← Back to driver explorer
Driver intelligenceVulnerableVerified
sandra.sys
Description not recorded.
Known samples 5
0 recorded TRUE · 5 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
sandra.sysSample 1 · HVCI FALSE
- MD5
9a237fa07ce3ed06ea924a9bed4a6b99- SHA1
82ba5513c33e056c3f54152c8555abf555f3e745- SHA256
1aaf4c1e3cb6774857e2eef27c17e68dc1ae577112e4769665f516c2e8c4e27b- Imphash
756adaea6a3f9f0cdaff73d1a49ca201- Authentihash MD5
6f72f204305c65af27c9f97fe4296b54- Authentihash SHA1
b785192962dd159acd960c8f8f9f211747c83610- Authentihash SHA256
b9661dd0dcf81d2ee8e5eb3b728c907b4eb861806971051ad772f7fe4d09eb6a- Machine
- AMD64
- Version
- 10.11.1.1 built by: WinDDK
- Publisher
- SiSoftware
sandra.sysSample 2 · HVCI FALSE
- MD5
5efbbfcc6adac121c8e2fe76641ed329- SHA1
2fe874274bac6842819c1e9fe9477e6d5240944d- SHA256
0eab16c7f54b61620277977f8c332737081a46bc6bbde50742b6904bdd54f502- Imphash
756adaea6a3f9f0cdaff73d1a49ca201- Authentihash MD5
59b18c35a208c7b07e660311e368b31e- Authentihash SHA1
073626838c7211f06a4dcf6d618caa3256dcfe94- Authentihash SHA256
367035e87b8a361bdc51f55a2467b2606eb29feae3af892d8c17df1841c20b97- Machine
- AMD64
- Version
- 15.18.1.1 built by: WinDDK
- Publisher
- SiSoftware
sandra.sysSample 3 · HVCI FALSE
- MD5
0be4a11bc261f3cd8b4dbfebee88c209- SHA1
d32408c3b79b1f007331d2a3c78b1a7e96f37f79- SHA256
cbf74bed1a4d3d5819b7c50e9d91e5760db1562d8032122edac6f0970f427183- Imphash
abbab73b191d90dc642cbbc1f31d750d- Authentihash MD5
bdea036b5792ac51cef9f16b6688fcf8- Authentihash SHA1
fa5499c24395cd44fa8c7129bd433bc00697d0a2- Authentihash SHA256
75e539170a00e447842a85441be36dc9e1fa81a3f6386806f3d90e7b4cca1ac1- Machine
- IA64
- Version
- 15.18.1.1 built by: WinDDK
- Publisher
- SiSoftware
sandra.sysSample 4 · HVCI FALSE
- MD5
d86269ba823c9ecf49a145540cd0b3df- SHA1
f9eb4c942a89b4ba39d2bdbfd23716937ccb9925- SHA256
1284a1462a5270833ec7719f768cdb381e7d0a9c475041f9f3c74fa8eea83590- Imphash
296afaa5ea70bbd17135afcd04758148- Authentihash MD5
fa4d63404779505dc50914274f9140d5- Authentihash SHA1
0eb3f60cfbb78a7299a3fa0aae4f9ede2bb60e6a- Authentihash SHA256
752b31418053dc19c0573d16953d5ad24723bd57e5f62eff391e632548855b5f- Machine
- I386
- Version
- 10.2.1.1 built by: WinDDK
- Publisher
- SiSoftware
sandra.sysSample 5 · HVCI FALSE
- MD5
230fd3749904ca045ea5ec0aa14006e9- SHA1
22c08d67bf687bf7ddd57056e274cbbbdb647561- SHA256
d7c79238f862b471740aff4cc3982658d1339795e9ec884a8921efe2e547d7c3- Imphash
8e96d1a56746c6f6f30f1a0963ce2f26- Authentihash MD5
28c35352251b73a8b6a2ba74b137fa63- Authentihash SHA1
70d749add1825fad7c1c5107bc7a349b8e3740e3- Authentihash SHA256
31867db933ed4407d22de8f0ef9b52958c40c63c2328e1863dfd3fe58d3b53c3- Machine
- I386
- Version
- 15.18.1.1 built by: WinDDK
- Publisher
- SiSoftware
Recorded command
sc.exe create sandra.sys binPath=C:\windows\temp\sandra.sys type=kernel && sc.exe start sandra.sysElevate privileges · Privileges: kernel · OS: Windows 10