• File Path: C:\Windows\system32\PnPUnattend.exe
  • Description: PnP unattend action


Type Hash
MD5 52EE8C8EDBA7F10FB6A926B11A39DDB7
SHA1 7296CE7FB574AC27EE1384C7D31394F0774B7D98
SHA256 E60DC999784F55E11BFC8170D810BB4EEE2CFCE7B46B7D91BB6BC2649A44E8C5
SHA384 DF2CC5326410F1CCBD9E5CD72B2A8DABD0B907309EC4F0C8524A2A9043546911A50C0CF802B1F1ED8FDD2685072CC174
SHA512 F038E9C2B3202FFEEC96F774F042088530E60507C9DEACBD187216179E81A4AA54F553C796036240EA13634504FF7C2D51480E0832D9939671836EBFF3A95B9C
SSDEEP 1536:ayY4ZezJ8JWh1cW6YQvDAU3Qkr4UgHSt:LeKkhWW6lMUprbgm
IMP 8EA1126578A646C2F1064617B829A09E
PESHA1 657038916F79A494BC0B8AEB612A4AC18F6764A5
PE256 23D40A58CB6135B198F4C9053C530011E7B761F6511A6284B6DF527D83634135

Runtime Data

Usage (stdout):

AuditSystem, Unattend online driver install 

   PnPUnattend.exe [auditSystem | /help /? /h] [/s] [/L]
       auditSystem   Online driver install.
       /help /? /h    This help.
       /s             Search without installing.
       /L             Print Logging information to the command line.

Loaded Modules:



  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PnPUnattend.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link:

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


Audits a computer for device drivers, and perform unattended driver installations, or search for drivers without installing and, optionally, report the results to the command line. Use this command to specify the installation of specific drivers for specific hardware devices.


Preliminary preparation is required for older versions of the Windows operating system. Prior to using this command, you must complete the following tasks:

  1. Create a directory for the drivers you want to install. For example, create a folder at C:\Drivers\Video for video adapter drivers.

  2. Download and extract the driver package for your device. Copy the contents of the subfolder that contains the INF file for your version of the operating system and any subfolders to the video folder that you created. For example, copy the video driver files to C:\Drivers\Video.

  3. Add a system environment path variable to the folder you created in step 1.For example, C:\Drivers\Video.

  4. Create the following registry key, and then for the DriverPaths key you create, set the Value Data to 1.

  5. For Windows® 7 navigate the registry path: HKEY_LOCAL_Machine\Software\Microsoft\Windows NT\CurrentVersion\, and then create the keys: UnattendSettings\PnPUnattend\DriverPaths\


PnPUnattend.exe auditsystem [/help] [/?] [/h] [/s] [/l]


Parameter Description
auditsystem Specifies online driver install.<p>Required, except when this command is run with either the /help or /? parameters.
/s Optional. Specifies to search for drivers without installing.
/l Optional. Specifies to display the log information for this command in the command prompt.
/? | /help Optional. Displays help for this command at the command prompt.


To command shows how to use the PNPUnattend.exe to audit a computer for possible driver updates, and then report the findings to the command prompt, type:

pnpunattend auditsystem /s /l

Additional References

MIT License. Copyright (c) 2020-2021 Strontic.