driverquery.exe

  • File Path: C:\windows\system32\driverquery.exe
  • Description: Queries the drivers on a system

Hashes

Type Hash
MD5 F318244F614C2BECA454040FEDA82F9C
SHA1 C1117E1FB6D489C210C464AF6E92C5727A96F7EE
SHA256 0B9AF0395FE2E9F5ACFCA6945F9F678FA4453F179E6A0E7DC32A259120366A01
SHA384 9ECCD979FA50FF7E1BEA401E11EDEA04A0DE6FEEB2F0585B3FDCDE29123214095CD65458798E6A8DE031944D92A776A1
SHA512 A239EE63CED77F5AFE705B68538049037B5987342792055A5366222C08C9588DC8FA358626F761DA6675868274FA8968DA1617A336C61F75C538561ACCD38FAB
SSDEEP 1536:+7sJFSTkPn9CDgQAVxk4T7tbULMnjuxlQVWtrs/bM4A4kDID55dxyY:3FS4nkebjjAlQCI/bD5/xv

Signature

  • Status: The file C:\windows\system32\driverquery.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: drvqry.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


driverquery

Enables an administrator to display a list of installed device drivers and their properties. If used without parameters, driverquery runs on the local computer.

Syntax

driverquery [/s <system> [/u [<domain>\]<username> [/p <password>]]] [/fo {table | list | csv}] [/nh] [/v | /si]

Parameters

Parameter Description
/s <system> Specifies the name or IP address of a remote computer. Do not use backslashes. The default is the local computer.
/u [<domain>]<username> Runs the command with the credentials of the user account as specified by user or domain\user. By default, /s uses the credentials of the user who is currently logged on to the computer that is issuing the command. /u can’t be used unless /s is specified.
/p <password> Specifies the password of the user account that is specified in the /u parameter. /p cannot be used unless /u is specified.
/fo table Formats the output as a table. This is the default.
/fo list Formats the output as a list.
/fo csv Formats the output with comma-separated values.
/nh Omits the header row from the displayed driver information. Not valid if the /fo parameter is set to list.
/v Displays verbose output. /v is not valid for signed drivers.
/si Provides information about signed drivers.
/? Displays help at the command prompt.

Examples

To display a list of installed device drivers on the local computer, type:

driverquery

To display the output in a comma-separated values (CSV) format, type:

driverquery /fo csv

To hide the header row in the output, type:

driverquery /nh

To use the driverquery command on a remote server named server1 using your current credentials on the local computer, type:

driverquery /s server1

To use the driverquery command on a remote server named server1 using the credentials for user1 on the domain maindom, type:

driverquery /s server1 /u maindom\user1 /p p@ssw3d

Additional References


MIT License. Copyright (c) 2020-2021 Strontic.