title: How to get password hash from SAM file using regedit
body: <p>I've been trying to get the password hashes from the SAM file for a while now. I don't want to download a program that will get it for me; firstly, because I want to do it myself, and secondly, because all the ones I've downloaded have been malware. </p>
  
  <p>Pretty soon I realised that I can't access SAM on registry while logged in on my account, (which is admin), so I decided to swap "utilman.exe" with a copy of "cmd.exe" and thus I can access SAM as the 'system' when logged out of my account. </p>
  
  <p>I have managed to export the entirety of SAM to my desktop, both as a ".reg" file and as a ".txt" file. The problem is... I don't know where to start looking for the password hash. Interestingly enough, when opening the ".txt" version, I realised that it is different to when changing the ".reg" version to a ".txt" file. An example is shown here:</p>
  
  <p>00000000   07 00 01 00 00 00 00 00 - 98 00 00 00 02 00 01 00  ................ 
  <strong>Default text version</strong></p>
  
  <p>[HKEY_LOCAL_MACHINE\SAM\SAM]
  "C"=hex:07,00,01,00,00,00,00,00,98,00,00,00,02,00,01,00,01,00,14,80,78,00,00,\
  <strong>Reg file changed to txt</strong></p>
  
  <p>Any help would be much appreciated. As for the intentions, I am simply trying to experiment with windows. :)...</p>