Back to Techniques
dcomcnfg.exe
dcomcnfg.exe opens Component Services by spawning mmc.exe comexp.msc. Attackers can use it as a benign-looking launcher to bring up a trusted UI.
Support asks to verify DCOM configuration. Follow these steps.
Press Win-R
Type
dcomcnfgand press EnterWait for Component Services to open
Mitigations:
Verify requests to launch admin consoles
Contributor:
ClickGrab
(2025-09-16)