What is the "ntdll.dll" ?

Our database contains 25477 different files for filename ntdll.dll . You can also check most distributed file variants with name ntdll.dll. This files most often belongs to product Microsoft® Windows® Operating System. and were most often developed by company Microsoft Corporation. This files most often have description NT Layer DLL. Agregate rating is 5(5) stars - based on 5 reviews.This file is Dynamic-link Library. This library can be loaded and executed in any running process.

ntdll.dll Library

File details of most used file with name "ntdll.dll"

Product:
Microsoft® Windows® Operating System
Company:
Microsoft Corporation
Description:
NT Layer DLL
Version:
6.1.7601.17725
MD5:
cf95b85ff8d128385abd411c8ca74ded
SHA1:
2c64101048761d497681f0200574b4f30fc5b208
SHA256:
406cf5c07f75bc976b2f82d1e1166d255c5149b9ef57c2dea2c8348df231211f
Size:
1731920
Directory:
C:\Windows\System32
Operating System:
Windows 7
Occurence:
High oc2
Digital Signature:
Microsoft Windows

Is the library "ntdll.dll" Safe or Threat ?

Loading Graph
100% of reviewed files are marked as Safe .
100% of reviewed files are marked as System file.
Latest new variant of the file with name "ntdll.dll" was discovered 4277 days ago. Our database contains 396 variants of the file "ntdll.dll" with final rating Safe and zero variants with final rating Threat . Final ratings are based on file reviews, discovered date, users occurence and antivirus scan results.

User Reviews of the "ntdll.dll"

There are multiple files in compliance with actual filter settings. All reviews for this files will be displayed.

Reviews for all files with name "ntdll.dll"

  • SAFErating from user MikeOne for file C:\Windows\System32\ntdll.dll (Variant: 503007)

    Windows NT operating system is a layered architecture with the ntoskrnl.exe process and the hal.dll module on the bottom layer. The next layer up contains two of its most important files, the system win32k.sys and the module ntdll.dll. The DLL ntdll.dll is primarily concerned with system tasks. It includes a number of kernel-mode functions which implements much of the functionality of the Windows Application Programming Interface (API). However, the module ntdll.dll does not handle any of the graphical components of the system. Instead, it is responsible for functions like File I/O, timing, messages, threading and synchronization, etc. More info can be found on http://dll.paretologic.com/detail.php/ntdll

  • SAFErating from user thienmt for file C:\Windows\System32\ntdll.dll

  • SAFErating from user Don for file C:\Windows\System32\ntdll.dll

  • SAFErating from user kajmik for file C:\Windows\SysWOW64\ntdll.dll (Variant: 503263)

    A part of Windows 7 64bit.

  • SAFErating from user Don't PlaY for file C:\Windows\SysWOW64\ntdll.dll (Variant: 503263)

    The ntdll.dll file is a file created by Microsoft that has a description of "NT Layer DLL" and is the file that contains NT kernel functions.