Gridinsoft Logo
File Icon

The spoolsv.exe (Spooler SubSystem App) File Analysis

Updated 1 month ago
Checked by Malware Check
spoolsv.exe

Technical Analysis

File Name spoolsv.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-16 07:00:22 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
929,792
File Size (bytes)
2025-11-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5a121306ecc0ec9f4cdd7ddf00bc8575
SHA1
dc9745cffc4a571181577e4bba890303cb9ba538
SHA256
699a1956cf55d5f588ffd1df4950073e543867366d0c0c1feee4dd6436c50f2f
SHA512
7a185c84aff8955d9700a6683ae768f52bd3f0f18d22fa8f46390aea72794b4720481619145e6cf96cc7984053d28b4b08365b1af5117024eeff264475b19364
ImpHash
9c2ce7e74236320624a84646afa51db8

PE Analysis

Basic Information

▼
Icon
Hash: 0b11798f2585222f1f59cdcbac681ee3
Fuzzy: 90c34561fc380f0e17dda65a9a6414fb
dHash: 48c4c1c08ecf6c00
Image Base 0x140000000
Entry Point 0x14000e1a0
Compilation Time 2070-12-08 23:59:13
Checksum 0x000e63ef (Actual: 0x000e63ef)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path spoolsv.pdb
Digital Signature No valid SignedData structure was found.
Imports 38 libraries
Exports 225 functions
Resources 17 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Spooler SubSystem App
FileVersion 10.0.22621.6133 (WinBuild.160101.0800)
InternalName spoolsv.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename spoolsv.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.22621.6133
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 569,513 bytes 573,440 bytes 6.32 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 4322711B399725887301612DC42FB80E
.rdata 0x0008d000 240,158 bytes 241,664 bytes 4.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0C5B9F20E1E448D6B7A99BB840F4BAAD
.data 0x000c8000 10,840 bytes 4,096 bytes 2.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C3CA300EDF89240BFA666672EDA724FC
.pdata 0x000cb000 25,932 bytes 28,672 bytes 5.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A1D61292CD9701034A39F586FC8295CA
.didat 0x000d2000 416 bytes 4,096 bytes 0.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 403BB8349E9F65155B5C59ECCD77EDD8
.rsrc 0x000d3000 58,096 bytes 61,440 bytes 6.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F2B18CD5C596BB5F1E0ED1DBE5BADC08
.reloc 0x000e2000 11,440 bytes 12,288 bytes 5.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ EF34CAA8A853EF21DD210DC5F79CDBF2

Resource Analysis

▼
Total Resources: 17 (57,126 bytes)
Resource Type Count Total Size Percentage
MUI 1 208 bytes
0.4%
RT_ICON 13 55,112 bytes
96.5%
RT_GROUP_ICON 1 188 bytes
0.3%
RT_VERSION 1 920 bytes
1.6%
RT_MANIFEST 1 698 bytes
1.2%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Spooler SubSystem App
File Version 10.0.22621.6133 (WinBuild.160101.0800)
Original Name spoolsv.exe
Internal Name spoolsv.exe
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware