Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.57%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.10%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.75%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.10%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.15%
6.2.9200.16693 (win8_gdr.130815-1505) 3.05%
6.2.9200.16686 (win8_gdr.130809-1506) 0.29%
6.2.9200.16642 (win8_gdr.130614-1704) 0.10%
6.2.9200.16384 (win8_rtm.120725-1247) 2.21%
6.2.9200.16384 (win8_rtm.120725-1247) 10.85%
6.2.9200.16384 (win8_rtm.120725-1247) 1.23%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.10%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.10%
6.1.7600.16385 (win7_rtm.090713-1255) 6.97%
6.1.7600.16385 (win7_rtm.090713-1255) 42.14%
6.1.7600.16385 (win7_rtm.090713-1255) 23.92%
6.1.7600.16385 (win7_rtm.090713-1255) 4.08%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
TraceMessage, RegCloseKey, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, FreeSid, RegDeleteKeyW, RegCreateKeyExW, CheckTokenMembership, AllocateAndInitializeSid, ConvertStringSidToSidW, RegEnumKeyW, RegQueryInfoKeyW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegSetKeySecurity, RegDeleteValueW, RegSetValueExW, CryptGenRandom, CryptAcquireContextW, CryptReleaseContext, DeregisterEventSource, ReportEventW, RegisterEventSourceW, EqualSid, OpenProcessToken, ConvertSidToStringSidW, LookupAccountNameW, RegEnumKeyExW, CryptDestroyHash, CryptHashData, CryptCreateHash, CryptGetHashParam, CryptDestroyKey, CryptEncrypt, CryptDecrypt, CryptImportKey, CryptSignHashA, CryptVerifySignatureA, CryptExportKey, CryptGenKey, RegisterTraceGuidsA, GetTokenInformation, RegQueryValueExA, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegOpenKeyExA
kernel32.dll
Sleep, InitializeCriticalSectionAndSpinCount, WaitForSingleObject, GetCurrentThreadId, DeleteTimerQueueEx, ReleaseSemaphore, LoadLibraryW, SetThreadPriority, GetThreadPriority, DuplicateHandle, GetCurrentProcess, GetCurrentThread, OpenThread, GetTickCount, ReleaseMutex, CreateSemaphoreW, IsWow64Process, OpenMutexW, CreateMutexW, ExpandEnvironmentStringsW, GetTimeFormatW, GetDateFormatW, FileTimeToSystemTime, SetFileAttributesW, GetFileAttributesW, ChangeTimerQueueTimer, CreateDirectoryW, WriteFile, CreateFileW, GetFileSizeEx, QueueUserWorkItem, ReadFile, GetFileSize, MultiByteToWideChar, OpenProcess, GetCurrentProcessId, GetSystemInfo, CompareFileTime, SystemTimeToFileTime, GetSystemTimeAsFileTime, DeleteTimerQueue, WaitForMultipleObjects, GetDevicePowerState, CreateSemaphoreA, InterlockedExchangeAdd, GetPrivateProfileStringW, GetPrivateProfileSectionW, GetFullPathNameW, InitializeCriticalSection, SetLastError, VirtualProtect, VirtualFree, VirtualAlloc, GetLocalTime, MoveFileExW, CopyFileW, FlushFileBuffers, DeleteFileW, SetFilePointer, CreateFileMappingW, MapViewOfFile, GetModuleHandleW, UnmapViewOfFile, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, GetComputerNameW, DeviceIoControl, GetLocaleInfoW, GetSystemDirectoryW, LCMapStringW, WideCharToMultiByte, GetVersionExA, GetVersion, VirtualQuery, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedExchange, UnregisterWaitEx, SetEvent, GetModuleHandleExW, GetProcAddress, CreateTimerQueue, CreateTimerQueueTimer, CreateEventW, RegisterWaitForSingleObject, RaiseException, InterlockedDecrement, GetVersionExW, InterlockedIncrement, GetLastError, HeapSetInformation, DeleteTimerQueueTimer, LeaveCriticalSection, LocalFree, EnterCriticalSection, LocalAlloc, DeleteCriticalSection, FreeLibrary, CloseHandle, DecodePointer, EncodePointer, InterlockedCompareExchange, HeapFree, GetProcessHeap, HeapAlloc, lstrlenW, ExitThread, CreateProcessA, SetCurrentDirectoryA, ExitProcess, OpenEventA
msvcrt.dll
DllMain
ntdll.dll
NtQueryInformationThread, NtSetInformationThread, RtlUnwind, RtlFreeHeap, RtlAllocateHeap, RtlInitUnicodeString, RtlEnterCriticalSection, RtlLeaveCriticalSection, RtlCopyUnicodeString, RtlCompareUnicodeString
ole32.dll
CoInitializeSecurity, CoUninitialize, CoInitializeEx
rpcrt4.dll
NdrServerCall2, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcServerListen, RpcServerUnregisterIf, RpcMgmtStopServerListening, I_RpcBindingInqLocalClientPID, RpcServerInqCallAttributesW, RpcRaiseException, RpcStringFreeW, RpcRevertToSelfEx, RpcImpersonateClient, UuidCreate, UuidFromStringW, UuidToStringW, I_RpcMapWin32Status
user32.dll
wsprintfA, GetDesktopWindow

sppsvc.exe

Microsoft Software Protection Platform Service by Microsoft Corporation (Signed)

Remove sppsvc.exe
Version:   6.3.9600.16384 (winblue_rtm.130821-1623)
MD5:   e6dec72a2a23faa53eb9fec3c7e29d66
SHA1:   98464403267c402b1a74d4b8e3800d631867f0d1
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

sppsvc.exe runs as a service under the name Ochrana softwaru (sppsvc) within the local user context. The file is digitally signed by Microsoft Corporation. .

DetailsDetails

File name:sppsvc.exe
Publisher:Microsoft Corporation
Product name:Microsoft Software Protection Platform Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\sppsvc.exe
Original name:sppsvc.exe.mui
File version:6.3.9600.16384 (winblue_rtm.130821-1623)
Product version:6.3.9600.16384
Size:6.06 MB (6,353,952 bytes)
Build date:9/12/2013 5:56 AM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows Console
Entropy:7.357806
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • SLSvc
  • 'sppsvc' (Software Protection)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.00%
Windows 8.1 17.00%
Windows 7 Ultimate 15.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 7.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.00%
Windows 8 Single Language 2.50%
Windows 8.1 Pro with Media Center 2.00%
Windows 7 Home Basic 1.50%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 45.23% of Microsoft Software Protection Platform Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 18.90%
Hewlett-Packard 18.50%
ASUS 18.11%
Acer 12.60%
Toshiba 11.02%
Lenovo 8.66%
Sony 3.94%
Intel 2.36%
Samsung 1.97%
GIGABYTE 1.97%
Alienware 1.18%
Medion 0.79%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE