MsSpellCheckingFacility.dll

Description: Microsoft Spell Checking Facility

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: aee63a03e4eca43fde954f399cf5b64d

File Size: 918.0 KB

Uploaded At: Dec. 1, 2025, 7:34 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x18030)
DllGetActivationFactory (Ordinal: 2, Address: 0x18070)
DllGetClassObject (Ordinal: 3, Address: 0x180b0)
DllRegisterServer (Ordinal: 4, Address: 0x18110)
DllUnregisterServer (Ordinal: 5, Address: 0x18170)
SpellerCheck (Ordinal: 6, Address: 0x508e0)
SpellerCloseLex (Ordinal: 7, Address: 0x50d40)
SpellerGetOptions (Ordinal: 8, Address: 0x512e0)
SpellerInit (Ordinal: 9, Address: 0x516b0)
SpellerOpenLex (Ordinal: 10, Address: 0x51770)
SpellerSetOptions (Ordinal: 11, Address: 0x51ef0)
SpellerTerminate (Ordinal: 12, Address: 0x521e0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x1800a2838)
CoCancelCall (Address: 0x1800a2808)
CoCreateInstance (Address: 0x1800a27f8)
CoDisableCallCancellation (Address: 0x1800a2830)
CoEnableCallCancellation (Address: 0x1800a27f0)
CoImpersonateClient (Address: 0x1800a2800)
CoRevertToSelf (Address: 0x1800a2810)
CoTaskMemAlloc (Address: 0x1800a2820)
CoTaskMemFree (Address: 0x1800a2818)
CoTaskMemRealloc (Address: 0x1800a2828)
StringFromGUID2 (Address: 0x1800a27e8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800a2858)
IsDebuggerPresent (Address: 0x1800a2860)
OutputDebugStringA (Address: 0x1800a2848)
OutputDebugStringW (Address: 0x1800a2850)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800a2870)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800a2880)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800a2898)
RaiseException (Address: 0x1800a28b0)
SetLastError (Address: 0x1800a28a8)
SetUnhandledExceptionFilter (Address: 0x1800a28a0)
UnhandledExceptionFilter (Address: 0x1800a2890)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x1800a2938)
CreateFileW (Address: 0x1800a2930)
FindClose (Address: 0x1800a28d0)
FindFirstChangeNotificationW (Address: 0x1800a2948)
FindFirstFileExW (Address: 0x1800a28d8)
FindNextChangeNotification (Address: 0x1800a2940)
FindNextFileW (Address: 0x1800a28f8)
FlushFileBuffers (Address: 0x1800a2950)
GetDriveTypeW (Address: 0x1800a28e0)
GetFileAttributesW (Address: 0x1800a2908)
GetFileSize (Address: 0x1800a2910)
GetFileSizeEx (Address: 0x1800a28c0)
GetFileTime (Address: 0x1800a28c8)
LockFile (Address: 0x1800a2920)
ReadFile (Address: 0x1800a28f0)
SetEndOfFile (Address: 0x1800a2900)
SetFilePointer (Address: 0x1800a28e8)
SetFilePointerEx (Address: 0x1800a2918)
SetFileTime (Address: 0x1800a2958)
UnlockFile (Address: 0x1800a2960)
WriteFile (Address: 0x1800a2928)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800a2970)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800a2980)
HeapAlloc (Address: 0x1800a2988)
HeapFree (Address: 0x1800a2990)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1800a29a0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MoveFileW (Address: 0x1800a29b0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800a2a20)
FindResourceExW (Address: 0x1800a29f0)
FreeLibrary (Address: 0x1800a29e8)
GetModuleFileNameA (Address: 0x1800a29c8)
GetModuleFileNameW (Address: 0x1800a29c0)
GetModuleHandleExW (Address: 0x1800a2a18)
GetModuleHandleW (Address: 0x1800a2a00)
GetProcAddress (Address: 0x1800a2a08)
LoadLibraryExW (Address: 0x1800a29d0)
LoadResource (Address: 0x1800a29f8)
LoadStringW (Address: 0x1800a29d8)
LockResource (Address: 0x1800a29e0)
SizeofResource (Address: 0x1800a2a10)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x1800a2a30)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800a2a48)
GetThreadLocale (Address: 0x1800a2a50)
SetThreadLocale (Address: 0x1800a2a40)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1800a2a60)
MapViewOfFile (Address: 0x1800a2a70)
OpenFileMappingW (Address: 0x1800a2a78)
UnmapViewOfFile (Address: 0x1800a2a68)

api-ms-win-core-normalization-l1-1-0.dll

NormalizeString (Address: 0x1800a2a88)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1800a2ab0)
CreateThread (Address: 0x1800a2ae8)
DeleteProcThreadAttributeList (Address: 0x1800a2aa8)
GetCurrentProcess (Address: 0x1800a2a98)
GetCurrentProcessId (Address: 0x1800a2ae0)
GetCurrentThread (Address: 0x1800a2ad8)
GetCurrentThreadId (Address: 0x1800a2aa0)
InitializeProcThreadAttributeList (Address: 0x1800a2ad0)
OpenProcessToken (Address: 0x1800a2ac8)
OpenThreadToken (Address: 0x1800a2af0)
TerminateProcess (Address: 0x1800a2ac0)
UpdateProcThreadAttribute (Address: 0x1800a2ab8)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800a2b00)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800a2b10)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800a2b58)
RegCreateKeyExW (Address: 0x1800a2b28)
RegDeleteValueW (Address: 0x1800a2b38)
RegEnumKeyExW (Address: 0x1800a2b20)
RegEnumValueW (Address: 0x1800a2b68)
RegGetValueW (Address: 0x1800a2b70)
RegNotifyChangeKeyValue (Address: 0x1800a2b78)
RegOpenKeyExA (Address: 0x1800a2b48)
RegOpenKeyExW (Address: 0x1800a2b80)
RegQueryInfoKeyW (Address: 0x1800a2b30)
RegQueryValueExA (Address: 0x1800a2b40)
RegQueryValueExW (Address: 0x1800a2b50)
RegSetValueExW (Address: 0x1800a2b60)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800a2ba0)
RtlLookupFunctionEntry (Address: 0x1800a2b90)
RtlVirtualUnwind (Address: 0x1800a2b98)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathAppendW (Address: 0x1800a2bc0)
PathCombineW (Address: 0x1800a2be0)
PathFileExistsW (Address: 0x1800a2bb0)
PathFindNextComponentW (Address: 0x1800a2bb8)
PathGetDriveNumberW (Address: 0x1800a2bd0)
PathIsPrefixW (Address: 0x1800a2be8)
PathIsUNCW (Address: 0x1800a2bc8)
PathStripPathW (Address: 0x1800a2bd8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800a2c00)
CompareStringW (Address: 0x1800a2c10)
GetStringTypeW (Address: 0x1800a2bf8)
MultiByteToWideChar (Address: 0x1800a2c18)
WideCharToMultiByte (Address: 0x1800a2c08)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1800a2c30)
CharUpperW (Address: 0x1800a2c28)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1800a2c40)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800a2c58)
AcquireSRWLockShared (Address: 0x1800a2cc0)
CreateEventW (Address: 0x1800a2cb8)
CreateMutexExW (Address: 0x1800a2c68)
CreateMutexW (Address: 0x1800a2ca8)
CreateSemaphoreExW (Address: 0x1800a2c70)
DeleteCriticalSection (Address: 0x1800a2ce0)
EnterCriticalSection (Address: 0x1800a2cd8)
InitializeCriticalSection (Address: 0x1800a2cf0)
InitializeCriticalSectionAndSpinCount (Address: 0x1800a2c98)
InitializeCriticalSectionEx (Address: 0x1800a2ce8)
InitializeSRWLock (Address: 0x1800a2c60)
LeaveCriticalSection (Address: 0x1800a2cd0)
OpenSemaphoreW (Address: 0x1800a2c88)
ReleaseMutex (Address: 0x1800a2ca0)
ReleaseSemaphore (Address: 0x1800a2c78)
ReleaseSRWLockExclusive (Address: 0x1800a2cc8)
ReleaseSRWLockShared (Address: 0x1800a2c90)
SetEvent (Address: 0x1800a2d00)
SleepEx (Address: 0x1800a2c80)
WaitForMultipleObjectsEx (Address: 0x1800a2c50)
WaitForSingleObject (Address: 0x1800a2cb0)
WaitForSingleObjectEx (Address: 0x1800a2cf8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800a2d10)
InitOnceComplete (Address: 0x1800a2d20)
InitOnceExecuteOnce (Address: 0x1800a2d28)
Sleep (Address: 0x1800a2d18)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1800a2d38)
GetSystemTime (Address: 0x1800a2d60)
GetSystemTimeAsFileTime (Address: 0x1800a2d48)
GetSystemWindowsDirectoryW (Address: 0x1800a2d40)
GetTickCount (Address: 0x1800a2d50)
GetVersionExW (Address: 0x1800a2d58)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800a2d80)
CreateThreadpoolTimer (Address: 0x1800a2d88)
SetThreadpoolTimer (Address: 0x1800a2d70)
WaitForThreadpoolTimerCallbacks (Address: 0x1800a2d78)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x1800a2d98)
DeleteTimerQueueTimer (Address: 0x1800a2da0)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x1800a2db0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800a2dc8)
EncodePointer (Address: 0x1800a2dc0)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x1800a2dd8)
RoOriginateErrorW (Address: 0x1800a2de0)
RoTransformError (Address: 0x1800a2de8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x1800a2df8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1800a2e08)
WindowsCreateStringReference (Address: 0x1800a2e10)
WindowsDeleteString (Address: 0x1800a2e30)
WindowsGetStringRawBuffer (Address: 0x1800a2e28)
WindowsIsStringEmpty (Address: 0x1800a2e18)
WindowsStringHasEmbeddedNull (Address: 0x1800a2e20)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800a2e58)
EventSetInformation (Address: 0x1800a2e40)
EventUnregister (Address: 0x1800a2e50)
EventWriteTransfer (Address: 0x1800a2e48)

