home

SbieDrv.sys

Sandboxie

SANDBOXIE L.T.D

Publisher:
SANDBOXIE L.T.D  (signed and verified)

Product:
Sandboxie

Description:
Sandboxie Kernel Mode Driver

Version:
3.64

MD5:
33c05d112590e9bcfda9d967ca1097fc

SHA-1:
fc088549f24fa0eeefa4470b6afbc41544fdffbe

SHA-256:
61e4deb16a2164e414ba97455878c30926cebff59b77907abca9fb36e5dfa1c5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 4:48:49 PM UTC  (today)

File size:
124.4 KB (127,360 bytes)

Product version:
3.64

Copyright:
Copyright © 2004-2012 by Ronen Tzur

Original file name:
SbieDrv.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Program Files\sandboxie\crack\sbiedrv.sys

Digital Signature
Signed by:
SANDBOXIE L.T.D

Authority:
Root Agency

Valid from:
1/1/2010 4:57:51 PM

Valid to:
1/1/2040 6:59:59 AM

Subject:
CN=SANDBOXIE L.T.D

Issuer:
CN=Root Agency

Serial number:
1CFE877A9155569F49A6ED5F8CFF133A

File PE Metadata
Compilation timestamp:
2/6/2012 7:23:35 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
3072:b1GHIFtZNRoONVGIpnjavO6csO3tsARZVrUyNp7Xh2:C0VPnixO3nRZV1Nxh2

Entry address:
0x1B8A0

Entry point:
55, 8B, EC, 8B, 45, 08, 53, 57, A3, BC, AB, 02, 00, 33, FF, 89, 78, 34, E8, 89, FA, FF, FF, 8A, D8, 84, DB, 0F, 84, FB, 00, 00, 00, E8, F4, 10, FF, FF, 3B, C7, A3, C4, A7, 02, 00, 75, 0E, 57, 57, 68, 50, 04, 01, C1, E8, 11, 70, FF, FF, 32, DB, 84, DB, 0F, 84, D7, 00, 00, 00, E8, 40, 96, FE, FF, 8A, D8, 84, DB, 0F, 84, C8, 00, 00, 00, 56, 8B, 75, 0C, 6A, 01, FF, 76, 04, FF, 35, C4, A7, 02, 00, E8, 64, 70, FF, FF, 3B, C7, A3, C0, AB, 02, 00, 75, 02, 32, DB, 84, DB, 0F, 84, A0, 00, 00, 00, 8B, C6, E8, FC, FA...
 
[+]

Entropy:
6.4250

Developed / compiled with:
Microsoft Visual C++

Code size:
109.5 KB (112,128 bytes)

Scan SbieDrv.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.