sppsvc.exe

  • File Path: C:\Windows\system32\sppsvc.exe
  • Description: Microsoft Software Protection Platform Service

Hashes

Type Hash
MD5 32F449A043C0B6164E6C7E4FD84F5F54
SHA1 1E526381527B05F060F88F3555317ECDDD448EBE
SHA256 0468F965DDC8EF2839D9A5E5F127BA940084F9D913AD6CC82201B303A1B10BC4
SHA384 D68B12F5C28F795A2337BA4696CC8CA91574AD9BF1685FDCE498F29F489B61B00094B2D3411557EB1377204CF935C209
SHA512 A08B677D5B377CDCBA99CF981B7DDCB9CF5433808A2EECCB514CEAA754E947AD0D8DDAB560BF507FD7C410A33B93BC00C2984C1A942C390CBC20A5E8A5139C9C
SSDEEP 49152:/Ddf2v0CTQGMlLl/eX1fqPTBXHIxXsOGDpGhqlrxoHFfzPcUxJJoMJ4mnb3eETt6:t1NexqPT95OGDf0zPcc/vJlDINwP1J7e

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: sppsvc.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\sppsvc.exe 43

Possible Misuse

The following table contains possible examples of sppsvc.exe being misused. While sppsvc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .sppsvc.exe``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.