Endpoint Standard: When do hashes of sensor drivers change

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

When does the hash value change for the following sensor drivers?

• C:\Windows\System32\drivers\ctifile.sys
• C:\Windows\System32\drivers\ctinet.sys
• C:\Windows\System32\drivers\cbelam.sys
• C:\Windows\Syswow64\ctintev.dll

Environment

• Endpoint Standard Sensor: All Versions
• Microsoft Windows: All Supported Versions

Resolution

• The hash value may change between different sensor versions. 
• They will not change unless the sensor is upgraded