ntoskrnl.exe
E707758
ntoskrnl.exe is the core Windows NT operating system kernel executable responsible for low-level system functions such as process and memory management.
All labels observed (3)
| Label | Occurrences |
|---|---|
| Windows NT kernel | 6 |
| Windows kernel | 4 |
| ntoskrnl.exe canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T8022573 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: ntoskrnl.exe Context triple: [NTLDR, requiresFile, ntoskrnl.exe]
-
A.
Kernel32
Kernel32 is a core Windows system library that provides fundamental kernel-level functions for process, memory, and thread management in the Win32 API.
-
B.
KERNAL
KERNAL is the low-level operating system and I/O firmware of Commodore 8-bit computers, providing core routines for hardware access and system services.
-
C.
Windows Driver Model
Windows Driver Model is Microsoft’s unified framework for developing and managing device drivers across different versions of the Windows operating system.
-
D.
Windows NT
Windows NT is a family of Microsoft operating systems designed with a robust, secure, and modular architecture for professional and enterprise use.
-
E.
NTLDR
NTLDR is the legacy boot loader used by early versions of Microsoft Windows NT-based operating systems to start the system during the boot process.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: ntoskrnl.exe Target entity description: ntoskrnl.exe is the core Windows NT operating system kernel executable responsible for low-level system functions such as process and memory management.
-
A.
Kernel32
Kernel32 is a core Windows system library that provides fundamental kernel-level functions for process, memory, and thread management in the Win32 API.
-
B.
KERNAL
KERNAL is the low-level operating system and I/O firmware of Commodore 8-bit computers, providing core routines for hardware access and system services.
-
C.
Windows Driver Model
Windows Driver Model is Microsoft’s unified framework for developing and managing device drivers across different versions of the Windows operating system.
-
D.
Windows NT
Windows NT is a family of Microsoft operating systems designed with a robust, secure, and modular architecture for professional and enterprise use.
-
E.
NTLDR
NTLDR is the legacy boot loader used by early versions of Microsoft Windows NT-based operating systems to start the system during the boot process.
- F. None of above. chosen
Statements (50)
| Predicate | Object |
|---|---|
| instanceOf |
Windows kernel executable
ⓘ
operating system kernel ⓘ system process ⓘ |
| architectureSupport |
ARM
ⓘ
x86 ⓘ x86-64 ⓘ |
| canCause | Blue Screen of Death ⓘ |
| contains |
I/O manager
ⓘ
cache manager ⓘ memory manager ⓘ object manager ⓘ plug and play manager ⓘ power manager ⓘ scheduler ⓘ security reference monitor ⓘ |
| developedBy | Microsoft ⓘ |
| fileExtension | .exe ⓘ |
| fileType | executable file ⓘ |
| implements |
Windows NT kernel
ⓘ
linked to:
ntoskrnl.exe
|
| introducedIn |
Windows NT 3.1
ⓘ
linked to:
Windows NT
|
| language |
C
ⓘ
C++ ⓘ |
| license | proprietary software license ⓘ |
| locatedInDefaultPath | C:\Windows\System32 ⓘ |
| operatingSystemFamily | Windows NT ⓘ |
| partOf |
Microsoft Windows
ⓘ
linked to:
Windows
Windows NT operating system ⓘ
linked to:
Windows NT
|
| relatedTo |
HAL.dll
ⓘ
win32k.sys ⓘ |
| responsibleFor |
I/O management
ⓘ
crash dump generation ⓘ hardware abstraction ⓘ interrupt handling ⓘ kernel-mode drivers coordination ⓘ memory management ⓘ page file management ⓘ power management ⓘ process management ⓘ system call handling ⓘ thread scheduling ⓘ virtual memory management ⓘ |
| runsInMode | kernel mode ⓘ |
| usedIn |
Windows 10
ⓘ
Windows 11 ⓘ Windows 2000 ⓘ Windows 7 ⓘ Windows 8 ⓘ Windows 8.1 ⓘ Windows Vista ⓘ Windows XP ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: ntoskrnl.exe Description of subject: ntoskrnl.exe is the core Windows NT operating system kernel executable responsible for low-level system functions such as process and memory management.
Referenced by (11)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe
subject linked to:
Neptune (cancelled consumer NT project)
linked to: ntoskrnl.exe
linked to: ntoskrnl.exe