api-ms-win-security-base-l1-1-0.dll

FreeSid (Address: 0x1800a2e70)
GetTokenInformation (Address: 0x1800a2e78)
ImpersonateLoggedOnUser (Address: 0x1800a2e80)
RevertToSelf (Address: 0x1800a2e68)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800a2e90)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800a2e98)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolQueueTask (Address: 0x1800a2ea8)

Bcp47Langs.dll

Bcp47GetDistance (Address: 0x1800a2740)
GetUserLanguages (Address: 0x1800a2748)

CoreMessaging.dll

CoreUICreate (Address: 0x1800a2758)

CoreUIComponents.dll

CoreUIFactoryCreate (Address: 0x1800a2768)

msvcrt.dll

___lc_codepage_func (Address: 0x1800a2ed8)
___lc_collate_cp_func (Address: 0x1800a2ef0)
___lc_handle_func (Address: 0x1800a2f38)
___mb_cur_max_func (Address: 0x1800a2ed0)
__C_specific_handler (Address: 0x1800a3030)
__crtCompareStringW (Address: 0x1800a2f58)
__crtLCMapStringW (Address: 0x1800a2f48)
__CxxFrameHandler3 (Address: 0x1800a30a8)
__dllonexit (Address: 0x1800a3010)
__pctype_func (Address: 0x1800a2ee0)
_amsg_exit (Address: 0x1800a2fa8)
_callnewh (Address: 0x1800a2f30)
_CxxThrowException (Address: 0x1800a2f28)
_errno (Address: 0x1800a2f00)
_initterm (Address: 0x1800a3070)
_isctype (Address: 0x1800a30b0)
_ismbblead (Address: 0x1800a2ec8)
_lock (Address: 0x1800a2f10)
_onexit (Address: 0x1800a2fb0)
_purecall (Address: 0x1800a3038)
_resetstkoflw (Address: 0x1800a2f78)
_unlock (Address: 0x1800a2fb8)
_vsnprintf_s (Address: 0x1800a3050)
_vsnwprintf (Address: 0x1800a3098)
_wcsdup (Address: 0x1800a2f60)
_wfopen_s (Address: 0x1800a3028)
_wsetlocale (Address: 0x1800a2f40)
_XcptFilter (Address: 0x1800a3008)
??_V@YAXPEAX@Z (Address: 0x1800a30a0)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800a2fe0)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800a2fe8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800a2ff0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800a3078)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800a3068)
??0exception@@QEAA@XZ (Address: 0x1800a3060)
??1bad_cast@@UEAA@XZ (Address: 0x1800a2fd8)
??1exception@@UEAA@XZ (Address: 0x1800a3080)
