Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService]
"ErrorControl"=dword:00000001
"ObjectName"="LocalSystem"
"Start"=dword:00000003
"Description"="Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server."
"DisplayName"="Terminal Services"
"DependOnService"=hex(7):52,00,50,00,43,00,53,00,53,00,00,00,00,00
"Type"=dword:00000020
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  74,00,65,00,72,00,6d,00,73,00,72,00,76,00,2e,00,64,00,6c,00,6c,00,00,00
"Certificate"=hex:01,00,00,00,01,00,00,00,01,00,00,00,06,00,5c,00,52,53,41,31,\
  48,00,00,00,00,02,00,00,3f,00,00,00,01,00,01,00,21,1f,81,02,83,ba,94,33,fe,\
  6c,f3,44,c6,a8,a1,3f,cf,81,fb,94,da,24,53,a5,8a,6c,23,68,10,1a,f3,9e,2a,9b,\
  41,96,a6,4d,e5,04,98,5a,4f,f4,e3,e8,2f,e2,77,dd,b3,08,c6,8e,e9,de,40,93,71,\
  3f,f7,09,43,c4,00,00,00,00,00,00,00,00,08,00,48,00,d8,08,f7,b4,ed,9a,49,5e,\
  3c,af,ac,1b,b3,1c,64,bb,ad,7a,72,bc,40,8f,95,96,08,ba,72,d1,e6,be,42,4c,ac,\
  bb,8a,d6,ce,39,30,f5,5b,90,77,57,5b,9d,49,b9,f6,84,42,de,9b,d0,96,61,31,0e,\
  f8,3c,a1,82,96,10,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\Performance]
"Close"="CloseTSObject"
"Collect Timeout"=dword:000003e8
"Collect"="CollectTSObjectData"
"Open Timeout"=dword:000003e8
"Open"="OpenTSObject"
"Library"="perfts.dll"
"Last Counter"=dword:00000838
"Last Help"=dword:00000839
"First Counter"=dword:000007b8
"First Help"=dword:000007b9
"Object List"="1976 2098"
"Library Validation Code"=hex:00,90,16,6d,fd,2b,c1,01,00,30,00,00,00,00,00,00
"WbemAdapFileSignature"=hex:7e,fd,21,14,ea,d1,ac,72,34,26,10,d7,19,2b,fb,32
"WbemAdapFileTime"=hex:00,90,16,6d,fd,2b,c1,01
"WbemAdapFileSize"=dword:00003000
"WbemAdapStatus"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\Enum]
"0"="Root\\LEGACY_TERMSERVICE\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001