home

kbdflip.sys

Keyboard layout flipper

Muzychenko Evgenii Viktorovich

It runs as a Windows 64-bit kernel mode device driver named “EuMusDesign_KeyboardLayoutFlipper”.
Publisher:
Eugene V. Muzychenko  (signed by Muzychenko Evgenii Viktorovich)

Product:
Keyboard layout flipper

Description:
Kernel-mode Layout

Version:
1.9.2.986

MD5:
25f4f5263e082cb36e43b50a74d309c9

SHA-1:
befbd279bb545f41ef00f415b9cfc4f165fa6109

SHA-256:
97d774ce679c8d471b7a86976df59019edf245e353c9ea53c0756d98289d543a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:41:19 PM UTC  (today)

File size:
19.7 KB (20,136 bytes)

Product version:
1.9.2.1058

Copyright:
Copyright (C) 2002-2014 Eugene V. Muzychenko

Original file name:
kbdflip.sys

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\kbdflip.sys

Digital Signature
Signed by:
Muzychenko Evgenii Viktorovich

Authority:
GlobalSign nv-sa

Valid from:
5/17/2013 2:32:18 PM

Valid to:
5/17/2016 2:32:18 PM

Subject:
CN=Muzychenko Evgenii Viktorovich, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216AB7186B1912D9356038C613BC28924A

File PE Metadata
Compilation timestamp:
6/7/2014 12:02:45 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

Entry address:
0x2908

Entry point:
48, 89, 5C, 24, 08, 57, 48, 81, EC, 50, 01, 00, 00, 48, 8B, D9, B1, 4B, 48, 8B, FA, E8, 5E, F4, FF, FF, 44, 0F, B7, 07, 4C, 8B, 4F, 08, 48, 8D, 15, 43, F9, FF, FF, 48, 8D, 4C, 24, 40, FF, 15, C4, F6, FF, FF, BF, 01, 00, 00, C0, 48, 89, 1D, 30, FD, FF, FF, E8, 23, F3, FF, FF, 84, C0, 0F, 84, 92, 00, 00, 00, 48, 8D, 05, 44, E0, FF, FF, 48, 8D, 7B, 70, B9, 1C, 00, 00, 00, 48, 89, 43, 68, 48, 8D, 05, 34, DD, FF, FF, F3, 48, AB, 48, 8D, 05, 6A, DE, FF, FF, 48, 8D, 4C, 24, 40, 48, 89, 83, 20, 01, 00, 00, 48, 8D...
 
[+]

Code size:
8.6 KB (8,832 bytes)

Driver
Display name:
EuMusDesign_KeyboardLayoutFlipper

Service name:
kbdflip

Type:
Kernel device driver (KernelDriver)

Group:
Keyboard Class


Scan kbdflip.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.