Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.57%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.10%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.75%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.10%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.15%
6.2.9200.16693 (win8_gdr.130815-1505) 3.05%
6.2.9200.16686 (win8_gdr.130809-1506) 0.29%
6.2.9200.16642 (win8_gdr.130614-1704) 0.10%
6.2.9200.16384 (win8_rtm.120725-1247) 2.21%
6.2.9200.16384 (win8_rtm.120725-1247) 10.85%
6.2.9200.16384 (win8_rtm.120725-1247) 1.23%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.10%
6.1.7600.16385 (win7_rtm.090713-1255) 6.97%
6.1.7600.16385 (win7_rtm.090713-1255) 42.14%
6.1.7600.16385 (win7_rtm.090713-1255) 23.92%
6.1.7600.16385 (win7_rtm.090713-1255) 4.08%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
TraceMessage, RegCloseKey, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, FreeSid, RegDeleteKeyW, RegCreateKeyExW, CheckTokenMembership, AllocateAndInitializeSid, ConvertStringSidToSidW, RegEnumKeyW, RegQueryInfoKeyW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegSetKeySecurity, RegDeleteValueW, RegSetValueExW, CryptGenRandom, CryptAcquireContextW, CryptReleaseContext, DeregisterEventSource, ReportEventW, RegisterEventSourceW, EqualSid, OpenProcessToken, ConvertSidToStringSidW, LookupAccountNameW, RegEnumKeyExW, CryptDestroyHash, CryptHashData, CryptCreateHash, CryptGetHashParam, CryptDestroyKey, CryptEncrypt, CryptDecrypt, CryptImportKey, CryptSignHashA, CryptVerifySignatureA, CryptExportKey, CryptGenKey, RegisterTraceGuidsA, GetTokenInformation, RegQueryValueExA, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegOpenKeyExA
kernel32.dll
Sleep, InitializeCriticalSectionAndSpinCount, WaitForSingleObject, GetCurrentThreadId, DeleteTimerQueueEx, ReleaseSemaphore, LoadLibraryW, SetThreadPriority, GetThreadPriority, DuplicateHandle, GetCurrentProcess, GetCurrentThread, OpenThread, GetTickCount, ReleaseMutex, CreateSemaphoreW, IsWow64Process, OpenMutexW, CreateMutexW, ExpandEnvironmentStringsW, GetTimeFormatW, GetDateFormatW, FileTimeToSystemTime, SetFileAttributesW, GetFileAttributesW, ChangeTimerQueueTimer, CreateDirectoryW, WriteFile, CreateFileW, GetFileSizeEx, QueueUserWorkItem, ReadFile, GetFileSize, MultiByteToWideChar, OpenProcess, GetCurrentProcessId, GetSystemInfo, CompareFileTime, SystemTimeToFileTime, GetSystemTimeAsFileTime, DeleteTimerQueue, WaitForMultipleObjects, GetDevicePowerState, CreateSemaphoreA, InterlockedExchangeAdd, GetPrivateProfileStringW, GetPrivateProfileSectionW, GetFullPathNameW, InitializeCriticalSection, SetLastError, VirtualProtect, VirtualFree, VirtualAlloc, GetLocalTime, MoveFileExW, CopyFileW, FlushFileBuffers, DeleteFileW, SetFilePointer, CreateFileMappingW, MapViewOfFile, GetModuleHandleW, UnmapViewOfFile, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, GetComputerNameW, DeviceIoControl, GetLocaleInfoW, GetSystemDirectoryW, LCMapStringW, WideCharToMultiByte, GetVersionExA, GetVersion, VirtualQuery, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedExchange, UnregisterWaitEx, SetEvent, GetModuleHandleExW, GetProcAddress, CreateTimerQueue, CreateTimerQueueTimer, CreateEventW, RegisterWaitForSingleObject, RaiseException, InterlockedDecrement, GetVersionExW, InterlockedIncrement, GetLastError, HeapSetInformation, DeleteTimerQueueTimer, LeaveCriticalSection, LocalFree, EnterCriticalSection, LocalAlloc, DeleteCriticalSection, FreeLibrary, CloseHandle, DecodePointer, EncodePointer, InterlockedCompareExchange, HeapFree, GetProcessHeap, HeapAlloc, lstrlenW, ExitThread, CreateProcessA, SetCurrentDirectoryA, ExitProcess, OpenEventA
msvcrt.dll
DllMain
ntdll.dll
NtQueryInformationThread, NtSetInformationThread, RtlUnwind, RtlFreeHeap, RtlAllocateHeap, RtlInitUnicodeString, RtlEnterCriticalSection, RtlLeaveCriticalSection, RtlCopyUnicodeString, RtlCompareUnicodeString
ole32.dll
CoInitializeSecurity, CoUninitialize, CoInitializeEx
rpcrt4.dll
NdrServerCall2, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcServerListen, RpcServerUnregisterIf, RpcMgmtStopServerListening, I_RpcBindingInqLocalClientPID, RpcServerInqCallAttributesW, RpcRaiseException, RpcStringFreeW, RpcRevertToSelfEx, RpcImpersonateClient, UuidCreate, UuidFromStringW, UuidToStringW, I_RpcMapWin32Status
user32.dll
wsprintfA, GetDesktopWindow

sppsvc.exe

Microsoft Software Protection Platform Service by Microsoft Corporation (Signed)

Remove sppsvc.exe
Version:   6.2.9200.16686 (win8_gdr.130809-1506)
MD5:   34e2f63b923188ef08379ba7441bba56
SHA1:   1f99cc9673c259842d2a91b5a41f73fc8e69036e
SHA256:   61b38055bb1982a8bec6270392074b5975c9ce768a77b5269c387bafce048a4c
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

sppsvc.exe runs as a service under the name Ochrana softwaru (sppsvc) within the local user context. The file is digitally signed by Microsoft Corporation. This version is installed on Windows 8.

DetailsDetails

File name:sppsvc.exe
Publisher:Microsoft Corporation
Product name:Microsoft Software Protection Platform Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\sppsvc.exe
Original name:sppsvc.exe.mui
File version:6.2.9200.16686 (win8_gdr.130809-1506)
Product version:6.2.9200.16686
Size:3.65 MB (3,831,808 bytes)
Build date:8/10/2013 4:21 AM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows Console
Entropy:7.357806
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • SLSvc
  • 'sppsvc' (Software Protection)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.00%
Windows 8.1 17.00%
Windows 7 Ultimate 15.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 7.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.00%
Windows 8 Single Language 2.50%
Windows 8.1 Pro with Media Center 2.00%
Windows 7 Home Basic 1.50%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 45.23% of Microsoft Software Protection Platform Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 18.90%
Hewlett-Packard 18.50%
ASUS 18.11%
Acer 12.60%
Toshiba 11.02%
Lenovo 8.66%
Sony 3.94%
Intel 2.36%
Samsung 1.97%
GIGABYTE 1.97%
Alienware 1.18%
Medion 0.79%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE