4.2.2.2.2 LMv1 Response

The LmChallengeResponse is specified in section 3.3.1. With the NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY flag not set and with the NoLMResponseNTLMv1 flag not set, using the values above, the result is:

 0000000: 98 de f7 b8 7f 88 aa 5d af e2 df 77 96 88 a1 72   .......].......r
 0000010: de f1 1c 7d 5c cd ef 13                           ...}\═..
  

If the NTLMSSP_NEGOTIATE_LM_KEY flag is set then the KeyExchangeKey is:

 0000000: b0 9e 37 9f 7f be cb 1e af 0a fd cb 03 83 c8 a0   ..7.............