1: kd> lm vm nt
Browse full module list
start end module name
fffff804`75600000 fffff804`76647000 nt (export symbols) ntkrnlmp.exe
Loaded symbol image file: ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 18DAD452 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00A2EBEB
ImageSize: 01047000
File version: 10.0.18965.1005
Product version: 10.0.18965.1005
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.18965.1005
FileVersion: 10.0.18965.1005 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
C:\Users\Administrator>"C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\symchk.exe" C:\Users\Administrator\Desktop\ntoskrnl.exe /s SRV*d:\symbols\*http://msdl.microsoft.com/download/symbols
SYMCHK: ntoskrnl.exe FAILED - ntkrnlmp.pdb mismatched or not found
SYMCHK: FAILED files = 1
SYMCHK: PASSED + IGNORED files = 0
https://correy.webs.com
