Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.57%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.10%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.75%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.10%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.15%
6.2.9200.16693 (win8_gdr.130815-1505) 3.05%
6.2.9200.16686 (win8_gdr.130809-1506) 0.29%
6.2.9200.16642 (win8_gdr.130614-1704) 0.10%
6.2.9200.16384 (win8_rtm.120725-1247) 2.21%
6.2.9200.16384 (win8_rtm.120725-1247) 10.85%
6.2.9200.16384 (win8_rtm.120725-1247) 1.23%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.10%
6.1.7600.16385 (win7_rtm.090713-1255) 6.97%
6.1.7600.16385 (win7_rtm.090713-1255) 42.14%
6.1.7600.16385 (win7_rtm.090713-1255) 23.92%
6.1.7600.16385 (win7_rtm.090713-1255) 4.08%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
TraceMessage, RegCloseKey, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, FreeSid, RegDeleteKeyW, RegCreateKeyExW, CheckTokenMembership, AllocateAndInitializeSid, ConvertStringSidToSidW, RegEnumKeyW, RegQueryInfoKeyW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegSetKeySecurity, RegDeleteValueW, RegSetValueExW, CryptGenRandom, CryptAcquireContextW, CryptReleaseContext, DeregisterEventSource, ReportEventW, RegisterEventSourceW, EqualSid, OpenProcessToken, ConvertSidToStringSidW, LookupAccountNameW, RegEnumKeyExW, CryptDestroyHash, CryptHashData, CryptCreateHash, CryptGetHashParam, CryptDestroyKey, CryptEncrypt, CryptDecrypt, CryptImportKey, CryptSignHashA, CryptVerifySignatureA, CryptExportKey, CryptGenKey, RegisterTraceGuidsA, GetTokenInformation, RegQueryValueExA, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegOpenKeyExA
kernel32.dll
Sleep, InitializeCriticalSectionAndSpinCount, WaitForSingleObject, GetCurrentThreadId, DeleteTimerQueueEx, ReleaseSemaphore, LoadLibraryW, SetThreadPriority, GetThreadPriority, DuplicateHandle, GetCurrentProcess, GetCurrentThread, OpenThread, GetTickCount, ReleaseMutex, CreateSemaphoreW, IsWow64Process, OpenMutexW, CreateMutexW, ExpandEnvironmentStringsW, GetTimeFormatW, GetDateFormatW, FileTimeToSystemTime, SetFileAttributesW, GetFileAttributesW, ChangeTimerQueueTimer, CreateDirectoryW, WriteFile, CreateFileW, GetFileSizeEx, QueueUserWorkItem, ReadFile, GetFileSize, MultiByteToWideChar, OpenProcess, GetCurrentProcessId, GetSystemInfo, CompareFileTime, SystemTimeToFileTime, GetSystemTimeAsFileTime, DeleteTimerQueue, WaitForMultipleObjects, GetDevicePowerState, CreateSemaphoreA, InterlockedExchangeAdd, GetPrivateProfileStringW, GetPrivateProfileSectionW, GetFullPathNameW, InitializeCriticalSection, SetLastError, VirtualProtect, VirtualFree, VirtualAlloc, GetLocalTime, MoveFileExW, CopyFileW, FlushFileBuffers, DeleteFileW, SetFilePointer, CreateFileMappingW, MapViewOfFile, GetModuleHandleW, UnmapViewOfFile, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, GetComputerNameW, DeviceIoControl, GetLocaleInfoW, GetSystemDirectoryW, LCMapStringW, WideCharToMultiByte, GetVersionExA, GetVersion, VirtualQuery, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedExchange, UnregisterWaitEx, SetEvent, GetModuleHandleExW, GetProcAddress, CreateTimerQueue, CreateTimerQueueTimer, CreateEventW, RegisterWaitForSingleObject, RaiseException, InterlockedDecrement, GetVersionExW, InterlockedIncrement, GetLastError, HeapSetInformation, DeleteTimerQueueTimer, LeaveCriticalSection, LocalFree, EnterCriticalSection, LocalAlloc, DeleteCriticalSection, FreeLibrary, CloseHandle, DecodePointer, EncodePointer, InterlockedCompareExchange, HeapFree, GetProcessHeap, HeapAlloc, lstrlenW, ExitThread, CreateProcessA, SetCurrentDirectoryA, ExitProcess, OpenEventA
msvcrt.dll
DllMain
ntdll.dll
NtQueryInformationThread, NtSetInformationThread, RtlUnwind, RtlFreeHeap, RtlAllocateHeap, RtlInitUnicodeString, RtlEnterCriticalSection, RtlLeaveCriticalSection, RtlCopyUnicodeString, RtlCompareUnicodeString
ole32.dll
CoInitializeSecurity, CoUninitialize, CoInitializeEx
rpcrt4.dll
NdrServerCall2, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcServerListen, RpcServerUnregisterIf, RpcMgmtStopServerListening, I_RpcBindingInqLocalClientPID, RpcServerInqCallAttributesW, RpcRaiseException, RpcStringFreeW, RpcRevertToSelfEx, RpcImpersonateClient, UuidCreate, UuidFromStringW, UuidToStringW, I_RpcMapWin32Status
user32.dll
wsprintfA, GetDesktopWindow

sppsvc.exe

Microsoft Software Protection Platform Service by Microsoft Corporation (Signed)

Remove sppsvc.exe
Version:   6.2.8400.0 (winmain_win8rc.120518-1423)
MD5:   613ef10494f7bc394e0db2d5cb3fec74
SHA1:   7a9fed3f71bf837c66aae218b95dcdcc7edbc540
SHA256:   55892f844a6ca16f1509aa3abec3c1c6c5d01bb05e5bf6a52023f10a8b906c84
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

sppsvc.exe runs as a service under the name Ochrana softwaru (sppsvc) within the local user context. The file is digitally signed by Microsoft Corporation. This version is installed on Windows 8.

DetailsDetails

File name:sppsvc.exe
Publisher:Microsoft Corporation
Product name:Microsoft Software Protection Platform Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\sppsvc.exe
Original name:sppsvc.exe.mui
File version:6.2.8400.0 (winmain_win8rc.120518-1423)
Product version:6.2.8400.0
Size:4.67 MB (4,894,720 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows Console
Entropy:7.357806
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • SLSvc
  • 'sppsvc' (Software Protection)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.00%
Windows 8.1 17.00%
Windows 7 Ultimate 15.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 7.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.00%
Windows 8 Single Language 2.50%
Windows 8.1 Pro with Media Center 2.00%
Windows 7 Home Basic 1.50%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 45.23% of Microsoft Software Protection Platform Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 18.90%
Hewlett-Packard 18.50%
ASUS 18.11%
Acer 12.60%
Toshiba 11.02%
Lenovo 8.66%
Sony 3.94%
Intel 2.36%
Samsung 1.97%
GIGABYTE 1.97%
Alienware 1.18%
Medion 0.79%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE