query.exePermalink

  • File Path: C:\windows\SysWOW64\query.exe
  • Description: MultiUser Query Utility

HashesPermalink

Type Hash
MD5 CF07B03F443C3E3062FDFDEF6BDD6E6B
SHA1 21764E67596DC13633CADBF1EB527CABC614010E
SHA256 DFF9BB9E1792C24432DB6D3B3272E8F480432711955CEA3385D8943AC1CD558F
SHA384 6D46A4AEDB3E88B2AE2D709E9C9A65822D9B72FF80962FBF90B21F1EE7912CDABB556FF915788688792BBBA1C8140FCD
SHA512 AA10E8F4B77CF243CD3388C693ACE6C438B5903C59C8ED2A3C226A8B8E4CB414520CEDF843BE3BC7DC9D381DFA4A12677ACC3CF6B338036EEC9FA7141665DE71
SSDEEP 192:s+3WJiZoUiMuUbyeA7MAPKOK+k9C0X9iTZjtmLsYBMJ9B9QkiWkP4Wz3WGm+:zWJiwOQk9C0X9UxILsgk3KP4Wz3W7

SignaturePermalink

  • Status: The file C:\windows\SysWOW64\query.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File MetadataPermalink

  • Original Filename: query.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)Permalink

File Score
C:\windows\SysWOW64\change.exe 63
C:\windows\SysWOW64\reset.exe 88

Additional Info*Permalink

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

query commandsPermalink

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Displays information about processes, sessions, and Remote Desktop Session Host servers. To find out what’s new in the latest version, see What’s New in Remote Desktop Services in Windows Server.

SyntaxPermalink

query process
query session
query termserver
query user

ParametersPermalink

Parameter Description
query process Displays information about processes running on an Remote Desktop Session Host server.
query session Displays information about sessions on a Remote Desktop Session Host server.
query termserver Displays a list of all Remote Desktop Session Host servers on the network.
query user Displays information about user sessions on a Remote Desktop Session Host server.

Additional ReferencesPermalink

MIT License. Copyright (c) 2020-2021 Strontic.