msspellcheckingfacility.exe

Microsoft Spell Checking Facility

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Microsoft Spell Checking Facility

 
Part of the Windows Operating System

Version:
6.3.9600.16428 (winblue_gdr.131013-1700)

MD5:
1a2d2e3cb745ff7f3f7b50e04d775cfa

SHA-1:
c1cc9a05dd61f81107913bedb21e78253c63526c

SHA-256:
6cd123488659f202d4b1ddbb9ae93e76be5f474b41f8b7e2448070110fac9297

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/6/2016 5:03:45 PM UTC  (today)

File size:
631 KB (646,144 bytes)

Product version:
6.3.9600.16428

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MsSpellCheckingFacilitydl.exe.mui

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\msspellcheckingfacility.exe

File PE Metadata
Compilation timestamp:
5/30/2014 4:21:36 AM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:36JeY+0rDuymf9ON0yOVzFonRRzxFVJN0vIafxRTSuwRI6x0/hbSvaZtbMPk6sAO:36YuDNm4N0/wRRzxFVJN0vIafxRTSuwe

Entry address:
0x7AEA9

Entry point:
E8, 8A, 0C, 00, 00, E9, 06, 00, 00, 00, CC, CC, CC, CC, CC, CC, 6A, 58, 68, 20, BF, 48, 00, E8, 5B, 07, 00, 00, 33, DB, 89, 5D, E0, 89, 5D, FC, 8D, 45, 98, 50, FF, 15, DC, 00, 49, 00, C7, 45, FC, FE, FF, FF, FF, C7, 45, FC, 01, 00, 00, 00, 64, A1, 18, 00, 00, 00, 8B, 78, 04, 8B, F3, BA, 84, F8, 48, 00, 8B, CF, 33, C0, F0, 0F, B1, 0A, 85, C0, 74, 07, 3B, C7, 75, 16, 33, F6, 46, 83, 3D, 88, F8, 48, 00, 01, 75, 17, 6A, 1F, E8, BA, 0A, 00, 00, 59, EB, 43, 68, E8, 03, 00, 00, FF, 15, 5C, 01, 49, 00, EB, C8, 39...
 
[+]

Entropy:
6.4372

Code size:
557.5 KB (570,880 bytes)