sandra.exe

SiSoftware Sandra Diagnostic Utility

Application ProcessSafeSystem Analysis Tool

CPU Usage

2-15%

Memory

100-350 MB

Location

Program Files\SiSoftware\Sandra

Publisher

SiSoftware Ltd

Quick Answer

sandra.exe is safe. It's SiSoftware Sandra's main executable used for system analysis, benchmarking, and diagnostics; it runs in multiple processes when performing scans.

Is it a Virus?

✔ NO - Safe

Must be in C:\Program Files\SiSoftware\Sandra\sandra.exe

Warning

Many processes normal

Sandra uses multi-process architecture for parallel analysis modules

Can I Disable?

✔ YES

Close Sandra or disable modules in settings; you can exit the program without uninstalling

What is sandra.exe?

sandra.exe is the primary executable for SiSoftware Sandra, a comprehensive system analysis and benchmarking tool. It runs diagnostic modules to collect hardware and software details, perform performance tests, and present results in a structured UI. During scans, sandra.exe may spawn child processes to isolate tasks and protect the system.

Sandra uses modular analyzers that spawn separate sandra.exe child processes for each test (CPU, memory, disk, network). It collects hardware details via WMI/SMBIOS and executes benchmarks, with results shown in the UI and saved logs.

Quick Fact: Sandra pioneered modular system analysis in the 1990s. Each test runs in its own process to improve stability and allow parallel data collection.

Types of Sandra Processes

Controller/Manager Process: Main Sandra interface and orchestration (1 instance)
Analyzer Process: Each diagnostic module (CPU, memory, disk, network) runs as a separate process
UI Renderer: Renders graphs and charts for results display
Telemetry/Logger Process: Collects and stores benchmark results and logs
Plugin/Module Process: Third-party or optional diagnostic modules run in isolated processes
Background Worker: Background tasks such as updates and data collection

Is sandra.exe Safe?

Yes, sandra.exe is safe when it is the legitimate SiSoftware Sandra executable from official sources (SiSoftware's site or authorized distributors).

Is sandra.exe a Virus or Malware?

The real sandra.exe is not a virus. However, malware sometimes disguises itself using similar names to trick users.

How to Tell if sandra.exe is Legitimate or Malware

File Location: Must be in C:\Program Files\SiSoftware\Sandra\sandra.exe or C:\Program Files (x86)\SiSoftware\Sandra\sandra.exe. Any sandra.exe elsewhere is suspicious.
Digital Signature: Right-click the file in File Explorer → Properties → Digital Signatures. Should show 'SiSoftware' or 'SiSoftware Ltd' as signer.
Resource Usage: Normal usage is 2-15% CPU per module, 50-350 MB total memory. Extremely high usage when idle is suspicious.
Behavior: Sandra should run when you explicitly start the tool. Multiple instances when the program is not running indicates malware.

Red Flags: If sandra.exe is located in unusual folders (like Temp, AppData\Roaming, or System32), runs when Sandra isn't open, has no digital signature, or uses excessive resources constantly, scan your system with antivirus software immediately. Beware of similarly-named files like "sandra32.exe" or "sandra_x64.exe" from untrusted sources.

Why Is sandra.exe Running on My PC?

sandra.exe runs when you start SiSoftware Sandra or when Sandra modules are scheduled to perform analysis, benchmarks, or background monitoring.

Reasons it's running:

Active System Analysis: You're actively running Sandra tests or benchmarks; each module may spawn its own process during a scan.
Background Monitoring: Sandra monitors hardware sensors and system counters while a session is open or one of its modules is active.
Scheduled Tasks: Sandra may schedule automated scans or updates, causing processes to start at specific times.
Data Collection: During discovery and reporting, Sandra collects and stores performance data to present historical results.
Startup Launch: If installed with a startup entry or via a launcher, Sandra may begin running when Windows starts.

Can I Disable or Remove sandra.exe?

Yes, you can disable sandra.exe. It's safe to close Sandra when not in use, and you can uninstall it completely if you prefer not to use the tool.

How to Stop sandra.exe

End Individual Modules: In Sandra, stop individual analyses or cancel scans from the module manager
Close Application: Close the Sandra UI normally or use Exit
End All Processes: Open Windows Task Manager (Ctrl+Shift+Esc), find sandra.exe, right-click → End Task
Prevent Startup: Task Manager → Startup tab → Disable SiSoftware Sandra
Stop Background Tasks: Sandra Settings → General → Disable background data collection and auto-scan scheduling

How to Uninstall Sandra

✔ Windows Settings → Apps → Apps & Features → SiSoftware Sandra → Uninstall
✔ Control Panel → Programs → Uninstall a program → SiSoftware Sandra → Uninstall
✔ Consider alternate tools if you rely on different benchmark suites

Common Problems: High CPU or Memory Usage

If sandra.exe is consuming excessive resources during analysis or monitoring:

Common Causes & Solutions

Multiple active modules during a full system analysis: Limit to essential modules or run targeted benchmarks instead of a full sweep.
Background sensors and logging: Disable non-critical data collection in Sandra settings to reduce memory usage.
Outdated Sandra version: Update to the latest Sandra release from the official site.
Conflicting third-party plugins: Disable or uninstall plugins you don't need via the Module Manager.
Hardware driver issues: Update system drivers (GPU, chipset, BIOS) to ensure accurate sensor data.
Insufficient memory for large data sets: Close other applications or increase system RAM; adjust memory allocation in Sandra.

Quick Fixes:
1. Open Sandra Task Manager and identify resource-heavy modules
2. Disable non-essential modules or auto-scan tasks
3. Update Sandra to the latest version
4. Reduce data collection scope (disable verbose logging)
5. Restart Sandra after applying changes

Frequently Asked Questions

Is sandra.exe safe?

Yes. sandra.exe is the legitimate executable for SiSoftware Sandra, a system analysis and benchmarking tool. Ensure the file path is C:\Program Files\SiSoftware\Sandra\sandra.exe and that the digital signature shows SiSoftware.

Why is sandra.exe using so much CPU?

High CPU usage typically occurs during active benchmarking or during complex system scans. Check which module is active in Sandra's module manager and consider disabling non-essential modules or running a targeted test.

Can I delete sandra.exe?

Yes, you can uninstall SiSoftware Sandra via Windows Settings → Apps. Your saved results may be kept or removed depending on your sync settings. Reinstalling Sandra later is possible from the official site.

Can I disable sandra.exe at startup?

Yes. Use Task Manager → Startup tab to disable SiSoftware Sandra from launching at startup. This will not uninstall the tool; it only prevents automatic startup.

Where is sandra.exe located?

The legitimate path is typically C:\Program Files\SiSoftware\Sandra\sandra.exe or C:\Program Files (x86)\SiSoftware\Sandra\sandra.exe. If you see it elsewhere, verify digital signatures and source.

Does Sandra need Internet access to run?

Sandra can run offline for diagnostics and benchmarking. Some features like updates or cloud-based result sharing may require Internet access.