It loads off the UEFI, or if your device is older, it will find other ways to get in to load as early as possible. It's nasty and proliferous. VLC and WinRAR were vectors, so... basically everyone has it.