Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 3.88%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.06%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.19%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.02%
6.2.9200.16384 (win8_rtm.120725-1247) 2.05%
6.2.9200.16384 (win8_rtm.120725-1247) 11.99%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.06%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.06%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.02%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.06%
6.1.7600.16385 (win7_rtm.090713-1255) 1.11%
6.1.7600.16385 (win7_rtm.090713-1255) 2.26%
6.1.7600.16385 (win7_rtm.090713-1255) 3.11%
6.1.7600.16385 (win7_rtm.090713-1255) 31.04%
6.1.7600.16385 (win7_rtm.090713-1255) 4.56%
6.1.7600.16385 (win7_rtm.090713-1255) 11.42%
6.1.7600.16385 (win7_rtm.090713-1255) 1.43%
6.1.7600.16385 (win7_rtm.090713-1255) 1.64%
6.1.7600.16385 (win7_rtm.090713-1255) 0.87%
6.1.7600.16385 (win7_rtm.090713-1255) 0.81%
6.1.7600.16385 (win7_rtm.090713-1255) 0.02%
6.1.7600.16385 (win7_rtm.090713-1255) 0.02%
6.1.7600.16385 (win7_rtm.090713-1255) 0.02%
6.1.7600.16385 (win7_rtm.090713-1255) 0.02%
6.1.7600.16385 (win7_rtm.090713-1255) 0.02%
View more

Relationships

spoolsv.exe

Spooler SubSystem App by Microsoft

Remove spoolsv.exe
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   49b6dd6ab3715b7a67965f17194e98a9
SHA1:   748cce9f0ddad553aad3e695f10d6249fde953c2
SHA256:   331d69f3630ba978ac13471a2e7465351d04416343a595c62b94badffcd02b3a
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

spoolsv.exe runs as a service under the name Spouleur d'impression (Spooler) with extensive SYSTEM privileges (full administrator access). This version is designed to run on Windows 7 and is compiled as a 32 bit program.

DetailsDetails

File name:spoolsv.exe
Publisher:Microsoft Corporation
Product name:Spooler SubSystem App
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\spoolsv.exe
Original name:spoolsv.exe.mui
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:309 KB (316,416 bytes)
Digital DNA
Entropy:6.401537
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00324652%
0.028634%
Kernel CPU:0.00210995%
0.013761%
User CPU:0.00113657%
0.014873%
Kernel CPU time:583,654 ms/min
100,923,805ms/min
User CPU time:0 ms/min
0 ms/min
CPU cycles:161,496/sec
17,470,203/sec
Context switches:5/sec
284/sec
Memory
Private memory:6.71 MB
21.59 MB
Private (maximum):9.85 MB
Private (minimum):6.51 MB
Non-paged memory:6.71 MB
21.59 MB
Virtual memory:74.37 MB
140.96 MB
Virtual memory (peak):115.54 MB
169.69 MB
Working set:6.96 MB
18.61 MB
Working set (peak):49.4 MB
37.95 MB
Page faults:334,230/min
2,039/min
I/O
I/O read transfer:1.42 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:1.38 KB/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:155 Bytes/sec
448.09 KB/min
I/O other operations:8/sec
1,671/min
Resource allocations
Threads:14
12
Handles:776
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\Windows\System32\spoolsv.exe
Owner:SYSTEM
Windows Service
Service name:Spooler
Display name:Spouleur d'impression
Description:“Charge les fichiers en mémoire pour une impression ultérieure”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.03249526%
0.272967%
Kernel CPU:0.02759637%
0.107585%
User CPU:0.00489889%
0.165382%
CPU cycles:124,303/sec
5,741,424/sec
Context switches:1/sec
79/sec
Memory:1.23 MB
1.16 MB
spoolsv.exe (main module)
Total CPU:0.00250098%
Kernel CPU:0.00181410%
User CPU:0.00068688%
CPU cycles:47,886/sec
Memory:320 KB
sechost.dll
Total CPU:0.00121864%
Kernel CPU:0.00083068%
User CPU:0.00038796%
CPU cycles:11,594/sec
Memory:100 KB
fdPnp.dll
Total CPU:0.00093374%
Kernel CPU:0.00044116%
User CPU:0.00049257%
CPU cycles:16,332/sec
Memory:52 KB
msvcrt.dll
Total CPU:0.00018991%
Kernel CPU:0.00007913%
User CPU:0.00011078%
CPU cycles:13,616/sec
Memory:688 KB
WSDMon.dll
Total CPU:0.00005323%
Kernel CPU:0.00005323%
User CPU:0.00000000%
CPU cycles:235/sec
Memory:188 KB
FunDisc.dll
Total CPU:0.00005277%
Kernel CPU:0.00004141%
User CPU:0.00001136%
CPU cycles:145/sec
Memory:172 KB
usbmon.dll
Total CPU:0.00004541%
Kernel CPU:0.00003018%
User CPU:0.00001523%
CPU cycles:274/sec
Memory:44 KB
localspl.dll
Total CPU:0.00004465%
Kernel CPU:0.00001797%
User CPU:0.00002669%
CPU cycles:863/sec
Memory:764 KB
tcpmon.dll
Total CPU:0.00000791%
Kernel CPU:0.00000000%
User CPU:0.00000791%
CPU cycles:189/sec
Memory:156 KB
PrintIsolationProxy.dll
Total CPU:0.00000130%
Kernel CPU:0.00000000%
User CPU:0.00000130%
CPU cycles:7/sec
Memory:48 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 59.50%
Windows 7 Ultimate 25.00%
Windows 7 Professional 12.00%
Windows 7 Home Basic 3.00%
Windows Vista Home Premium 0.50%

Distribution by countryDistribution by country

United States installs about 50.51% of Spooler SubSystem App.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 24.59%
Hewlett-Packard 21.31%
ASUS 14.75%
Acer 13.93%
Toshiba 13.11%
Sony 4.92%
GIGABYTE 2.46%
Alienware 1.64%
Samsung 1.64%
Lenovo 1.64%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE