sppsvc.exe

  • File Path: C:\Windows\system32\sppsvc.exe
  • Description: Microsoft Software Protection Platform Service

Hashes

Type Hash
MD5 ECA1C32C297E36CB925173CF7223168A
SHA1 2D525F13D778E50AC5F8F5FD7956D218D3912AB2
SHA256 51459A8DF8318B7C7505A107A34C6E008727501F61D122724EDDEEAFC465DF83
SHA384 3365BDB68D01B01E0E35E604C8388EDD55124D436314928C754049DE1A2C96E93C61D2F261ED9D210EEADAB0FBC23726
SHA512 CEED813EBD2E4FEF7F822A0CCF7A329E9265FBE4F7C12AD55308D238842B33FF03F7B5C2C337685F3BC45916A1EA15EE5F0B96AF0ADEB50618D7A3A4A50661A7
SSDEEP 49152:+imi2Xwkv+G7n+l/eX1W2JqOOH93XdHXDpGVQB4DozF4rnvJSPPMMFGmnb3eETtW:W+NeU2Jq3THXDhYrnvMnzFL+ETwP1XyW

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: sppsvc.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\sppsvc.exe 43
C:\Windows\system32\sppsvc.exe 30

Possible Misuse

The following table contains possible examples of sppsvc.exe being misused. While sppsvc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .sppsvc.exe``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.