sppsvc.exe

  • File Path: C:\WINDOWS\system32\sppsvc.exe
  • Description: Microsoft Software Protection Platform Service

Hashes

Type Hash
MD5 FA50481C052A1357DD958DB3258DB512
SHA1 6E58D37B943E8FF72AE7FE7628A3495131D5E90A
SHA256 B0D0CFF7BCBD79C303D736717B8696E60CEFAD8DBB4BFA7966135701A95B6729
SHA384 DF159E258699A61550F13B02BD71CB020A270580EE22D6A10F0879C02BC85E534F07538F4041C93A4514700832622EFC
SHA512 76060D8C6B3D02C7B345185DC3B62BDF91C02042396332723E50E906E61E89D5B97122A94A1A50212AA6EF237C4E7A683817A566842E1BB80AF135CE36F3054A
SSDEEP 98304:QRLVUqpSSI/8zTB15botERQeNMzkNMz9wn:ZqpIEzFfb4ERQxzkNcSn
IMP B3B0B9299A7EF6F14E3EE1DBFEB204FB
PESHA1 B0592191C02F51DB5F6056EAC89717D06BC5F656
PE256 8F9751914EE0EB22E70D85E266312C7A4428D5D13962C2B3EAAF043FF3F436C2

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: sppsvc.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/b0d0cff7bcbd79c303d736717b8696e60cefad8dbb4bfa7966135701a95b6729/detection

Possible Misuse

The following table contains possible examples of sppsvc.exe being misused. While sppsvc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .sppsvc.exe``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.