CmdID / Files

KBDA2.DLL

Arabic_2 Keyboard Layout file version info

Library on Windows 2 known copies with hashes

Is it the real KBDA2.DLL?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionArabic_2 Keyboard Layout

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\KBDA2.DLL · signed by Microsoft Windows

ba86bf23a8b6fbaa94749d572d9df0c1e8bbe50f709b8179b52f8fdffdb5429d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\KBDA2.DLL · signed by Microsoft Windows

e5dca582b2784ff4b90e6992b481c4ca9a6a019d3e4d271161b63391ee6e1bce

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.