sppsvc.exe

  • File Path: C:\Windows\system32\sppsvc.exe
  • Description: Microsoft Software Protection Platform Service

Hashes

Type Hash
MD5 23B1ACA27DD674646C1F2CB9CE97DDC1
SHA1 2122AD70D9BA79B2D3F8875F8BD55800F8CB77A7
SHA256 04CF5A7DDB377C741A788F520409E18C98E08A1002CBA26E83806A965A919A74
SHA384 8F5A042FF16C93AF4AA81A1C3BB3C5690F46093867121B8E3DC26B39260A48F4B1B61CBA34BF305D65F3B5E8C5DFB11A
SHA512 F063E4763E1FD13FB9B4FB1FF862ED5B0FE2DAA53E7CC72EBE90B95CF1F17B7A0FF5B95D62467EAEA3D665A75953287BA04367F7DEC680ABE76B1E456BFF71D7
SSDEEP 49152:XMxvWoYVoPNrdK0Ft7xurs/0NG33RB/ZxyHQtq4GswEbCX18hlDOXkiQubGiVZX5:XYXsoBPJ7uevsiGIlSkPujnGwP1/7

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: sppsvc.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

Possible Misuse

The following table contains possible examples of sppsvc.exe being misused. While sppsvc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .sppsvc.exe``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.