LoadOrdC64.exe

  • File Path: C:\SysinternalsSuite\LoadOrdC64.exe
  • Description: Startup order viewer

Hashes

Type Hash
MD5 C25A1CC02B2712154ED4FF44CED45D5D
SHA1 22161F856F6AE36DADBC3EE956F893748B90CC63
SHA256 49B4E386E6C047745A67D5076D841EAC21FFC4BF7602A9A4F1F5124C149EEFA5
SHA384 556713D728F7A27D26DB8BE71FCEFB936CE1B89BE3AA5373A6C97D52C586D04CA6C601BB6DD281AE596E1FF9A6CA5CC6
SHA512 86C46EFBC4A3DC86033FD3F9D24237147243241BC563D5AA7E0251BEAC7D8D02B1219C2847FA965D0FDF6A779B683A99B8320313C34BEAE9DE30D76D9832DD0C
SSDEEP 3072:cauNT4uHAK/NiTc0kQUOdYyjdx7A/G5UFHYGJ0Mzf2/wDmo/fwDt2CEEu9:ca4DAK/YTxRTYyjdxErHHzuenwbY
IMP F97620D0D951CF8D580BA1054CD05181
PESHA1 F62A58B0553A0164A36D690B6FDAADED9DB36414
PE256 FAD61DCBBE903346FE06BE8B32B7001BD04901BE96034B19C9E73FDC28FD7F22

Runtime Data

Usage (stdout):


Loadord v1.01 - Startup order viewer
Copyright (C) 1998-2016 Mark Russinovich
Sysinternals - www.sysinternals.com

Start Value  Group name                Tag        Service/Devide                 Display Name                                       Image path                              
Boot         System Reserved           n/a*       pcw                            Performance Counters for Windows Driver            System32\drivers\pcw.sys                
Boot         WdfLoadGroup              n/a*       Wdf01000                       @%SystemRoot%\system32\drivers\Wdf01000.sys,-1000  system32\drivers\Wdf01000.sys           
Boot         Boot Bus Extender         7          acpiex                         Microsoft ACPIEx Driver                            System32\Drivers\acpiex.sys             
Boot         Boot Bus Extender         n/a*       partmgr                        @%SystemRoot%\system32\drivers\partmgr.sys,-100    System32\drivers\partmgr.sys            
Boot         Boot Bus Extender         n/a*       pdc                            @%SystemRoot%\system32\drivers\pdc.sys,-100        system32\drivers\pdc.sys                
Boot         System Bus Extender       9          volmgr                         @volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver System32\drivers\volmgr.sys             
Boot         System Bus Extender       10         volmgrx                        @%SystemRoot%\system32\drivers\volmgrx.sys,-100    System32\drivers\volmgrx.sys            
Boot         System Bus Extender       11         vmbus                          @wvmbus.inf,%vmbus.SVCDESC%;Virtual Machine Bus    System32\drivers\vmbus.sys              
Boot         System Bus Extender       12         vpci                           @wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus System32\drivers\vpci.sys               
Boot         System Bus Extender       n/a*       mountmgr                       @%SystemRoot%\system32\drivers\mountmgr.sys,-100   System32\drivers\mountmgr.sys           
Boot         SCSI Miniport             8          ItSas35i                                                                          System32\drivers\ItSas35i.sys           
Boot         SCSI Miniport             14         megasas2i                                                                         System32\drivers\MegaSas2i.sys          
Boot         SCSI Miniport             15         megasas35i                                                                        System32\drivers\megasas35i.sys         
Boot         SCSI Miniport             27         cht4iscsi                                                                         System32\drivers\cht4sx64.sys           
Boot         SCSI miniport             28         iaStorAVC                      @iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller System32\drivers\iaStorAVC.sys          
Boot         SCSI Miniport             259*       SmartSAMD                                                                         System32\drivers\SmartSAMD.sys          
Boot         Primary Disk              1          nvdimm                         @nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver System32\drivers\nvdimm.sys             
Boot         SCSI Class                1          EhStorTcgDrv                   @ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols System32\drivers\EhStorTcgDrv.sys       
Boot         SCSI Class                n/a*       EhStorClass                    @%SystemRoot%\system32\drivers\EhStorClass.sys,-100 System32\drivers\EhStorClass.sys        
Boot         FSFilter Infrastructure   1          FltMgr                         @%SystemRoot%\system32\drivers\fltmgr.sys,-10001   system32\drivers\fltmgr.sys             
Boot         FSFilter Bottom           n/a*       FileInfo                       @%SystemRoot%\system32\drivers\fileinfo.sys,-100   System32\drivers\fileinfo.sys           
Boot         FSFilter Virtualization   n/a*       wcifs                          @%systemroot%\system32\drivers\wcifs.sys,-100      \SystemRoot\system32\drivers\wcifs.sys  
Boot         Filter                    1          CLFS                           @%SystemRoot%\system32\drivers\clfs.sys,-100       System32\drivers\CLFS.sys               
Boot         Filter                    n/a*       MsSecFlt                       @%SystemRoot%\System32\Drivers\mssecflt.sys,-1001  system32\drivers\mssecflt.sys           
Boot         Boot File System          n/a*       Ntfs                                                                                                                      
Boot         Base                      1          KSecDD                                                                            System32\Drivers\ksecdd.sys             
Boot         Base                      25*        storvsc                                                                           System32\drivers\storvsc.sys            
Boot         File System               n/a*       Fs_Rec                                                                                                                    
Boot         NDIS Wrapper              n/a*       NDIS                           @%SystemRoot%\system32\drivers\ndis.sys,-200       system32\drivers\ndis.sys               
Boot         Cryptography              2          KSecPkg                                                                           System32\Drivers\ksecpkg.sys            
Boot         PNP_TDI                   3          Tcpip                          @%SystemRoot%\system32\drivers\tcpip.sys,-10001    System32\drivers\tcpip.sys              
Boot         PNP_TDI                   n/a*       AFD                            @%systemroot%\system32\drivers\afd.sys,-1000       \SystemRoot\system32\drivers\afd.sys    
Boot         PNP_TDI                   n/a*       WFPLWFS                        @%SystemRoot%\System32\drivers\wfplwfs.sys,-6000   System32\drivers\wfplwfs.sys            
Boot         Extended Base             46*        storflt                        @wstorflt.inf,%service_desc%;Microsoft Hyper-V Storage Accelerator System32\drivers\vmstorfl.sys           
Boot         Core*                     2*         ACPI                           @acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver     System32\drivers\ACPI.sys               
Boot         PnP Filter*               6*         bttflt                         @virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter System32\drivers\bttflt.sys             
Boot         Core*                     4*         CNG                                                                               System32\Drivers\cng.sys                
Boot         n/a*                      n/a*       disk                           @disk.inf,%disk_ServiceDesc%;Disk Driver           System32\drivers\disk.sys               
Boot         n/a*                      n/a*       hvcrash                                                                           \SystemRoot\System32\drivers\hvcrash.sys
Boot         n/a*                      n/a*       hwpolicy                       @%systemroot%\system32\drivers\hwpolicy.sys,-101   System32\drivers\hwpolicy.sys           
Boot         Core Security Extensions* 1*         intelpep                       @intelpep.inf,%INTELPEP.SVCDESC%;Intel(R) Power Engine Plug-in Driver System32\drivers\intelpep.sys           
Boot         PnP Filter*               n/a*       iorate                         @%SystemRoot%\system32\drivers\iorate.sys,-101     system32\drivers\iorate.sys             
Boot         Network*                  5*         mrxsmb                         @%systemroot%\system32\wkssvc.dll,-1002            system32\DRIVERS\mrxsmb.sys             
Boot         Network*                  7*         mrxsmb20                       @%systemroot%\system32\wkssvc.dll,-1006            system32\DRIVERS\mrxsmb20.sys           
Boot         Network*                  1*         Mup                            @%systemroot%\system32\drivers\mup.sys,-101        System32\Drivers\mup.sys                
Boot         n/a*                      n/a*       pmem                           @pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver System32\drivers\pmem.sys               
Boot         n/a*                      n/a*       Ramdisk                        Windows RAM Disk Driver                            system32\DRIVERS\ramdisk.sys            
Boot         Network*                  4*         rdbss                          @%systemroot%\system32\wkssvc.dll,-1000            system32\DRIVERS\rdbss.sys              
Boot         PnP Filter*               n/a*       rdyboost                       ReadyBoost                                         System32\drivers\rdyboost.sys           
Boot         n/a*                      n/a*       scmbus                         @scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver System32\drivers\scmbus.sys             
Boot         n/a*                      n/a*       SgrmAgent                      @%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001 system32\drivers\SgrmAgent.sys          
Boot         n/a*                      n/a*       storufs                        @storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver System32\drivers\storufs.sys            
Boot         Core Security Extensions* 2*         Telemetry                      @intelta.inf,%Telemetry.SVCDESC%;Intel(R) Telemetry Service System32\drivers\IntelTA.sys            
Boot         n/a*                      n/a*       volsnap                        @%SystemRoot%\system32\drivers\volsnap.sys,-100    System32\drivers\volsnap.sys            
Boot         n/a*                      n/a*       volume                         @volume.inf,%VolumeServiceDesc%;Volume driver      System32\drivers\volume.sys             
Boot         Early-Launch*             n/a*       WdBoot                         @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390 system32\drivers\WdBoot.sys             
Boot         Core Security Extensions* 1*         WindowsTrustedRT               Windows Trusted Execution Environment Class Extension system32\drivers\WindowsTrustedRT.sys   
Boot         Core Security Extensions* 2*         WindowsTrustedRTProxy          @WindowsTrustedRTProxy.inf,%WindowsTrustedRTProxy.SVCDESC%;Microsoft Windows Trusted Runtime Secure Service System32\drivers\WindowsTrustedRTProxy.sys
System       SCSI CDROM Class          1          cdrom                          @cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver       \SystemRoot\System32\drivers\cdrom.sys  
System       FSFilter Encryption       n/a*       FileCrypt                      @%systemroot%\system32\drivers\filecrypt.sys,-100  system32\drivers\filecrypt.sys          
System       Base                      1          Null                                                                                                                      
System       Base                      2          Beep                           Beep                                                                                       
System       Video Init                1          DXGKrnl                        LDDM Graphics Subsystem                            \SystemRoot\System32\drivers\dxgkrnl.sys
System       Video                     1          BasicDisplay                                                                      \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_62ba5773ba05edee\BasicDisplay.sys
System       Video                     2*         BasicRender                                                                       \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_49a8589f00d970d9\BasicRender.sys
System       File system               n/a*       CimFS                                                                                                                     
System       File system               n/a*       Msfs                                                                                                                      
System       File system               n/a*       Npfs                                                                                                                      
System       PNP_TDI                   4          tdx                            @%SystemRoot%\system32\tcpipcfg.dll,-50004         \SystemRoot\system32\DRIVERS\tdx.sys    
System       PNP_TDI                   n/a*       afunix                         afunix                                             \SystemRoot\system32\drivers\afunix.sys 
System       PNP_TDI                   n/a*       NetBT                          @%SystemRoot%\system32\drivers\netbt.sys,-2        System32\DRIVERS\netbt.sys              
System       NDIS                      n/a*       NdisCap                        @%SystemRoot%\System32\drivers\ndiscap.sys,-5000   System32\drivers\ndiscap.sys            
System       NDIS                      n/a*       Psched                         @%windir%\System32\drivers\pacer.sys,-101          System32\drivers\pacer.sys              
System       NDIS                      n/a*       vwififlt                       @%SystemRoot%\System32\drivers\vwififlt.sys,-259   System32\drivers\vwififlt.sys           
System       NetBIOSGroup              n/a*       NetBIOS                        @%windir%\system32\drivers\netbios.sys,-503        system32\drivers\netbios.sys            
System       Extended Base             42*        Vid                                                                               \SystemRoot\System32\drivers\Vid.sys    
System       n/a*                      n/a*       ahcache                        @%systemroot%\system32\drivers\ahcache.sys,-102    system32\DRIVERS\ahcache.sys            
System       n/a*                      n/a*       bam                            @%SystemRoot%\system32\drivers\bam.sys,-100        system32\drivers\bam.sys                
System       network*                  9*         CSC                            @%systemroot%\system32\cscsvc.dll,-202             system32\drivers\csc.sys                
System       n/a*                      n/a*       dam                            @%SystemRoot%\system32\drivers\dam.sys,-100        system32\drivers\dam.sys                
System       Network*                  n/a*       Dfsc                           @%systemroot%\system32\wkssvc.dll,-1008            System32\Drivers\dfsc.sys               
System       n/a*                      n/a*       GpuEnergyDrv                   @%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100 System32\drivers\gpuenergydrv.sys       
System       n/a*                      n/a*       mssmbios                       @mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver \SystemRoot\System32\drivers\mssmbios.sys
System       n/a*                      n/a*       npsvctrig                      @npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider \SystemRoot\System32\drivers\npsvctrig.sys
System       n/a*                      n/a*       nsiproxy                       @%SystemRoot%\system32\drivers\nsiproxy.sys,-2     system32\drivers\nsiproxy.sys           
Automatic    FSFilter Virtualization   n/a*       luafv                          @%systemroot%\system32\drivers\luafv.sys,-100      \SystemRoot\system32\drivers\luafv.sys  
Automatic    FSFilter HSM              1          CldFlt                         Windows Cloud Files Filter Driver                  system32\drivers\cldflt.sys             
Automatic    FSFilter Top              n/a*       bindflt                        @%systemroot%\system32\drivers\bindflt.sys,-100    \SystemRoot\system32\drivers\bindflt.sys
Automatic    COM Infrastructure        n/a*       BrokerInfrastructure           @%windir%\system32\bisrv.dll,-100                  %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    COM Infrastructure        n/a*       DcomLaunch                     @combase.dll,-5012                                 %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    COM Infrastructure        n/a*       LSM                            @%windir%\system32\lsm.dll,-1001                   %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    COM Infrastructure        n/a*       RpcEptMapper                   @%windir%\system32\RpcEpMap.dll,-1001              %SystemRoot%\system32\svchost.exe -k RPCSS -p
Automatic    COM Infrastructure        n/a*       RpcSs                          @combase.dll,-5010                                 %SystemRoot%\system32\svchost.exe -k rpcss -p
Automatic    Event Log                 n/a*       EventLog                       @%SystemRoot%\system32\wevtsvc.dll,-200            %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    ProfSvc_Group             n/a*       gpsvc                          @gpapi.dll,-112                                    %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    profsvc_group             n/a*       ProfSvc                        @%systemroot%\system32\profsvc.dll,-300            %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    ProfSvc_Group             n/a*       SENS                           @%SystemRoot%\system32\Sens.dll,-200               %SystemRoot%\system32\svchost.exe -k netsvcs -p
Automatic    profsvc_group             n/a*       SysMain                        @%SystemRoot%\system32\sysmain.dll,-1000           %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    ProfSvc_Group             n/a*       Themes                         @%SystemRoot%\System32\themeservice.dll,-8192      %SystemRoot%\System32\svchost.exe -k netsvcs -p
Automatic    AudioGroup                n/a*       AudioEndpointBuilder           @%SystemRoot%\system32\AudioEndpointBuilder.dll,-204 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    AudioGroup                n/a*       Audiosrv                       @%SystemRoot%\system32\audiosrv.dll,-200           %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    AudioGroup                n/a*       FontCache                      @%systemroot%\system32\FntCache.dll,-100           %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    MS_WindowsLocalValidation n/a*       SamSs                          @%SystemRoot%\system32\samsrv.dll,-1               %SystemRoot%\system32\lsass.exe         
Automatic    Plugplay                  n/a*       Power                          @%SystemRoot%\system32\umpo.dll,-100               %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    NDIS                      n/a*       lltdio                         @%SystemRoot%\system32\lltdres.dll,-6              system32\drivers\lltdio.sys             
Automatic    NDIS                      n/a*       MsLldp                         @%SystemRoot%\system32\drivers\mslldp.sys,-200     system32\drivers\mslldp.sys             
Automatic    NDIS                      n/a*       rspndr                         @%SystemRoot%\system32\lltdres.dll,-5              system32\drivers\rspndr.sys             
Automatic    TDI                       n/a*       Dhcp                           @%SystemRoot%\system32\dhcpcore.dll,-100           %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    TDI                       n/a*       Dnscache                       @%SystemRoot%\System32\dnsapi.dll,-101             %SystemRoot%\system32\svchost.exe -k NetworkService -p
Automatic    TDI                       n/a*       DusmSvc                        @%SystemRoot%\System32\dusmsvc.dll,-1              %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    TDI                       n/a*       Wcmsvc                         @%SystemRoot%\System32\wcmsvc.dll,-4097            %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
Automatic    SchedulerGroup            n/a*       Schedule                       @%SystemRoot%\system32\schedsvc.dll,-100           %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    SpoolerGroup              n/a*       Spooler                        @%systemroot%\system32\spoolsv.exe,-1              %SystemRoot%\System32\spoolsv.exe       
Automatic    NetworkProvider           n/a*       BFE                            @%SystemRoot%\system32\bfe.dll,-1001               %systemroot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
Automatic    NetworkProvider           n/a*       LanmanWorkstation              @%systemroot%\system32\wkssvc.dll,-100             %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    NetworkProvider           n/a*       mpssvc                         @%SystemRoot%\system32\FirewallAPI.dll,-23090      %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
