What is SandBox?

The genuine SandBox.sys file is a software component of Agnitum Outpost Firewall Pro by Agnitum.
SandBox.sys is a system driver that belongs to Agnitum Outpost Firewall Pro, a security software that provides a secure firewall and protects systems from incoming targeted attacks. Drivers enable hardware components to communicate with software without additional programming from the software developer. This is not a critical Windows component and should be removed if known to cause problems. Agnitum Outpost Firewall Pro features filtering network traffic and provides protection from various kinds of threats such as hackers, data leaks, malware, etc. The program also blacklists malicious websites, blocks harmful content and automatically encrypts IDs and passwords. Agnitum Ltd is a Russian company that develops security solutions for Windows users. The company started off in 1990 by creating anti-trojan and monitoring solutions for home users. It has currently ventured into personal firewall and Internet security with Outpost Firewall Pro as its flagship product. Agnitum is headquartered in St. Petersburg, Russia.

SandBox stands for SandBox Protection for Host

SandBox.sys is a Windows driver. A driver is a small software program that allows your computer to communicate with hardware or connected devices. This means that a driver has direct access to the internals of the operating system, hardware etc. The free file information forum can help you determine if SandBox.sys is a Windows system file or if it belongs to an application that you can trust.

Run a free scan to check for SandBox drivers in need of updating

SandBox.sys file information

The process known as Host Protection Component or SandBox File System Access Control by Process Manager belongs to software Agnitum Ltd. Host Protection Component or Agnitum Outpost Firewall Pro by Agnitum (

Description: SandBox.sys is not essential for the Windows OS and causes relatively few problems. SandBox.sys is located in a subfolder of "C:\Program Files". Known file sizes on Windows 10/8/7/XP are 256,296 bytes (40% of all occurrences), 113,408 bytes, 124,032 bytes or 363,816 bytes. 
The driver can be started or stopped from Services in the Control Panel or by other programs. The program is not visible. There is no detailed description of this service. SandBox.sys is not a Windows core file. The SandBox.sys file is a Verisign signed file. The SandBox.sys file is digitally signed. SandBox.sys appears to be a compressed file. Therefore the technical security rating is 30% dangerous, however you should also read the user reviews.

Uninstalling this variant: You could uninstall Agnitum Outpost Firewall Pro or Lavasoft Personal Firewall from your computer using the Control Panel applet Uninstall a Program.

Recommended: Identify SandBox.sys related errors

If SandBox.sys is located in the C:\Windows\System32\drivers folder, the security rating is 18% dangerous. The file size is 714,752 bytes (20% of all occurrences), 802,528 bytes, 713,672 bytes, 715,000 bytes or 379,080 bytes. The program is not visible. The file is not a Windows core file. The SandBox.sys file is a Verisign signed file. The file has a digital signature. The service has no detailed description. SandBox.sys is able to record keyboard and mouse inputs.

Uninstalling this variant: The software publisher Agnitum provides an uninstall program (Control Panel->Software->Agnitum Ltd. or Outpost Security Suite Pro 2009).

Important: Some malware camouflages itself as SandBox.sys. Therefore, you should check the SandBox.sys process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Part of SandboxIE
  Ron   (further information)
Kernel für Outpost Firewall
part of Outpost firewall Outpost security suite and Outpost antivirus
  krecekvnocnikosili   (further information)
Безопасный драйвер от фаервола Agnitum Outpost .

Summary: Average user rating of SandBox.sys: based on 4 votes with 4 user comments. 3 users think SandBox.sys is essential for Windows or an installed application. One user thinks it's probably harmless.

Do you have additional information? Help other users!
What do you know about SandBox.sys:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving SandBox issues

A clean and tidy computer is the key requirement for avoiding problems with SandBox. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the SandBox.sys process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

SandBox.sys [all]