sppobjs.dll

Description: Software Protection Platform Plugins

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: d187c499f04697069c5461af86d32bee

File Size: 1.7 MB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • SppPluginCanUnloadNow (Ordinal: 1, Address: 0x8fcd0)
  • SppPluginCreateInstance (Ordinal: 2, Address: 0x8fd00)
  • SppPluginInitialize (Ordinal: 3, Address: 0x8fd30)
  • SppPluginShutdown (Ordinal: 4, Address: 0x8fd60)
  • SppPluginVersion (Ordinal: 5, Address: 0x194b00)

Imported DLLs & Functions

ADVAPI32.dll
  • CryptAcquireContextW (Address: 0x180174a48)
  • CryptGenRandom (Address: 0x180174a40)
  • CryptReleaseContext (Address: 0x180174a38)
  • GetTraceEnableFlags (Address: 0x180174a70)
  • GetTraceEnableLevel (Address: 0x180174a68)
  • GetTraceLoggerHandle (Address: 0x180174a78)
  • RegCloseKey (Address: 0x180174a80)
  • RegEnumKeyW (Address: 0x180174a50)
  • RegisterTraceGuidsW (Address: 0x180174a60)
  • RegOpenKeyExW (Address: 0x180174a88)
  • RegQueryValueExW (Address: 0x180174a90)
  • UnregisterTraceGuids (Address: 0x180174a58)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x180174d80)
  • CoDisconnectContext (Address: 0x180174d68)
  • CoFreeUnusedLibraries (Address: 0x180174d60)
  • CoGetInterfaceAndReleaseStream (Address: 0x180174d48)
  • CoInitializeEx (Address: 0x180174d90)
  • CoInitializeSecurity (Address: 0x180174d78)
  • CoMarshalInterThreadInterfaceInStream (Address: 0x180174d50)
  • CoRegisterClassObject (Address: 0x180174d40)
  • CoRegisterPSClsid (Address: 0x180174d38)
  • CoRevokeClassObject (Address: 0x180174d58)
  • CoSetProxyBlanket (Address: 0x180174d70)
  • CoUninitialize (Address: 0x180174d88)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180174db0)
  • IsDebuggerPresent (Address: 0x180174da8)
  • OutputDebugStringW (Address: 0x180174da0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180174dd0)
  • RaiseException (Address: 0x180174dd8)
  • SetLastError (Address: 0x180174dc8)
  • SetUnhandledExceptionFilter (Address: 0x180174dc0)
  • UnhandledExceptionFilter (Address: 0x180174de0)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x180174df0)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x180174e00)
  • ReadFile (Address: 0x180174e10)
  • WriteFile (Address: 0x180174e08)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180174e28)
  • DuplicateHandle (Address: 0x180174e20)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180174e38)
  • HeapAlloc (Address: 0x180174e48)
  • HeapFree (Address: 0x180174e40)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180174e60)
  • LocalFree (Address: 0x180174e58)
api-ms-win-core-io-l1-1-0.dll
  • GetOverlappedResult (Address: 0x180174e70)
api-ms-win-core-io-l1-1-1.dll
  • CancelIo (Address: 0x180174e80)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180174e90)
  • FreeLibrary (Address: 0x180174eb8)
  • FreeLibraryAndExitThread (Address: 0x180174ed0)
  • GetModuleFileNameA (Address: 0x180174ea0)
  • GetModuleFileNameW (Address: 0x180174ec0)
  • GetModuleHandleExW (Address: 0x180174ea8)
  • GetModuleHandleW (Address: 0x180174eb0)
  • GetProcAddress (Address: 0x180174e98)
  • LoadLibraryExW (Address: 0x180174ec8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180174ef8)
  • GetSystemDefaultLangID (Address: 0x180174ee8)
  • GetUserGeoID (Address: 0x180174ef0)
  • LCMapStringW (Address: 0x180174ee0)
api-ms-win-core-memory-l1-1-0.dll
  • UnmapViewOfFile (Address: 0x180174f20)
  • VirtualAlloc (Address: 0x180174f10)
  • VirtualFree (Address: 0x180174f08)
  • VirtualQuery (Address: 0x180174f18)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x180174f30)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180174f78)
  • GetCurrentProcessId (Address: 0x180174f68)
  • GetCurrentThread (Address: 0x180174f60)
  • GetCurrentThreadId (Address: 0x180174f40)
  • GetThreadPriority (Address: 0x180174f50)
  • OpenProcessToken (Address: 0x180174f88)
  • OpenThread (Address: 0x180174f58)
  • SetPriorityClass (Address: 0x180174f80)
  • SetThreadPriority (Address: 0x180174f70)