Automatic    n/a*                      n/a*       CDPSvc                         @%SystemRoot%\system32\cdpsvc.dll,-100             %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       CDPUserSvc                     @%SystemRoot%\system32\cdpusersvc.dll,-100         %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       CDPUserSvc_43a0b               Connected Devices Platform User Service_43a0b      C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       cexecsvc                       @%systemroot%\system32\cexecsvc.exe,-100           %systemroot%\system32\cexecsvc.exe      
Automatic    n/a*                      n/a*       CoreMessagingRegistrar         @%SystemRoot%\system32\coremessaging.dll,-1        %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork -p
Automatic    n/a*                      n/a*       CryptSvc                       @%SystemRoot%\system32\cryptsvc.dll,-1001          %SystemRoot%\system32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       DiagTrack                      @%SystemRoot%\system32\diagtrack.dll,-3001         %SystemRoot%\System32\svchost.exe -k utcsvc -p
Automatic    n/a*                      n/a*       DispBrokerDesktopSvc           @%SystemRoot%\system32\dispbroker.desktop.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       DoSvc                          @%systemroot%\system32\dosvc.dll,-100              %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       DPS                            @%systemroot%\system32\dps.dll,-500                %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p
Automatic    n/a*                      n/a*       EventSystem                    @comres.dll,-2450                                  %SystemRoot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       gcs                            @%systemroot%\system32\vmcomputeagent.exe,-100     %systemroot%\system32\vmcomputeagent.exe
Automatic    n/a*                      n/a*       IKEEXT                         @%SystemRoot%\system32\ikeext.dll,-501             %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       iphlpsvc                       @%SystemRoot%\system32\iphlpsvc.dll,-500           %SystemRoot%\System32\svchost.exe -k NetSvcs -p
Automatic    n/a*                      n/a*       LanmanServer                   @%systemroot%\system32\srvsvc.dll,-100             %SystemRoot%\system32\svchost.exe -k netsvcs -p
Automatic    NetworkService*           n/a*       MapsBroker                     @%SystemRoot%\System32\moshost.dll,-100            %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       MMCSS                          @%systemroot%\system32\drivers\mmcss.sys,-100      \SystemRoot\system32\drivers\mmcss.sys  
Automatic    n/a*                      n/a*       Ndu                            @%SystemRoot%\system32\drivers\Ndu.sys,-10001      system32\drivers\Ndu.sys                
Automatic    n/a*                      n/a*       NlaSvc                         @%SystemRoot%\System32\nlasvc.dll,-1               %SystemRoot%\System32\svchost.exe -k NetworkService -p
Automatic    n/a*                      n/a*       nsi                            @%SystemRoot%\system32\nsisvc.dll,-200             %systemroot%\system32\svchost.exe -k LocalService -p
Automatic    n/a*                      n/a*       OneSyncSvc                     @%SystemRoot%\system32\APHostRes.dll,-10002        %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       OneSyncSvc_43a0b               Sync Host_43a0b                                    C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       PEAUTH                         PEAUTH                                             system32\drivers\peauth.sys             
Automatic    n/a*                      n/a*       SgrmBroker                     @%SystemRoot%\System32\SgrmBroker.exe,-100         %SystemRoot%\system32\SgrmBroker.exe    
Automatic    n/a*                      n/a*       StorSvc                        @%SystemRoot%\System32\StorSvc.dll,-100            %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    n/a*                      n/a*       SystemEventsBroker             @%windir%\system32\SystemEventsBrokerServer.dll,-1001 %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
Automatic    n/a*                      n/a*       tcpipreg                       TCP/IP Registry Compatibility                      System32\drivers\tcpipreg.sys           
Automatic    n/a*                      n/a*       TrkWks                         @%SystemRoot%\system32\trkwks.dll,-1               %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
Automatic    n/a*                      n/a*       UserManager                    @%systemroot%\system32\usermgr.dll,-100            %SystemRoot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       UsoSvc                         @%systemroot%\system32\usosvc.dll,-101             %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       Winmgmt                        @%Systemroot%\system32\wbem\wmisvc.dll,-205        %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       WpnService                     @%SystemRoot%\system32\wpnservice.dll,-1           %systemroot%\system32\svchost.exe -k netsvcs -p
Automatic    n/a*                      n/a*       WpnUserService                 @%SystemRoot%\system32\WpnUserService.dll,-1       %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       WpnUserService_43a0b           Windows Push Notifications User Service_43a0b      C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Automatic    n/a*                      n/a*       wscsvc                         @%SystemRoot%\System32\wscsvc.dll,-200             %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p

Loaded Modules:

Path
C:\SysinternalsSuite\LoadOrdC64.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 330000010A2C79AED7797BA6AC00010000010A
  • Thumbprint: 3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC
  • Issuer: CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Loadord
  • Product Name: Sysinternals Loadord
  • Company Name: Sysinternals - www.sysinternals.com
  • File Version: 1.01
  • Product Version: 1.01
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 1998-2016 Mark Russinovich
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/49b4e386e6c047745a67d5076d841eac21ffc4bf7602a9a4f1f5124c149eefa5/detection/

Possible Misuse

The following table contains possible examples of LoadOrdC64.exe being misused. While LoadOrdC64.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_false_sysinternalsuite.yml - '\loadOrdC64.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.