SCM
The Service Control Manager (SCM) handles Win32 COM library (OLE32.DLL) calls, such as CoCreateInstance. It’s implemented in RPCSS.EXE. It listens on TCP/UDP port 135.
The surrogate process on the remote machine is implemented in DLLHOST.EXE or MTS.EXE.
