윈 도 우 WIndows10에서 원격데스크톱 관련파일과 서비스항목, 레지스트리 를 알고싶...

우선 뽑아본것만 나열 해볼께요

 

필요한 파일

Windows\SystemResources\  하위에

       Windows.UI.Cred

 

Windows\System32\  하위에

       cngcredui.dll

       CredentialUIBroker.exe

       credssp.dll,credui.dll

       cryptui.dll

       d2d1.dll

       d3d10warp.dll

       d3d11.dll

       dcomp.dll

       DWrite.dll

       drprov.dll

       dxgi.dll

       iphlpsvc.dll    

       msacm32.dll

       msacm32.drv

       mstsc.exe

       mstscax.dll

       ncryptprov.dll

       ncryptsslp.dll,pdh.dll

       rdsdwmdr.dll

       sessenv.dll

       TSpkg.dll

       umb.dll

       Windows.Globalization.dll

       Windows.Graphics.dll

       Windows.Internal.UI.Logon.ProxyStub.dll

       Windows.UI.Cred.dll,Windows.UI.CredDialogController.dll

       Windows.UI.Xaml.Resources.Common.dll

       wuceffects.dll

 

Windows\System32\drivers\  하위에

        terminpt.sys

        rdpbus.sys

        rdpdr.sys

        rdbss.sys

        rdpvideominiport.sys

        ipFltdrv.sy

 

Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ 하위에

        Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~

        Microsoft-Windows-TerminalServices~

 

 

 

살펴볼 레지스트리 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server]

"RDPVGSInstalled"=dword:00000001

"InstanceID"="753b007a-fc1a-4f11-b251-4be3e93"

"GlassSessionId"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\ClusterSettings]

"LastLSMInstanceID"="753b007a-fc1a-4f11-b251-4be3e93"

 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\RCM]

"Certificate"=hex:01,00,00,00,01,00,00,00,01,00,00,00,06,00,1c,01,52,53,41,31,\

  08,01,00,00,00,08,00,00,ff,00,00,00,01,00,01,00,7d,ec,87,80,d4,bb,df,67,a7,\

  de,6a,e0,c8,8f,c4,a3,20,b4,44,d5,45,aa,42,02,47,de,4a,8e,4b,c3,74,91,9c,2b,\

  22,1a,67,e3,bd,86,0f,ff,67,35,e3,69,3e,6f,a5,53,4c,c6,e5,7c,d3,b4,02,63,5b,\

  02,bf,59,96,f9,a6,7d,1b,5a,bc,c9,b8,a7,13,0a,32,b8,56,1e,05,ab,ac,9b,fb,7a,\

  34,83,e0,d9,31,9b,a3,ee,0d,85,06,c7,27,f8,ee,86,af,9f,3b,55,55,61,85,6a,5e,\

  fe,33,84,67,03,5c,09,ec,70,f9,3d,43,a4,7f,19,3f,9c,ea,98,29,9a,4d,93,6f,e1,\

  a0,00,ad,f5,ce,c3,51,18,ea,bf,1e,22,54,f5,ed,cc,35,31,9d,3e,25,04,75,fc,2f,\

  e5,b1,22,78,d1,36,9c,ac,c5,b8,9e,77,48,2a,52,9b,a7,bf,a9,b4,66,57,0b,69,e6,\

  e4,44,7f,b9,24,97,e0,ce,e3,c0,6a,8b,bf,47,51,7a,0a,31,69,db,94,ed,5d,69,53,\

  3c,e4,eb,69,e2,e4,b6,00,33,3b,59,5c,ef,2c,37,6f,37,93,41,fd,6a,49,18,35,9b,\

  d2,44,de,8a,c1,86,b1,02,42,fd,99,6f,08,a0,9b,b1,2b,43,8f,e0,23,b1,00,00,00,\

  00,00,00,00,00,08,00,48,00,56,01,fd,ca,00,c5,f4,9d,28,cb,38,ae,b3,50,5e,45,\

  45,e9,71,e0,4d,15,b7,20,96,99,1d,fc,9b,1d,f4,08,79,39,6f,22,a4,b9,45,62,1e,\

  07,c9,32,34,16,59,9a,94,c7,9e,1a,b1,04,39,c8,9a,ef,5e,0f,0f,5a,6f,29,00,00,\

  00,00,00,00,00,00

"CertificateOld"=hex:01,00,00,00,01,00,00,00,01,00,00,00,06,00,5c,00,52,53,41,\

  31,48,00,00,00,00,02,00,00,3f,00,00,00,01,00,01,00,a1,47,98,74,f1,bd,06,40,\

  0f,92,74,41,8d,68,37,45,40,db,c8,7a,be,22,63,9b,33,2e,6d,d4,b7,8c,a4,7b,2a,\

  fd,42,1a,3a,b3,82,34,6f,62,c8,73,e7,94,3c,02,d5,6b,fe,bb,13,e2,9f,5a,c0,fb,\

  60,12,ee,30,11,ba,00,00,00,00,00,00,00,00,08,00,48,00,87,94,ec,a1,f3,3f,6f,\

  1d,4f,a5,6e,09,d7,a2,21,54,60,7c,78,7b,c0,70,f2,9b,78,56,05,a3,d5,53,ea,5e,\

  50,30,42,99,42,c2,21,63,a8,df,cd,d0,28,58,ac,46,b3,8f,37,74,4d,29,f8,7c,76,\

  01,c6,3f,6e,a0,f6,6f,00,00,00,00,00,00,00,00

 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\WinStations]

"SelfSignedCertificate"=hex:b4,c6,31,9b,fc,4e,12,be,fe,b3,e7,83,72,21,8e,a2,90,\

  69,de,de

"SelfSignedCertStore"="Remote Desktop"

 

실행 파일 

Default.rdp