SCM
The Service Control Manager (SCM) handles Win32 COM library (OLE32.DLL
) calls, such as CoCreateInstance
. It’s implemented in RPCSS.EXE
. It listens on TCP/UDP port 135.
The surrogate process on the remote machine is implemented in DLLHOST.EXE
or MTS.EXE
.