! REG.EXE VERSION 3.0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs Description REG_SZ Provides the endpoint mapper and other miscellaneous RPC services. DisplayName REG_SZ Remote Procedure Call (RPC) ErrorControl REG_DWORD 0x1 Group REG_SZ COM Infrastructure ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost -k rpcss ObjectName REG_SZ NT AUTHORITY\NetworkService Start REG_DWORD 0x2 Type REG_DWORD 0x20 FailureActions REG_BINARY 00000000000000000000000001000000000000000200000060EA0000 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Parameters ServiceDll REG_EXPAND_SZ %SystemRoot%\System32\rpcss.dll HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Security Security REG_BINARY 01001480A8000000B4000000140000003000000002001C000100000002801400FF010F000101000000000001000000000200780005000000000014008D00020001010000000000050B00000000001800FF010F0001020000000000052000000020020000000018008D00020001020000000000052000000023020000000014009D000000010100000000000504000000000018009D00000001020000000000052000000021020000010100000000000512000000010100000000000512000000 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Enum 0 REG_SZ Root\LEGACY_RPCSS\0000 Count REG_DWORD 0x1 NextInstance REG_DWORD 0x1 ! REG.EXE VERSION 3.0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator Type REG_DWORD 0x10 Start REG_DWORD 0x3 ErrorControl REG_DWORD 0x1 ImagePath REG_EXPAND_SZ %SystemRoot%\system32\locator.exe DisplayName REG_SZ Remote Procedure Call (RPC) Locator DependOnService REG_MULTI_SZ LanmanWorkstation\0\0 DependOnGroup REG_MULTI_SZ \0 ObjectName REG_SZ NT AUTHORITY\NetworkService Description REG_SZ Manages the RPC name service database. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator\Parameters ExpirationAge REG_DWORD 0xe10 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator\Security Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000