Technical Information
- [<HKLM>\System\CurrentControlSet\Services\DcomProcess] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\DcomProcess] 'ImagePath' = 'C:/Users/user/AppData/Roaming/DcomProcess/svchDcom.exe'
- 'DcomProcess' C:/Users/user/AppData/Roaming/DcomProcess/svchDcom.exe
- %APPDATA%\dcomprocess\svchdcom.exe
- '21#.#04.72.235':80
- '21#.#04.72.235':80
- '%APPDATA%\dcomprocess\svchdcom.exe'