CmdID / Files

KBDHELA2.DLL

Greek IBM 220 Latin Keyboard Layout file version info

Library on Windows 2 known copies with hashes

Is it the real KBDHELA2.DLL?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionGreek IBM 220 Latin Keyboard Layout

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\KBDHELA2.DLL · signed by Microsoft Windows

9e6b7351f52fa20f51834d74bf3a356176ebafc28da5471cd5a6faafc68762b1

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\KBDHELA2.DLL · signed by Microsoft Windows

fc2ef164b6242a4f8c78089021a0ba6f16ae0926d46df7e5c368237a7e85fcea

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.