Should I block it?
No, this file is 100% safe to run.
Relationships
Parent process
Related files
spoolsv.exe
Aplicación de subsistema de cola by Microsoft
Version: | 6.1.7264.0 (win7_rtm.090622-1900) |
MD5: | 7745ec7f0b3a63347b2ee85e65ce1b64 |
SHA1: | 142953087bed4a7f0440bc8168f4ac33598a8810 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
spoolsv.exe runs as a service under the name Cola de impresión (Spooler) with extensive SYSTEM privileges (full administrator access). This version is designed to run on Windows 7 and is compiled as a 32 bit program.
Details
File name: | spoolsv.exe |
Publisher: | Microsoft Corporation |
Product name: | Aplicación de subsistema de cola |
Description: | Sistema operativo Microsoft® Windows® |
Typical file path: | C:\Windows\System32\spoolsv.exe |
Original name: | spoolsv.exe.mui |
File version: | 6.1.7264.0 (win7_rtm.090622-1900) |
Product version: | 6.1.7264.0 |
Size: | 309 KB (316,416 bytes) |
Build date: | 7/11/2009 12:06 AM |
Digital DNA |
PE subsystem: | Windows GUI |
File packed: | No |
Code language: | Microsoft Visual C++ |
.NET CLR: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'Spooler' (Cola de impresión)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00097966% | |
Kernel CPU: | 0.00075951% | |
User CPU: | 0.00022015% | |
Kernel CPU time: | 484 ms/min | |
Memory |
Private memory: | 5.79 MB | |
Private (maximum): | 2.6 MB | |
Private (minimum): | 2.57 MB | |
Non-paged memory: | 5.79 MB | |
Virtual memory: | 59.69 MB | |
Virtual memory (peak): | 61.19 MB | |
Working set: | 2.59 MB | |
Working set (peak): | 10.01 MB | |
Resource allocations |
Threads: | 14 | |
Handles: | 307 | |
Process properties
Integrety level: | System |
Platform: | 32-bit |
Owner: | SYSTEM |
Windows Service |
Service name: | Spooler |
Display name: | Cola de impresión |
Description: | “Carga archivos en la memoria para imprimirlos más tarde.” |
Type: | Win32OwnProcess, InteractiveProcess |
Parent process: | services.exe (by Microsoft) |
Threads
Averages
spoolsv.exe (main module) |
Total CPU: | 0.00026955% | |
Kernel CPU: | 0.00026955% | |
User CPU: | 0.00000000% | |
CPU cycles: | 3,851/sec | |
Memory: | 320 KB | |
localspl.dll |
Total CPU: | 0.00009816% | |
Kernel CPU: | 0.00004908% | |
User CPU: | 0.00004908% | |
CPU cycles: | 1,235/sec | |
Memory: | 764 KB | |
fdPnp.dll |
Total CPU: | 0.00009815% | |
Kernel CPU: | 0.00009815% | |
User CPU: | 0.00000000% | |
CPU cycles: | 416/sec | |
Memory: | 52 KB | |
sechost.dll |
Total CPU: | 0.00004901% | |
Kernel CPU: | 0.00004901% | |
User CPU: | 0.00000000% | |
CPU cycles: | 467/sec | |
Memory: | 100 KB | |
Distribution by Windows OS
OS version | distribution |
Windows 7 Ultimate |
100.00% |
|
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
100.00% |
|