  • TerminateProcess (Address: 0x180174f48)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x180174f98)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180174fa8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCreateKeyExW (Address: 0x180174fc0)
  • RegDeleteValueW (Address: 0x180174fc8)
  • RegQueryInfoKeyW (Address: 0x180174fd0)
  • RegSetKeySecurity (Address: 0x180174fd8)
  • RegSetValueExW (Address: 0x180174fb8)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlAddFunctionTable (Address: 0x180174ff8)
  • RtlCaptureContext (Address: 0x180174ff0)
  • RtlDeleteFunctionTable (Address: 0x180175000)
  • RtlLookupFunctionEntry (Address: 0x180175008)
  • RtlVirtualUnwind (Address: 0x180174fe8)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x180175018)
  • WideCharToMultiByte (Address: 0x180175020)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180175068)
  • AcquireSRWLockShared (Address: 0x180175098)
  • CreateEventW (Address: 0x180175058)
  • CreateMutexExW (Address: 0x180175038)
  • CreateSemaphoreExW (Address: 0x180175040)
  • DeleteCriticalSection (Address: 0x180175078)
  • InitializeCriticalSectionEx (Address: 0x180175050)
  • OpenSemaphoreW (Address: 0x180175048)
  • ReleaseMutex (Address: 0x180175080)
  • ReleaseSemaphore (Address: 0x1801750a0)
  • ReleaseSRWLockExclusive (Address: 0x180175070)
  • ReleaseSRWLockShared (Address: 0x180175030)
  • ResetEvent (Address: 0x1801750a8)
  • SetEvent (Address: 0x180175090)
  • WaitForSingleObject (Address: 0x180175088)
  • WaitForSingleObjectEx (Address: 0x180175060)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1801750c0)
  • SleepConditionVariableSRW (Address: 0x1801750c8)
  • WakeAllConditionVariable (Address: 0x1801750b8)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x1801750d8)
  • WaitForMultipleObjects (Address: 0x1801750e0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x180175110)
  • GetLocalTime (Address: 0x1801750f0)
  • GetSystemDirectoryW (Address: 0x180175100)
  • GetSystemTime (Address: 0x1801750f8)
  • GetSystemTimeAsFileTime (Address: 0x180175120)
  • GetTickCount (Address: 0x180175128)
  • GetVersionExA (Address: 0x180175108)
  • GetVersionExW (Address: 0x180175118)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180175150)
  • CreateThreadpoolTimer (Address: 0x180175148)
  • SetThreadpoolTimer (Address: 0x180175140)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180175138)
api-ms-win-core-timezone-l1-1-0.dll
  • GetTimeZoneInformation (Address: 0x180175168)
  • SystemTimeToFileTime (Address: 0x180175160)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180175178)
  • EncodePointer (Address: 0x180175180)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x1801751a0)
  • GetFileVersionInfoSizeExW (Address: 0x180175198)
  • VerQueryValueW (Address: 0x180175190)
api-ms-win-security-base-l1-1-0.dll
  • AllocateAndInitializeSid (Address: 0x1801751b8)
  • CheckTokenMembership (Address: 0x1801751c8)
  • EqualSid (Address: 0x1801751c0)
  • FreeSid (Address: 0x1801751d0)
  • GetTokenInformation (Address: 0x1801751b0)
CLIPC.dll
  • ClipClose (Address: 0x180174ab0)
  • ClipOpen (Address: 0x180174aa8)
  • ClipQueryAssociateId (Address: 0x180174aa0)
combase.dll
  • (Address: 0x1801751e0)
  • (Address: 0x1801751e8)
  • (Address: 0x1801751f0)
CRYPTBASE.dll
  • SystemFunction036 (Address: 0x180174ac0)
KERNEL32.dll
  • AssignProcessToJobObject (Address: 0x180174b50)
  • ChangeTimerQueueTimer (Address: 0x180174b30)
  • CreateJobObjectW (Address: 0x180174b58)
  • CreateThread (Address: 0x180174b68)
  • CreateTimerQueue (Address: 0x180174b18)
  • CreateTimerQueueTimer (Address: 0x180174b08)
  • DeleteTimerQueueEx (Address: 0x180174b10)
  • DeleteTimerQueueTimer (Address: 0x180174af8)
  • EnterCriticalSection (Address: 0x180174af0)
  • FileTimeToSystemTime (Address: 0x180174b00)
  • GetProcessAffinityMask (Address: 0x180174ad0)
  • GetSystemDefaultUILanguage (Address: 0x180174b40)
  • GetUserDefaultUILanguage (Address: 0x180174b38)
  • InitializeCriticalSection (Address: 0x180174b60)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180174ae0)
  • LeaveCriticalSection (Address: 0x180174ae8)
  • OpenProcess (Address: 0x180174b48)
