spoolsv.exe
Spooler SubSystem App by Microsoft
Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
MD5: | f8e1fa03cb70d54a9892ac88b91d1e7b |
SHA1: | 1867af779959d74b9e50d87fe0857aab116e9edf |
SHA256: | 55eecaad4c7ec0868be937f4adda026afdfcc614e94de4b3248bff2be7ff13e8 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
spoolsv.exe runs as a service under the name Spouleur d'impression (Spooler) with extensive SYSTEM privileges (full administrator access). This version is designed to run on Windows 7 and is compiled as a 64 bit program.
Details
File name: | spoolsv.exe |
Publisher: | Microsoft Corporation |
Product name: | Spooler SubSystem App |
Description: | Microsoft® Windows® Operating System |
Typical file path: | C:\Windows\System32\spoolsv.exe |
Original name: | spoolsv.exe.mui |
File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
Product version: | 6.1.7600.16385 |
Size: | 545.5 KB (558,592 bytes) |
Digital DNA |
Entropy: | 6.401537 |
File packed: | No |
Code language: | Microsoft Visual C++ |
.NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00242263% | |
Kernel CPU: | 0.00165683% | |
User CPU: | 0.00076580% | |
Kernel CPU time: | 77,309,132 ms/min | |
CPU cycles: | 1,031,839/sec | |
Context switches: | 1/sec | |
Memory |
Private memory: | 10.54 MB | |
Private (maximum): | 17.24 MB | |
Private (minimum): | 8.56 MB | |
Non-paged memory: | 10.54 MB | |
Virtual memory: | 98.03 MB | |
Virtual memory (peak): | 109.29 MB | |
Working set: | 12.54 MB | |
Working set (peak): | 21.21 MB | |
Page faults: | 433,791/min | |
I/O |
I/O read transfer: | 70.88 KB/sec | |
I/O read operations: | 9/sec | |
I/O write transfer: | 57.36 KB/sec | |
I/O write operations: | 3/sec | |
I/O other transfer: | 267 Bytes/sec | |
I/O other operations: | 21/sec | |
Resource allocations |
Threads: | 15 | |
Handles: | 363 | |
Process properties
Integrety level: | System |
Platform: | 64-bit |
Command line: | C:\Windows\System32\spoolsv.exe |
Owner: | SYSTEM |
Windows Service |
Service name: | Spooler |
Display name: | Spouleur d'impression |
Description: | “Charge les fichiers en mémoire pour une impression ultérieure” |
Type: | Win32OwnProcess, InteractiveProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
ntdll.dll |
Total CPU: | 0.01876174% | |
Kernel CPU: | 0.01066558% | |
User CPU: | 0.00809616% | |
CPU cycles: | 436,971/sec | |
Context switches: | 2/sec | |
Memory: | 1.67 MB | |
sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft) |
Total CPU: | 0.00113344% | |
Kernel CPU: | 0.00042239% | |
User CPU: | 0.00071105% | |
CPU cycles: | 15,811/sec | |
Memory: | 124 KB | |
spoolsv.exe (main module) |
Total CPU: | 0.00079363% | |
Kernel CPU: | 0.00056619% | |
User CPU: | 0.00022744% | |
CPU cycles: | 52,571/sec | |
Memory: | 560 KB | |
FunDisc.dll |
Total CPU: | 0.00014019% | |
Kernel CPU: | 0.00001845% | |
User CPU: | 0.00012175% | |
CPU cycles: | 2,592/sec | |
Memory: | 204 KB | |
fdPnp.dll |
Total CPU: | 0.00008870% | |
Kernel CPU: | 0.00004151% | |
User CPU: | 0.00004720% | |
CPU cycles: | 1,836/sec | |
Memory: | 64 KB | |
localspl.dll |
Total CPU: | 0.00008814% | |
Kernel CPU: | 0.00002141% | |
User CPU: | 0.00006673% | |
CPU cycles: | 1,937/sec | |
Memory: | 956 KB | |
usbmon.dll |
Total CPU: | 0.00003678% | |
Kernel CPU: | 0.00002177% | |
User CPU: | 0.00001501% | |
CPU cycles: | 342/sec | |
Memory: | 60 KB | |
msvcrt.dll (Windows NT CRT DLL by Microsoft) |
Total CPU: | 0.00002952% | |
Kernel CPU: | 0.00000000% | |
User CPU: | 0.00002952% | |
CPU cycles: | 6,350/sec | |
Memory: | 636 KB | |
WSDMon.dll |
Total CPU: | 0.00001862% | |
Kernel CPU: | 0.00001110% | |
User CPU: | 0.00000752% | |
CPU cycles: | 244/sec | |
Memory: | 232 KB | |
PrintIsolationProxy.dll |
Total CPU: | 0.00001477% | |
Kernel CPU: | 0.00001477% | |
User CPU: | 0.00000000% | |
CPU cycles: | 4/sec | |
Memory: | 64 KB | |
ole32.dll |
Total CPU: | 0.00000184% | |
Kernel CPU: | 0.00000000% | |
User CPU: | 0.00000184% | |
CPU cycles: | 145/sec | |
Memory: | 2.01 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
59.50% |
|
Windows 7 Ultimate |
25.00% |
|
Windows 7 Professional |
12.00% |
|
Windows 7 Home Basic |
3.00% |
|
Windows Vista Home Premium |
0.50% |
|
Distribution by country
United States installs about 50.51% of Spooler SubSystem App.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
24.59% |
|
Hewlett-Packard |
21.31% |
|
ASUS |
14.75% |
|
Acer |
13.93% |
|
Toshiba |
13.11% |
|
Sony |
4.92% |
|
GIGABYTE |
2.46% |
|
Alienware |
1.64% |
|
Samsung |
1.64% |
|
Lenovo |
1.64% |
|