??1type_info@@UEAA@XZ (Address: 0x1800a2ef8)
??3@YAXPEAX@Z (Address: 0x1800a2eb8)
?terminate@@YAXXZ (Address: 0x1800a3058)
?what@exception@@UEBAPEBDXZ (Address: 0x1800a3048)
abort (Address: 0x1800a2ec0)
calloc (Address: 0x1800a2f70)
fclose (Address: 0x1800a3020)
fread (Address: 0x1800a2f80)
free (Address: 0x1800a3000)
fseek (Address: 0x1800a2fc8)
ftell (Address: 0x1800a2fa0)
iswupper (Address: 0x1800a2f90)
malloc (Address: 0x1800a2f68)
memcmp (Address: 0x1800a2ee8)
memcpy (Address: 0x1800a2f20)
memcpy_s (Address: 0x1800a3088)
memmove (Address: 0x1800a2f18)
memmove_s (Address: 0x1800a3040)
memset (Address: 0x1800a2f50)
realloc (Address: 0x1800a2fc0)
setlocale (Address: 0x1800a2f08)
strchr (Address: 0x1800a2fd0)
tolower (Address: 0x1800a2f98)
wcscat_s (Address: 0x1800a2ff8)
wcscpy_s (Address: 0x1800a3090)
wcsncpy_s (Address: 0x1800a3018)
wcstombs_s (Address: 0x1800a2f88)

ntdll.dll

iswctype (Address: 0x1800a3140)
iswdigit (Address: 0x1800a30c8)
iswspace (Address: 0x1800a30d0)
iswxdigit (Address: 0x1800a30f8)
NtQueryInformationProcess (Address: 0x1800a3110)
RtlAcquireSRWLockExclusive (Address: 0x1800a3158)
RtlPublishWnfStateData (Address: 0x1800a3118)
RtlReleaseSRWLockExclusive (Address: 0x1800a3150)
RtlSleepConditionVariableSRW (Address: 0x1800a3120)
RtlWakeAllConditionVariable (Address: 0x1800a3128)
SbSelectProcedure (Address: 0x1800a3108)
swscanf_s (Address: 0x1800a3100)
toupper (Address: 0x1800a3138)
towlower (Address: 0x1800a3130)
towupper (Address: 0x1800a3148)
wcschr (Address: 0x1800a30c0)
wcscspn (Address: 0x1800a30e0)
wcsncmp (Address: 0x1800a30d8)
wcsrchr (Address: 0x1800a30f0)
wcsstr (Address: 0x1800a30e8)

OLEAUT32.dll

CreateErrorInfo (Address: 0x1800a2778)
SetErrorInfo (Address: 0x1800a2780)
SysFreeString (Address: 0x1800a27a0)
SysStringLen (Address: 0x1800a27b0)
VariantClear (Address: 0x1800a2788)
VariantCopy (Address: 0x1800a2790)
VariantInit (Address: 0x1800a2798)
VarUI4FromStr (Address: 0x1800a27a8)

profapi.dll

(Address: 0x1800a3168)

RPCRT4.dll

UuidCreateSequential (Address: 0x1800a27c0)

USERENV.dll

CreateAppContainerProfile (Address: 0x1800a27d0)
DeriveAppContainerSidFromAppContainerName (Address: 0x1800a27d8)