ntkrnlpa.exe

Sistema operacional Microsoft Windows

Microsoft Corporation

This is the image for the Windows NT Kernel with Physical Address Extension support and provides the kernel and executive layers responsible for various system services such as hardware virtualization, process and memory management. This is the Brazilian Portuguese version with compatable localized resources. It is included with Windows XP (SP2).
Publisher:
Microsoft Corporation

Product:
Sistema operacional Microsoft® Windows®

Description:
Núcleo e sistema do NT

 
Part of the Windows XP (Service Pack 2) Operating System

Version:
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)

MD5:
31dfe96b6b6fa4c9ca098ceaf21b29a5

SHA-1:
3630aba1bbe28914e0d0f3c005177d34f1e33009

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/5/2016 9:37:06 AM UTC  (today)

File size:
1.9 MB (2,019,328 bytes)

Product version:
5.1.2600.2180

Copyright:
© Microsoft Corporation. Todos os direitos reservados.

Original file name:
ntkrpamp.exe

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\Windows\System32\ntkrnlpa.exe

File PE Metadata
Compilation timestamp:
8/4/2004 2:58:37 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
24576:bU0JiJFJeVofZPcfFJeefWH7mIFGWd7BDsR8ye14wan65Onv7Lb62Kb9nNrvrEQR:bWJ6K6cFD7gnv7v6pF9mzTFVMw

Entry address:
0x1C8C04

Entry point:
55, 8B, EC, 83, EC, 20, 8B, 5D, 08, 89, 1D, 5C, DA, 47, 00, 0F, B6, 0D, 60, DA, 47, 00, 89, 4D, E8, 0B, C9, 75, 19, C7, 43, 24, 40, 3E, 48, 00, C7, 43, 18, 00, 97, 47, 00, 6A, 30, 0F, A1, 64, 88, 0D, 30, 01, 00, 00, 8B, 43, 24, 89, 45, E0, 8B, 43, 18, 89, 45, E4, E8, 37, 0C, 00, 00, 80, 7D, E8, 00, 0F, 85, 9F, 01, 00, 00, E8, EA, 42, EA, FF, 89, 7D, FC, 89, 75, F8, 89, 55, F4, 89, 45, F0, 8D, 4F, 28, C6, 41, 05, 89, 51, FF, 75, F4, E8, 36, 12, 00, 00, FF, 75, F4, E8, 56, 0A, E6, FF, 66, B9, 28, 00, 0F, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.6 MB (1,707,008 bytes)