Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.57%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.10%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.75%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.10%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.15%
6.2.9200.16693 (win8_gdr.130815-1505) 3.05%
6.2.9200.16686 (win8_gdr.130809-1506) 0.29%
6.2.9200.16642 (win8_gdr.130614-1704) 0.10%
6.2.9200.16384 (win8_rtm.120725-1247) 2.21%
6.2.9200.16384 (win8_rtm.120725-1247) 10.85%
6.2.9200.16384 (win8_rtm.120725-1247) 1.23%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.10%
6.1.7600.16385 (win7_rtm.090713-1255) 6.97%
6.1.7600.16385 (win7_rtm.090713-1255) 42.14%
6.1.7600.16385 (win7_rtm.090713-1255) 23.92%
6.1.7600.16385 (win7_rtm.090713-1255) 4.08%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
TraceMessage, RegCloseKey, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, FreeSid, RegDeleteKeyW, RegCreateKeyExW, CheckTokenMembership, AllocateAndInitializeSid, ConvertStringSidToSidW, RegEnumKeyW, RegQueryInfoKeyW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegSetKeySecurity, RegDeleteValueW, RegSetValueExW, CryptGenRandom, CryptAcquireContextW, CryptReleaseContext, DeregisterEventSource, ReportEventW, RegisterEventSourceW, EqualSid, OpenProcessToken, ConvertSidToStringSidW, LookupAccountNameW, RegEnumKeyExW, CryptDestroyHash, CryptHashData, CryptCreateHash, CryptGetHashParam, CryptDestroyKey, CryptEncrypt, CryptDecrypt, CryptImportKey, CryptSignHashA, CryptVerifySignatureA, CryptExportKey, CryptGenKey, RegisterTraceGuidsA, GetTokenInformation, RegQueryValueExA, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegOpenKeyExA
kernel32.dll
Sleep, InitializeCriticalSectionAndSpinCount, WaitForSingleObject, GetCurrentThreadId, DeleteTimerQueueEx, ReleaseSemaphore, LoadLibraryW, SetThreadPriority, GetThreadPriority, DuplicateHandle, GetCurrentProcess, GetCurrentThread, OpenThread, GetTickCount, ReleaseMutex, CreateSemaphoreW, IsWow64Process, OpenMutexW, CreateMutexW, ExpandEnvironmentStringsW, GetTimeFormatW, GetDateFormatW, FileTimeToSystemTime, SetFileAttributesW, GetFileAttributesW, ChangeTimerQueueTimer, CreateDirectoryW, WriteFile, CreateFileW, GetFileSizeEx, QueueUserWorkItem, ReadFile, GetFileSize, MultiByteToWideChar, OpenProcess, GetCurrentProcessId, GetSystemInfo, CompareFileTime, SystemTimeToFileTime, GetSystemTimeAsFileTime, DeleteTimerQueue, WaitForMultipleObjects, GetDevicePowerState, CreateSemaphoreA, InterlockedExchangeAdd, GetPrivateProfileStringW, GetPrivateProfileSectionW, GetFullPathNameW, InitializeCriticalSection, SetLastError, VirtualProtect, VirtualFree, VirtualAlloc, GetLocalTime, MoveFileExW, CopyFileW, FlushFileBuffers, DeleteFileW, SetFilePointer, CreateFileMappingW, MapViewOfFile, GetModuleHandleW, UnmapViewOfFile, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, GetComputerNameW, DeviceIoControl, GetLocaleInfoW, GetSystemDirectoryW, LCMapStringW, WideCharToMultiByte, GetVersionExA, GetVersion, VirtualQuery, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedExchange, UnregisterWaitEx, SetEvent, GetModuleHandleExW, GetProcAddress, CreateTimerQueue, CreateTimerQueueTimer, CreateEventW, RegisterWaitForSingleObject, RaiseException, InterlockedDecrement, GetVersionExW, InterlockedIncrement, GetLastError, HeapSetInformation, DeleteTimerQueueTimer, LeaveCriticalSection, LocalFree, EnterCriticalSection, LocalAlloc, DeleteCriticalSection, FreeLibrary, CloseHandle, DecodePointer, EncodePointer, InterlockedCompareExchange, HeapFree, GetProcessHeap, HeapAlloc, lstrlenW, ExitThread, CreateProcessA, SetCurrentDirectoryA, ExitProcess, OpenEventA
msvcrt.dll
DllMain
ntdll.dll
NtQueryInformationThread, NtSetInformationThread, RtlUnwind, RtlFreeHeap, RtlAllocateHeap, RtlInitUnicodeString, RtlEnterCriticalSection, RtlLeaveCriticalSection, RtlCopyUnicodeString, RtlCompareUnicodeString
ole32.dll
CoInitializeSecurity, CoUninitialize, CoInitializeEx
rpcrt4.dll
NdrServerCall2, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcServerListen, RpcServerUnregisterIf, RpcMgmtStopServerListening, I_RpcBindingInqLocalClientPID, RpcServerInqCallAttributesW, RpcRaiseException, RpcStringFreeW, RpcRevertToSelfEx, RpcImpersonateClient, UuidCreate, UuidFromStringW, UuidToStringW, I_RpcMapWin32Status
user32.dll
wsprintfA, GetDesktopWindow

sppsvc.exe

Microsoft Software Protection Platform Service by Microsoft Corporation (Signed)

Remove sppsvc.exe
Version:   6.3.9431.0 (winmain_bluemp.130615-1214)
MD5:   f0022c96c7af27b25c15c7988efaec17
SHA1:   55218e5bfc4538b239ba56600f3db8b38e658995
SHA256:   e35a32abfbcc76b7debb3fb16fa5e4d899da8f3fe885828f89ce9fa72064b861
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

sppsvc.exe runs as a service under the name Ochrana softwaru (sppsvc) within the local user context. The file is digitally signed by Microsoft Corporation. .

DetailsDetails

File name:sppsvc.exe
Publisher:Microsoft Corporation
Product name:Microsoft Software Protection Platform Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\sppsvc.exe
Original name:sppsvc.exe.mui
File version:6.3.9431.0 (winmain_bluemp.130615-1214)
Product version:6.3.9431.0
Size:5.55 MB (5,822,936 bytes)
Build date:6/15/2013 5:25 PM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows Console
Entropy:7.357806
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • SLSvc
  • 'sppsvc' (Software Protection)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.00%
Windows 8.1 17.00%
Windows 7 Ultimate 15.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 7.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.00%
Windows 8 Single Language 2.50%
Windows 8.1 Pro with Media Center 2.00%
Windows 7 Home Basic 1.50%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 45.23% of Microsoft Software Protection Platform Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 18.90%
Hewlett-Packard 18.50%
ASUS 18.11%
Acer 12.60%
Toshiba 11.02%
Lenovo 8.66%
Sony 3.94%
Intel 2.36%
Samsung 1.97%
GIGABYTE 1.97%
Alienware 1.18%
Medion 0.79%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE