lodctr.exe

  • File Path: C:\WINDOWS\SysWOW64\lodctr.exe
  • Description: Load PerfMon Counters

Hashes

Type Hash
MD5 CF8FC7C3E40105C13B6294418D1CB670
SHA1 4DAABE128CF5BDE34C4187927288274D3C87109A
SHA256 8F2A9CDA849446E9312441429F26FC6A13C2428E512EE84C58FB837D2BE8065F
SHA384 D870B3BE21A1A6A704FEEECFCEA186415BF6DDB4B3F2E3F89546C777AC6935F3233C616071F44883A47D9F33EC07C73A
SHA512 26AE574F982703CCD587EECC329FB7C77A53560A9C4A4CD65AEC82BFEFD2AFEE767E3A59E528883067D9E95CF717A79F022903D3A90510B180BEBD67CEE8336D
SSDEEP 768:tJ3ZlM8ZiyQE48ejycQTHoAug/NkSAjdA8VoczAtJuHygYnHuw7XJ:9lM8oyQEVImHoAugCSAjVVBHkHuw7XJ

Runtime Data

Usage (stdout):


 
LODCTR 
       Updates registry values related to performance counters. 
Usage: 
       LODCTR <INI-filename> 
             Installs counter text strings. INI-filename is the name of the 
             initialization file that contains the counter name definitions 
             and explain text for an extensible counter DLL.

       LODCTR /C:<filename> 
             Upgrades counter text strings using <filename>

       LODCTR /H:<filename> 
             Upgrades help text strings using <filename>

       LODCTR /L:<LangID> 
             Specifies the language for the /C and /H commands

       LODCTR /S:<Backup-filename> 
             Saves the current perf registry strings and info to 
             <Backup-filename>

       LODCTR /R 
             Rebuilds perf registry from scratch based on current registry 
             settings and backup INI files.

       LODCTR /R:<filename> 
             Restores perf registry strings & info using <filename>

       LODCTR /T:<service-name> 
             Sets the specified performance counter provider as trusted.

       LODCTR /Q 
             Displays performance counter provider information.

       LODCTR /Q:<service-name> 
             Displays performance counter provider information for a 
             specific provider.

       LODCTR /E:<service-name> 
             Enables the performance counter provider.

       LODCTR /D:<service-name> 
             Disables the performance counter provider.

       LODCTR /M:<Counter-Manifest> [<Installation-Path>]
             Installs a v2.0 performance counter provider using the specified 
             XML manifest. 

             The installation requires a full path to the DLL containing the 
             performance counter resources (localized  strings). The path 
             to the DLL will be determined as follows:

             If the applicationIdentity attribute in the manifest is a full 
             path, that will be used.

             Otherwise, if <Installation-Path> is provided and is a full 
             path, that will be used.

             Otherwise, if <Counter-Manifest> is a full path, the directory 
             from <Counter-Manifest> will be combined with the DLL name from 
             the applicationIdentity attribute in the manifest.

             Otherwise, the current directory will be combined with the DLL 
             name from the applicationIdentity attribute in the manifest.

Note: Any arguments with spaces in the names must be enclosed within double 
quotation marks.

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: LODCTR.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\lodctr.exe 35

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


lodctr

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Allows you to register or save performance counter name and registry settings in a file and designate trusted services.

Syntax

lodctr <filename> [/s:<filename>] [/r:<filename>] [/t:<servicename>]

Parameters

Parameter Description
<filename> Specifies the name of the initialization file that registers the performance counter name settings and explanatory text.
/s:<filename> Specifies the name of the file to which the performance counter registry settings and explanatory text are saved.
/r Restores counter registry settings and explanatory text from current registry settings and cached performance files related to the registry.
/r:<filename> Specifies the name of the file that restores the performance counter registry settings and explanatory text.<p>Warning: If you use this command, you’ll overwrite all performance counter registry settings and explanatory text, replacing them with the configuration defined in the specified file.
/t:<servicename> Indicates that service <servicename> is trusted.
/? Displays help at the command prompt.
Remarks
  • If the information that you supply contains spaces, use quotation marks around the text (for example, “file name 1”).

Examples

To save the current performance registry settings and explanatory text to file “perf backup1.txt”, type:

lodctr /s:"perf backup1.txt"

Additional References


MIT License. Copyright (c) 2020-2021 Strontic.