Reply to thread

Message

<blockquote data-quote="valvaris" data-source="post: 926634" data-attributes="member: 38787">Sorry had to reread this a few times over....If you would know how Sandblast works you should know it does more then just using a AI-Scanner! - In terms of tech behind Checkpoint is Kaspersky current Engine plus the signatures from Checkpoint The Threat Emulation Executes the File in a Virtual Environment and run&#039;s a VirusTotal Reputation check too.What it did not like is a call to a outside source -&gt; view report page and classifies that as a Trojan. Of course I have uploaded this file multiple times to checkpoint since I am a partner - So nothing amateur about it! - coz that is normal to distrust a file at first and wait and see what the Vendors say!What I can report von Sophos Intercept X Adv. with Sophos XG Firewall Sandbox license it outright blocks the file - So Checkpoint and Co. are not to blame there is a reason for that behavior. Yeah I am also a Sophos Engineer / Architect / Partner.Since the file does not come thru - I can not estimate if Windows Smart-Screen will do something atm and am too lazy to experiment right now.Best regardsVal.</blockquote>

[QUOTE="valvaris, post: 926634, member: 38787"] Sorry had to reread this a few times over.... If you would know how Sandblast works you should know it does more then just using a AI-Scanner! - In terms of tech behind Checkpoint is Kaspersky current Engine plus the signatures from Checkpoint The Threat Emulation Executes the File in a Virtual Environment and run's a VirusTotal Reputation check too. What it did not like is a call to a outside source -> view report page and classifies that as a Trojan. Of course I have uploaded this file multiple times to checkpoint since I am a partner - So nothing amateur about it! - coz that is normal to distrust a file at first and wait and see what the Vendors say! What I can report von Sophos Intercept X Adv. with Sophos XG Firewall Sandbox license it outright blocks the file - So Checkpoint and Co. are not to blame there is a reason for that behavior. Yeah I am also a Sophos Engineer / Architect / Partner. Since the file does not come thru - I can not estimate if Windows Smart-Screen will do something atm and am too lazy to experiment right now. Best regards Val. [/QUOTE]

Verification