vdsldr.exe

by Microsoft
Operating System

Summary

Virtual Disk Service Loader - loads VDS providers for disk management operations.

vdsldr.exe is the 169th most commonly executed Windows program in EchoTrail's dataset, observed 95,649 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.

169th
most commonly executed Windows program
95,649
observed executions
medium
statistical confidence

Behavior

Top Paths

  • C:\Windows\System3299.99%
  • C:\Windows\WinSxS\amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.3.9600.17415_none_5bf5cd86ce6c0f350.01%

Top Hashes (SHA256)

  • 43f0af018dc498619222cf16e1c9bde2f7710732686dc361e4d692b7efb4ddf929.97%
  • 5a810630cd80776c18530c14e5002a60e934a8505fb1a1ac9a753c944e71c82722.19%
  • da5e0acb7ef7d6dcb11507da9c8fe224ef76a57a27caf84afa679fb9e1408ec817.63%
  • a471f9588d2b95334f0107711f84ed0081db27bb8799e6c48710a667a37e1a907.27%
  • ca51bec400924928e2a5946ff3af89f26b3bb4c3f0087fce45903af290ea16b76.86%
  • 0a4ca31848d7513f97f72d0292f5bbee1ca409aaffcacde5369e12003b34118d3.39%
  • e86f443622119bbdc0947257e1e826d47488c86bdf399d3839384e32e0c477042.6%
  • ddc920acfdb76dd6dfdc0cae7714c1d2995fd6042d1fc2efb1cc1df9478fa26f2.33%
  • f7fcc64885eb53ca11b79d1e55bbb646e8132df3f2791d8fe158cb8dc83e15d22.01%
  • f417f52b06f41b96e135758380e28d74c150828e046a47b9e94098f1b55ef88b1.53%

Process Ancestry

Top Grandparents

Top Parents

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about vdsldr.exe

Rocky answers questions about vdsldr.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.