LoadOrdC.exe

  • File Path: C:\SysinternalsSuite\LoadOrdC.exe
  • Description: Startup order viewer

Hashes

Type Hash
MD5 94A073B507AD4B8DEFB20955F49BC958
SHA1 5E109771EF108615DCABFB2AF8ACFDF6831574C5
SHA256 98259FC4ABFBEEFD07AF05414A212572B5BE831B05E3B78E12303344EE2EA64C
SHA384 3A29F3EA0186E27CBD68CB700796C53378EE8E522383ACC438E842F06CA00D2CF9C09AAFD5CC5A621C0B084F59676C93
SHA512 A6FC69381F747106EE6C2F6FA69B97F281791840EF1BEE479DC2FD641DFBA384AE7F74452B33CB931DD3BFECC449BCDED2E5D4E4DD35ADB6B2F1C68BDA44375C
SSDEEP 3072:1mfb4+fWZilvytukdZUFHg79F+JmwDmlTMW1rPQEaf6:ofb4Qe5IHrKN1rGf6
IMP 872E20B11124BF47E2547B7D535E812B
PESHA1 41F1046BCF4C792A4FA3FDE1BDCA2CF257E6026C
PE256 079C7F1A5AA81E1722277D6119AB8AE057B01109ACF163AFB7596D5BFA47F91C

Runtime Data

Usage (stdout):


Loadord v1.01 - Startup order viewer
Copyright (C) 1998-2016 Mark Russinovich
Sysinternals - www.sysinternals.com