  • RegisterWaitForSingleObject (Address: 0x180174b28)
  • SetInformationJobObject (Address: 0x180174b20)
  • UnregisterWaitEx (Address: 0x180174ad8)
msvcrt.dll
  • __C_specific_handler (Address: 0x1801752b8)
  • __CxxFrameHandler3 (Address: 0x180175290)
  • __dllonexit (Address: 0x180175260)
  • _amsg_exit (Address: 0x1801752d8)
  • _initterm (Address: 0x1801752c0)
  • _itow_s (Address: 0x180175230)
  • _lock (Address: 0x1801752b0)
  • _onexit (Address: 0x180175258)
  • _purecall (Address: 0x180175238)
  • _unlock (Address: 0x1801752a0)
  • _vsnwprintf (Address: 0x1801752e8)
  • _wcsicmp (Address: 0x180175210)
  • _wcsnicmp (Address: 0x180175200)
  • _wtoi (Address: 0x180175228)
  • _wtol (Address: 0x180175268)
  • _XcptFilter (Address: 0x1801752e0)
  • free (Address: 0x1801752d0)
  • log10 (Address: 0x180175288)
  • malloc (Address: 0x1801752c8)
  • memchr (Address: 0x180175280)
  • memcmp (Address: 0x180175270)
  • memcpy (Address: 0x180175278)
  • memcpy_s (Address: 0x180175218)
  • memmove (Address: 0x180175298)
  • memmove_s (Address: 0x180175220)
  • memset (Address: 0x180175250)
  • swscanf_s (Address: 0x180175208)
  • wcschr (Address: 0x180175248)
  • wcscmp (Address: 0x1801752f0)
  • wcsncmp (Address: 0x180175240)
  • wcsstr (Address: 0x1801752a8)
NETAPI32.dll
  • DsRoleFreeMemory (Address: 0x180174b78)
  • DsRoleGetPrimaryDomainInformation (Address: 0x180174b80)
ntdll.dll
  • NtQueryInformationThread (Address: 0x180175310)
  • NtQuerySystemInformation (Address: 0x180175328)
  • NtSetInformationProcess (Address: 0x180175320)
  • NtSetInformationThread (Address: 0x180175318)
  • RtlIpv4StringToAddressExW (Address: 0x180175308)
  • RtlIpv6StringToAddressExW (Address: 0x180175300)
OLEAUT32.dll
  • BSTR_UserFree (Address: 0x180174b98)
  • BSTR_UserFree64 (Address: 0x180174bc8)
  • BSTR_UserMarshal (Address: 0x180174c50)
  • BSTR_UserMarshal64 (Address: 0x180174ba0)
  • BSTR_UserSize (Address: 0x180174c68)
  • BSTR_UserSize64 (Address: 0x180174ba8)
  • BSTR_UserUnmarshal (Address: 0x180174c40)
  • BSTR_UserUnmarshal64 (Address: 0x180174bc0)
  • GetErrorInfo (Address: 0x180174c38)
  • LPSAFEARRAY_UserFree (Address: 0x180174bb8)
  • LPSAFEARRAY_UserFree64 (Address: 0x180174bf8)
  • LPSAFEARRAY_UserMarshal (Address: 0x180174c60)
  • LPSAFEARRAY_UserMarshal64 (Address: 0x180174c30)
  • LPSAFEARRAY_UserSize (Address: 0x180174be8)
  • LPSAFEARRAY_UserSize64 (Address: 0x180174b90)
  • LPSAFEARRAY_UserUnmarshal (Address: 0x180174bb0)
  • LPSAFEARRAY_UserUnmarshal64 (Address: 0x180174c58)
  • SafeArrayAccessData (Address: 0x180174c20)
  • SafeArrayCreateVector (Address: 0x180174c18)
  • SafeArrayDestroy (Address: 0x180174c10)
  • SafeArrayUnaccessData (Address: 0x180174c28)
  • SysAllocString (Address: 0x180174bd8)
  • SysFreeString (Address: 0x180174be0)
  • SysStringByteLen (Address: 0x180174bf0)
  • SysStringLen (Address: 0x180174c00)
  • VariantClear (Address: 0x180174c48)
  • VariantCopy (Address: 0x180174c08)
  • VariantInit (Address: 0x180174bd0)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x180174d28)
  • CStdStubBuffer_Connect (Address: 0x180174cf8)
  • CStdStubBuffer_CountRefs (Address: 0x180174c90)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x180174cc0)
  • CStdStubBuffer_DebugServerRelease (Address: 0x180174d20)
  • CStdStubBuffer_Disconnect (Address: 0x180174d10)
  • CStdStubBuffer_Invoke (Address: 0x180174ca8)
  • CStdStubBuffer_IsIIDSupported (Address: 0x180174d00)
  • CStdStubBuffer_QueryInterface (Address: 0x180174c98)
  • I_RpcMapWin32Status (Address: 0x180174cb0)
  • IUnknown_AddRef_Proxy (Address: 0x180174cb8)
  • IUnknown_QueryInterface_Proxy (Address: 0x180174d08)
  • IUnknown_Release_Proxy (Address: 0x180174c80)
  • NdrCStdStubBuffer_Release (Address: 0x180174cf0)
  • NdrDllGetClassObject (Address: 0x180174d18)
  • NdrOleAllocate (Address: 0x180174ce8)
  • NdrOleFree (Address: 0x180174cc8)
  • RpcImpersonateClient (Address: 0x180174c78)
  • RpcRevertToSelfEx (Address: 0x180174ce0)
  • RpcStringFreeW (Address: 0x180174c88)
  • UuidCreate (Address: 0x180174ca0)
  • UuidFromStringW (Address: 0x180174cd8)
  • UuidToStringW (Address: 0x180174cd0)