spoolsv.exe
Spooler SubSystem App by Microsoft
| Version: | 6.2.8102.0 (winmain_win8m3.110823-1455) |
| MD5: | a706b61c634e2a948a3c4d653d5a7675 |
| SHA1: | 4bcc5c2450ac797bbc2f5db3a06d0ee5b5efecbf |
| SHA256: | 1ac32a268a66efc06ea6da825184e608653e402d19c2e605b9f761343ae413f0 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
spoolsv.exe runs as a service under the name Spouleur d'impression (Spooler) with extensive SYSTEM privileges (full administrator access). This version is installed on Windows 8 and is compiled as a 32 bit program.
Details
| File name: | spoolsv.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Spooler SubSystem App |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\spoolsv.exe |
| Original name: | spoolsv.exe.mui |
| File version: | 6.2.8102.0 (winmain_win8m3.110823-1455) |
| Product version: | 6.2.8102.0 |
| Size: | 376 KB (385,024 bytes) |
| Build date: | 8/24/2011 5:27 AM |
| Digital DNA |
| Entropy: | 6.401537 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00182153% | |
| Kernel CPU: | 0.00133539% | |
| User CPU: | 0.00048615% | |
| Kernel CPU time: | 109 ms/min | |
| Memory |
| Private memory: | 3.01 MB | |
| Private (maximum): | 7.83 MB | |
| Private (minimum): | 6.84 MB | |
| Non-paged memory: | 3.01 MB | |
| Virtual memory: | 72.31 MB | |
| Virtual memory (peak): | 74.08 MB | |
| Working set: | 6.97 MB | |
| Working set (peak): | 7.84 MB | |
| Resource allocations |
| Threads: | 14 | |
| Handles: | 375 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | C:\Windows\System32\spoolsv.exe |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | Spooler |
| Display name: | Spouleur d'impression |
| Description: | “Charge les fichiers en mémoire pour une impression ultérieure” |
| Type: | Win32OwnProcess, InteractiveProcess |
| Parent process: | services.exe (by Microsoft) |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.05397854% | |
| Kernel CPU: | 0.05397854% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 97,821/sec | |
| Context switches: | 3/sec | |
| Memory: | 1.36 MB | |
| usbmon.dll |
| Total CPU: | 0.00085741% | |
| Kernel CPU: | 0.00085741% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,028/sec | |
| Memory: | 172 KB | |
| spoolsv.exe (main module) |
| Total CPU: | 0.00084491% | |
| Kernel CPU: | 0.00056361% | |
| User CPU: | 0.00028130% | |
| CPU cycles: | 38,212/sec | |
| Memory: | 388 KB | |
| fdPnp.dll |
| Total CPU: | 0.00057769% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00057769% | |
| CPU cycles: | 5,936/sec | |
| Memory: | 52 KB | |
| sechost.dll |
| Total CPU: | 0.00028230% | |
| Kernel CPU: | 0.00028230% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,946/sec | |
| Memory: | 204 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
59.50% |
|
| Windows 7 Ultimate |
25.00% |
|
| Windows 7 Professional |
12.00% |
|
| Windows 7 Home Basic |
3.00% |
|
| Windows Vista Home Premium |
0.50% |
|
Distribution by country
United States installs about 50.51% of Spooler SubSystem App.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
24.59% |
|
| Hewlett-Packard |
21.31% |
|
| ASUS |
14.75% |
|
| Acer |
13.93% |
|
| Toshiba |
13.11% |
|
| Sony |
4.92% |
|
| GIGABYTE |
2.46% |
|
| Alienware |
1.64% |
|
| Samsung |
1.64% |
|
| Lenovo |
1.64% |
|