Start Value  Group name                Tag        Service/Devide                 Display Name                                       Image path                              
Boot         System Reserved           n/a*       pcw                            Performance Counters for Windows Driver            System32\drivers\pcw.sys                
Boot         WdfLoadGroup              n/a*       Wdf01000                       @%SystemRoot%\system32\drivers\Wdf01000.sys,-1000  system32\drivers\Wdf01000.sys           
Boot         Boot Bus Extender         7          acpiex                         Microsoft ACPIEx Driver                            System32\Drivers\acpiex.sys             
Boot         Boot Bus Extender         n/a*       partmgr                        @%SystemRoot%\system32\drivers\partmgr.sys,-100    System32\drivers\partmgr.sys            
Boot         Boot Bus Extender         n/a*       pdc                            @%SystemRoot%\system32\drivers\pdc.sys,-100        system32\drivers\pdc.sys                
Boot         System Bus Extender       9          volmgr                         @volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver System32\drivers\volmgr.sys             
Boot         System Bus Extender       10         volmgrx                        @%SystemRoot%\system32\drivers\volmgrx.sys,-100    System32\drivers\volmgrx.sys            
Boot         System Bus Extender       11         vmbus                          @wvmbus.inf,%vmbus.SVCDESC%;Virtual Machine Bus    System32\drivers\vmbus.sys              
Boot         System Bus Extender       12         vpci                           @wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus System32\drivers\vpci.sys               
Boot         System Bus Extender       n/a*       mountmgr                       @%SystemRoot%\system32\drivers\mountmgr.sys,-100   System32\drivers\mountmgr.sys           
Boot         SCSI Miniport             8          ItSas35i                                                                          System32\drivers\ItSas35i.sys           
Boot         SCSI Miniport             14         megasas2i                                                                         System32\drivers\MegaSas2i.sys          
Boot         SCSI Miniport             15         megasas35i                                                                        System32\drivers\megasas35i.sys         
Boot         SCSI Miniport             27         cht4iscsi                                                                         System32\drivers\cht4sx64.sys           
Boot         SCSI miniport             28         iaStorAVC                      @iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller System32\drivers\iaStorAVC.sys          
Boot         SCSI Miniport             259*       SmartSAMD                                                                         System32\drivers\SmartSAMD.sys          
Boot         Primary Disk              1          nvdimm                         @nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver System32\drivers\nvdimm.sys             
Boot         SCSI Class                1          EhStorTcgDrv                   @ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols System32\drivers\EhStorTcgDrv.sys       
Boot         SCSI Class                n/a*       EhStorClass                    @%SystemRoot%\system32\drivers\EhStorClass.sys,-100 System32\drivers\EhStorClass.sys        
Boot         FSFilter Infrastructure   1          FltMgr                         @%SystemRoot%\system32\drivers\fltmgr.sys,-10001   system32\drivers\fltmgr.sys             
Boot         FSFilter Bottom           n/a*       FileInfo                       @%SystemRoot%\system32\drivers\fileinfo.sys,-100   System32\drivers\fileinfo.sys           
Boot         FSFilter Virtualization   n/a*       wcifs                          @%systemroot%\system32\drivers\wcifs.sys,-100      \SystemRoot\system32\drivers\wcifs.sys  
Boot         Filter                    1          CLFS                           @%SystemRoot%\system32\drivers\clfs.sys,-100       System32\drivers\CLFS.sys               
Boot         Filter                    n/a*       MsSecFlt                       @%SystemRoot%\System32\Drivers\mssecflt.sys,-1001  system32\drivers\mssecflt.sys           
Boot         Boot File System          n/a*       Ntfs                                                                                                                      
Boot         Base                      1          KSecDD                                                                            System32\Drivers\ksecdd.sys             
Boot         Base                      25*        storvsc                                                                           System32\drivers\storvsc.sys            
Boot         File System               n/a*       Fs_Rec                                                                                                                    
Boot         NDIS Wrapper              n/a*       NDIS                           @%SystemRoot%\system32\drivers\ndis.sys,-200       system32\drivers\ndis.sys               
Boot         Cryptography              2          KSecPkg                                                                           System32\Drivers\ksecpkg.sys            
Boot         PNP_TDI                   3          Tcpip                          @%SystemRoot%\system32\drivers\tcpip.sys,-10001    System32\drivers\tcpip.sys              
Boot         PNP_TDI                   n/a*       AFD                            @%systemroot%\system32\drivers\afd.sys,-1000       \SystemRoot\system32\drivers\afd.sys    
Boot         PNP_TDI                   n/a*       WFPLWFS                        @%SystemRoot%\System32\drivers\wfplwfs.sys,-6000   System32\drivers\wfplwfs.sys            
Boot         Extended Base             46*        storflt                        @wstorflt.inf,%service_desc%;Microsoft Hyper-V Storage Accelerator System32\drivers\vmstorfl.sys           
Boot         Core*                     2*         ACPI                           @acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver     System32\drivers\ACPI.sys               
Boot         PnP Filter*               6*         bttflt                         @virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter System32\drivers\bttflt.sys             
Boot         Core*                     4*         CNG                                                                               System32\Drivers\cng.sys                
Boot         n/a*                      n/a*       disk                           @disk.inf,%disk_ServiceDesc%;Disk Driver           System32\drivers\disk.sys               
Boot         n/a*                      n/a*       hvcrash                                                                           \SystemRoot\System32\drivers\hvcrash.sys
Boot         n/a*                      n/a*       hwpolicy                       @%systemroot%\system32\drivers\hwpolicy.sys,-101   System32\drivers\hwpolicy.sys           
Boot         Core Security Extensions* 1*         intelpep                       @intelpep.inf,%INTELPEP.SVCDESC%;Intel(R) Power Engine Plug-in Driver System32\drivers\intelpep.sys           
Boot         PnP Filter*               n/a*       iorate                         @%SystemRoot%\system32\drivers\iorate.sys,-101     system32\drivers\iorate.sys             
Boot         Network*                  5*         mrxsmb                         @%systemroot%\system32\wkssvc.dll,-1002            system32\DRIVERS\mrxsmb.sys             
Boot         Network*                  7*         mrxsmb20                       @%systemroot%\system32\wkssvc.dll,-1006            system32\DRIVERS\mrxsmb20.sys           
Boot         Network*                  1*         Mup                            @%systemroot%\system32\drivers\mup.sys,-101        System32\Drivers\mup.sys                
Boot         n/a*                      n/a*       pmem                           @pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver System32\drivers\pmem.sys               
Boot         n/a*                      n/a*       Ramdisk                        Windows RAM Disk Driver                            system32\DRIVERS\ramdisk.sys            
Boot         Network*                  4*         rdbss                          @%systemroot%\system32\wkssvc.dll,-1000            system32\DRIVERS\rdbss.sys              
Boot         PnP Filter*               n/a*       rdyboost                       ReadyBoost                                         System32\drivers\rdyboost.sys           
Boot         n/a*                      n/a*       scmbus                         @scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver System32\drivers\scmbus.sys             
Boot         n/a*                      n/a*       SgrmAgent                      @%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001 system32\drivers\SgrmAgent.sys          
Boot         n/a*                      n/a*       storufs                        @storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver System32\drivers\storufs.sys            
Boot         Core Security Extensions* 2*         Telemetry                      @intelta.inf,%Telemetry.SVCDESC%;Intel(R) Telemetry Service System32\drivers\IntelTA.sys            
Boot         n/a*                      n/a*       volsnap                        @%SystemRoot%\system32\drivers\volsnap.sys,-100    System32\drivers\volsnap.sys            
Boot         n/a*                      n/a*       volume                         @volume.inf,%VolumeServiceDesc%;Volume driver      System32\drivers\volume.sys             
Boot         Early-Launch*             n/a*       WdBoot                         @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390 system32\drivers\WdBoot.sys             
Boot         Core Security Extensions* 1*         WindowsTrustedRT               Windows Trusted Execution Environment Class Extension system32\drivers\WindowsTrustedRT.sys   
Boot         Core Security Extensions* 2*         WindowsTrustedRTProxy          @WindowsTrustedRTProxy.inf,%WindowsTrustedRTProxy.SVCDESC%;Microsoft Windows Trusted Runtime Secure Service System32\drivers\WindowsTrustedRTProxy.sys
System       SCSI CDROM Class          1          cdrom                          @cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver       \SystemRoot\System32\drivers\cdrom.sys  
System       FSFilter Encryption       n/a*       FileCrypt                      @%systemroot%\system32\drivers\filecrypt.sys,-100  system32\drivers\filecrypt.sys          
System       Base                      1          Null                                                                                                                      
System       Base                      2          Beep                           Beep                                                                                       
System       Video Init                1          DXGKrnl                        LDDM Graphics Subsystem                            \SystemRoot\System32\drivers\dxgkrnl.sys
System       Video                     1          BasicDisplay                                                                      \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_62ba5773ba05edee\BasicDisplay.sys
System       Video                     2*         BasicRender                                                                       \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_49a8589f00d970d9\BasicRender.sys
System       File system               n/a*       CimFS                                                                                                                     
System       File system               n/a*       Msfs                                                                                                                      
System       File system               n/a*       Npfs                                                                                                                      
System       PNP_TDI                   4          tdx                            @%SystemRoot%\system32\tcpipcfg.dll,-50004         \SystemRoot\system32\DRIVERS\tdx.sys    
System       PNP_TDI                   n/a*       afunix                         afunix                                             \SystemRoot\system32\drivers\afunix.sys 
System       PNP_TDI                   n/a*       NetBT                          @%SystemRoot%\system32\drivers\netbt.sys,-2        System32\DRIVERS\netbt.sys              
System       NDIS                      n/a*       NdisCap                        @%SystemRoot%\System32\drivers\ndiscap.sys,-5000   System32\drivers\ndiscap.sys            
System       NDIS                      n/a*       Psched                         @%windir%\System32\drivers\pacer.sys,-101          System32\drivers\pacer.sys              
System       NDIS                      n/a*       vwififlt                       @%SystemRoot%\System32\drivers\vwififlt.sys,-259   System32\drivers\vwififlt.sys           
System       NetBIOSGroup              n/a*       NetBIOS                        @%windir%\system32\drivers\netbios.sys,-503        system32\drivers\netbios.sys            
System       Extended Base             42*        Vid                                                                               \SystemRoot\System32\drivers\Vid.sys    
