MsSpellCheckingFacility.dll
Microsoft Spell Checking Facility file version info
Library on Windows 2 known copies with hashes
Is it the real MsSpellCheckingFacility.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Spell Checking Facility
2 known copies
10.0.19041.329 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MsSpellCheckingFacility.dll · signed by Microsoft Windows
10b38f24ac1d3bca03a35d9b908be4c775c258e5b0b8ca08e507acb0620e329b10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\MsSpellCheckingFacility.dll · signed by Microsoft Windows
68df43f30b1670f99c7a8041667521ced1024407213cd1c95086299708ece9ddFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.