Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.57%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.10%
6.3.9600.16384 (winblue_rtm.130821-1623)	2.75%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.05%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.10%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.05%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.15%
6.2.9200.16693 (win8_gdr.130815-1505)	3.05%
6.2.9200.16686 (win8_gdr.130809-1506)	0.29%
6.2.9200.16642 (win8_gdr.130614-1704)	0.10%
6.2.9200.16384 (win8_rtm.120725-1247)	2.21%
6.2.9200.16384 (win8_rtm.120725-1247)	10.85%
6.2.9200.16384 (win8_rtm.120725-1247)	1.23%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.05%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.10%
6.1.7600.16385 (win7_rtm.090713-1255)	6.97%
6.1.7600.16385 (win7_rtm.090713-1255)	42.14%
6.1.7600.16385 (win7_rtm.090713-1255)	23.92%
6.1.7600.16385 (win7_rtm.090713-1255)	4.08%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Warning 4 antivirus scanners has detected malware in various versions of sppsvc.exe.

There are 22 versions of sppsvc.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called 'Ochrana softwaru' with the name 'sppsvc' and described as “Gjør det mulig å laste ned, installere og aktivere digitale lisenser for Windows og Windows-programmer. Hvis tjenesten deaktiveres, kan det hende at operativsystemet og lisensierte programmer kjøres i varslingsmodus. Det anbefales på det sterkeste at du ikke deaktiverer tjenesten for programvarebeskyttelse.”. . It is also run with NETWORK SERVICE privileges. The average file size is about 4.17 MB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 4.52 MB with the maximum memory reaching around 6.72 MB. Addionally, typically read and write I/O disk operations is about 101.51 KB per minute for reads and 4.24 KB per minute for writes.

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.