ntkd.exe
- File Path:
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\ntkd.exe
- Description: Windows Kernel Debugger
Screenshot
Hashes
Type | Hash |
---|---|
MD5 | F468EEBF04739821C2B5C322754FA720 |
SHA1 | C0EE553F309CD58F57BAB1D6EB3FAF712E89252C |
SHA256 | 482CA0A7CD1BDAF795458B9CD679093CB452FCAACC6C39C2FC9C0C5E96436A0D |
SHA384 | 064AD9BECA77BFDDBD0B9C889CFCA6C13D6A289521819D70208D9D818370E8DDBD00884AF9DAAAEE4995B254E6E1ECCE |
SHA512 | 95C31D06A3C51A56382E29CB4F92F60A6D872FC05CA5A63FA3E94A66E674C984050C198BECB7A494F2073F89706D76846B9C845B851B0F56405B674AC59D110C |
SSDEEP | 3072:2FL+W5FnbMBmoWATua6x6UdsL+E5Ar3bjfFJp5XLoXI:2FLaUdfE5ATdJp5XCI |
IMP | 4D6BE4ADCC3CB3D94424E05C6905099E |
PESHA1 | 3363468B0E717B65D0B9AFE281D324E469B30EFD |
PE256 | 618B4519D8E68C5F6A2B8302E9E14C67F003AFEA1541A4AD32E8243023D834B4 |
Signature
- Status: Signature verified.
- Serial:
33000002B7E8E007A82AEF13150000000002B7
- Thumbprint:
5A68625F1A516670A744F7EF919500A479D32A5B
- Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows Kits Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: ntkd.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 452
File Scan
- VirusTotal Detections: Unknown
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.