CmdID / Files

KBDBLR.DLL

Belarusian Keyboard Layout file version info

Library on Windows 2 known copies with hashes

Is it the real KBDBLR.DLL?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionBelarusian Keyboard Layout

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\KBDBLR.DLL · signed by Microsoft Windows

2a92f80ff3bba6b3fdc1f7350812ee02b863f335819330f2537d5b7f2e9de087

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\KBDBLR.DLL · signed by Microsoft Windows

efb1fd35525acb9375d008def560605993b9b692baa6b4b57ce4ba1129ea53c0

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.