System       n/a*                      n/a*       ahcache                        @%systemroot%\system32\drivers\ahcache.sys,-102    system32\DRIVERS\ahcache.sys            
System       n/a*                      n/a*       bam                            @%SystemRoot%\system32\drivers\bam.sys,-100        system32\drivers\bam.sys                
System       network*                  9*         CSC                            @%systemroot%\system32\cscsvc.dll,-202             system32\drivers\csc.sys                
System       n/a*                      n/a*       dam                            @%SystemRoot%\system32\drivers\dam.sys,-100        system32\drivers\dam.sys                
System       Network*                  n/a*       Dfsc                           @%systemroot%\system32\wkssvc.dll,-1008            System32\Drivers\dfsc.sys               
System       n/a*                      n/a*       GpuEnergyDrv                   @%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100 System32\drivers\gpuenergydrv.sys       
System       n/a*                      n/a*       mssmbios                       @mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver \SystemRoot\System32\drivers\mssmbios.sys
System       n/a*                      n/a*       npsvctrig                      @npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider \SystemRoot\System32\drivers\npsvctrig.sys
System       n/a*                      n/a*       nsiproxy                       @%SystemRoot%\system32\drivers\nsiproxy.sys,-2     system32\drivers\nsiproxy.sys           
Automatic    FSFilter Virtualization   n/a*       luafv                          @%systemroot%\system32\drivers\luafv.sys,-100      \SystemRoot\system32\drivers\luafv.sys  
Automatic    FSFilter HSM              1          CldFlt                         Windows Cloud Files Filter Driver                  system32\drivers\cldflt.sys             
Automatic    FSFilter Top              n/a*       bindflt                        @%systemroot%\system32\drivers\bindflt.sys,-100    \SystemRoot\system32\drivers\bindflt.sys
Automatic    COM Infrastructure        n/a*       BrokerInfrastructure           @%windir%\system32\bisrv.dll,-100                  %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    COM Infrastructure        n/a*       DcomLaunch                     @combase.dll,-5012                                 %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    COM Infrastructure        n/a*       LSM                            @%windir%\system32\lsm.dll,-1001                   %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    COM Infrastructure        n/a*       RpcEptMapper                   @%windir%\system32\RpcEpMap.dll,-1001              %SystemRoot%\system32\svchost.exe -k RPCSS -p
Automatic    COM Infrastructure        n/a*       RpcSs                          @combase.dll,-5010                                 %SystemRoot%\system32\svchost.exe -k rpcss -p
Automatic    Event Log                 n/a*       EventLog                       @%SystemRoot%\system32\wevtsvc.dll,-200            %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    ProfSvc_Group             n/a*       gpsvc                          @gpapi.dll,-112                                    %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    profsvc_group             n/a*       ProfSvc                        @%systemroot%\system32\profsvc.dll,-300            %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    ProfSvc_Group             n/a*       SENS                           @%SystemRoot%\system32\Sens.dll,-200               %SystemRoot%\system32\svchost.exe -k netsvcs -p
Automatic    profsvc_group             n/a*       SysMain                        @%SystemRoot%\system32\sysmain.dll,-1000           %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    ProfSvc_Group             n/a*       Themes                         @%SystemRoot%\System32\themeservice.dll,-8192      %SystemRoot%\System32\svchost.exe -k netsvcs -p
Automatic    AudioGroup                n/a*       AudioEndpointBuilder           @%SystemRoot%\system32\AudioEndpointBuilder.dll,-204 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    AudioGroup                n/a*       Audiosrv                       @%SystemRoot%\system32\audiosrv.dll,-200           %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    AudioGroup                n/a*       FontCache                      @%systemroot%\system32\FntCache.dll,-100           %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    MS_WindowsLocalValidation n/a*       SamSs                          @%SystemRoot%\system32\samsrv.dll,-1               %SystemRoot%\system32\lsass.exe         
Automatic    Plugplay                  n/a*       Power                          @%SystemRoot%\system32\umpo.dll,-100               %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    NDIS                      n/a*       lltdio                         @%SystemRoot%\system32\lltdres.dll,-6              system32\drivers\lltdio.sys             
Automatic    NDIS                      n/a*       MsLldp                         @%SystemRoot%\system32\drivers\mslldp.sys,-200     system32\drivers\mslldp.sys             
Automatic    NDIS                      n/a*       rspndr                         @%SystemRoot%\system32\lltdres.dll,-5              system32\drivers\rspndr.sys             
Automatic    TDI                       n/a*       Dhcp                           @%SystemRoot%\system32\dhcpcore.dll,-100           %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    TDI                       n/a*       Dnscache                       @%SystemRoot%\System32\dnsapi.dll,-101             %SystemRoot%\system32\svchost.exe -k NetworkService -p
Automatic    TDI                       n/a*       DusmSvc                        @%SystemRoot%\System32\dusmsvc.dll,-1              %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    TDI                       n/a*       Wcmsvc                         @%SystemRoot%\System32\wcmsvc.dll,-4097            %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    SchedulerGroup            n/a*       Schedule                       @%SystemRoot%\system32\schedsvc.dll,-100           %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    SpoolerGroup              n/a*       Spooler                        @%systemroot%\system32\spoolsv.exe,-1              %SystemRoot%\System32\spoolsv.exe       
Automatic    NetworkProvider           n/a*       BFE                            @%SystemRoot%\system32\bfe.dll,-1001               %systemroot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
Automatic    NetworkProvider           n/a*       LanmanWorkstation              @%systemroot%\system32\wkssvc.dll,-100             %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    NetworkProvider           n/a*       mpssvc                         @%SystemRoot%\system32\FirewallAPI.dll,-23090      %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
Automatic    n/a*                      n/a*       CDPSvc                         @%SystemRoot%\system32\cdpsvc.dll,-100             %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       CDPUserSvc                     @%SystemRoot%\system32\cdpusersvc.dll,-100         %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       CDPUserSvc_43a0b               Connected Devices Platform User Service_43a0b      C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       cexecsvc                       @%systemroot%\system32\cexecsvc.exe,-100           %systemroot%\system32\cexecsvc.exe      
Automatic    n/a*                      n/a*       CoreMessagingRegistrar         @%SystemRoot%\system32\coremessaging.dll,-1        %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork -p
Automatic    n/a*                      n/a*       CryptSvc                       @%SystemRoot%\system32\cryptsvc.dll,-1001          %SystemRoot%\system32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       DiagTrack                      @%SystemRoot%\system32\diagtrack.dll,-3001         %SystemRoot%\System32\svchost.exe -k utcsvc -p
Automatic    n/a*                      n/a*       DispBrokerDesktopSvc           @%SystemRoot%\system32\dispbroker.desktop.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       DoSvc                          @%systemroot%\system32\dosvc.dll,-100              %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       DPS                            @%systemroot%\system32\dps.dll,-500                %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p
Automatic    n/a*                      n/a*       EventSystem                    @comres.dll,-2450                                  %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       gcs                            @%systemroot%\system32\vmcomputeagent.exe,-100     %systemroot%\system32\vmcomputeagent.exe
Automatic    n/a*                      n/a*       IKEEXT                         @%SystemRoot%\system32\ikeext.dll,-501             %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       iphlpsvc                       @%SystemRoot%\system32\iphlpsvc.dll,-500           %SystemRoot%\System32\svchost.exe -k NetSvcs -p
Automatic    n/a*                      n/a*       LanmanServer                   @%systemroot%\system32\srvsvc.dll,-100             %SystemRoot%\system32\svchost.exe -k netsvcs -p
Automatic    NetworkService*           n/a*       MapsBroker                     @%SystemRoot%\System32\moshost.dll,-100            %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       MMCSS                          @%systemroot%\system32\drivers\mmcss.sys,-100      \SystemRoot\system32\drivers\mmcss.sys  
Automatic    n/a*                      n/a*       Ndu                            @%SystemRoot%\system32\drivers\Ndu.sys,-10001      system32\drivers\Ndu.sys                
Automatic    n/a*                      n/a*       NlaSvc                         @%SystemRoot%\System32\nlasvc.dll,-1               %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       nsi                            @%SystemRoot%\system32\nsisvc.dll,-200             %systemroot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       OneSyncSvc                     @%SystemRoot%\system32\APHostRes.dll,-10002        %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       OneSyncSvc_43a0b               Sync Host_43a0b                                    C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       PEAUTH                         PEAUTH                                             system32\drivers\peauth.sys             
Automatic    n/a*                      n/a*       SgrmBroker                     @%SystemRoot%\System32\SgrmBroker.exe,-100         %SystemRoot%\system32\SgrmBroker.exe    
Automatic    n/a*                      n/a*       StorSvc                        @%SystemRoot%\System32\StorSvc.dll,-100            %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    n/a*                      n/a*       SystemEventsBroker             @%windir%\system32\SystemEventsBrokerServer.dll,-1001 %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    n/a*                      n/a*       tcpipreg                       TCP/IP Registry Compatibility                      System32\drivers\tcpipreg.sys           
Automatic    n/a*                      n/a*       TrkWks                         @%SystemRoot%\system32\trkwks.dll,-1               %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    n/a*                      n/a*       UserManager                    @%systemroot%\system32\usermgr.dll,-100            %SystemRoot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       UsoSvc                         @%systemroot%\system32\usosvc.dll,-101             %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       Winmgmt                        @%Systemroot%\system32\wbem\wmisvc.dll,-205        %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       WpnService                     @%SystemRoot%\system32\wpnservice.dll,-1           %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       WpnUserService                 @%SystemRoot%\system32\WpnUserService.dll,-1       %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       WpnUserService_43a0b           Windows Push Notifications User Service_43a0b      C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       wscsvc                         @%SystemRoot%\System32\wscsvc.dll,-200             %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p

Loaded Modules:

Path
C:\SysinternalsSuite\LoadOrdC.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 330000010A2C79AED7797BA6AC00010000010A
  • Thumbprint: 3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC
  • Issuer: CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Loadord
  • Product Name: Sysinternals Loadord
  • Company Name: Sysinternals - www.sysinternals.com
  • File Version: 1.01
  • Product Version: 1.01
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 1998-2016 Mark Russinovich
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/98259fc4abfbeefd07af05414a212572b5be831b05e3b78e12303344ee2ea64c/detection/

Possible Misuse

The following table contains possible examples of LoadOrdC.exe being misused. While LoadOrdC.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_false_sysinternalsuite.yml - '\loadOrdC.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.