sppsvc.exe

  • File Path: C:\Windows\system32\sppsvc.exe
  • Description: Microsoft Software Protection Platform Service

Hashes

Type Hash
MD5 2F2E87A6A721DB6772403D0C5F89A063
SHA1 2474CF723A9D4CD65235D8F3F65D62B8C4540C6C
SHA256 F7DB353C7F32E266C9AF7B650320A0F56144B064CA54ACC57DFADE7D99CB0659
SHA384 096D1F6DA23E7A8D4C2B77CE759568DFBBEFFA2BD457746357E6664094B6231C5F137C97F81A58FFF69EAEBED19FD800
SHA512 CCE286D1105FA160BA52F4366F1233A0DD821C8EFFC6B0B373BEBB3A000C9D504C027D189127B7CC6B1AF0FBC0B9C42C1F9237E9D9E8DDBC9092205613370E54
SSDEEP 98304:pwptZqizz4DkUowC1ZE4DST0Owy8PwvxM2:6tDzz4DJoLY4DSz8PcR
IMP 865C812E4E3E6E8C398A0757574C8DA3
PESHA1 BEBEF71ABC2336C31428E76DDFC9419EFE3AC8AA
PE256 D1EEC163DC1B527A7A4D61D9AE639FA3725E7029F6AD8D84C4BC3EAC8B166E93

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: sppsvc.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/f7db353c7f32e266c9af7b650320a0f56144b064ca54acc57dfade7d99cb0659/detection

Possible Misuse

The following table contains possible examples of sppsvc.exe being misused. While sppsvc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .sppsvc.exe``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.