,65,\
00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,\
6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,5f,00,4e,00,65,\
00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,\
32,00,37,00,31,00,33,00,36,00,37,00,38,00,43,00,2d,00,39,00,44,00,36,00,37,\
00,2d,00,34,00,39,00,39,00,30,00,2d,00,39,00,30,00,36,00,45,00,2d,00,33,00,\
37,00,31,00,32,00,38,00,45,00,34,00,42,00,39,00,30,00,46,00,43,00,7d,00,00,\
00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4c,00,61,00,6e,00,6d,00,\
61,00,6e,00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,\
00,5f,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,\
36,00,5f,00,7b,00,31,00,43,00,33,00,32,00,46,00,33,00,44,00,37,00,2d,00,30,\
00,39,00,32,00,39,00,2d,00,34,00,32,00,39,00,32,00,2d,00,42,00,45,00,45,00,\
44,00,2d,00,38,00,32,00,44,00,46,00,39,00,39,00,43,00,37,00,42,00,35,00,35,\
00,30,00,7d,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\NetworkProvider]
"DeviceName"="\\Device\\LanmanRedirector"
"Name"="Microsoft Windows Network"
"DisplayName"=hex(2):40,00,25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,\
00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\
5c,00,77,00,6b,00,73,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,\
00,31,00,30,00,32,00,00,00
"ProviderPath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
6e,00,74,00,6c,00,61,00,6e,00,6d,00,61,00,6e,00,2e,00,64,00,6c,00,6c,00,00,\
00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
77,00,6b,00,73,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceDllUnloadOnStop"=dword:00000001
"EnablePlainTextPassword"=dword:00000000
"EnableSecuritySignature"=dword:00000001
"RequireSecuritySignature"=dword:00000000
"OtherDomains"=hex(7):00,00