Remcomsvc.exe -
net stop RemoteCommandService sc config RemoteCommandService start= disabled
sc query RemoteCommandService
certutil -hashfile C:\Windows\System32\remcomsvc.exe SHA256 Compare the hash against Microsoft’s official catalog (or known-good DB like VirusTotal). remcomsvc.exe
