Endpoint protection flagged Robotiq ScriptExecutor as “Suspicious Ransomware Behavior”

Hi there,

Yes, this type of detection is entirely possible for a component like Robotiq.ScriptExecutor.exe. Script executors often perform operations that can resemble suspicious behavior to endpoint protection systems—such as modifying or creating multiple files in a short timeframe. These behaviors, while legitimate in automation contexts, can resemble patterns used by ransomware.

It’s also important to note that different endpoint protection systems use varying heuristics and behavioral analysis techniques. What one system flags as suspicious, another might allow without any alerts. These detections are often based on generic rules that aim to prevent unknown threats but can occasionally result in false positives, especially with automation tools or scripting engines.

If you’re confident that the executable is from a trusted source (e.g., installed from the official Robotiq.ai package and not tampered with), it is safe to whitelist Robotiq.ScriptExecutor.exe in your endpoint protection software. Whitelisting should prevent further alerts or interruptions related to this process.

If needed, we can also provide a hash or digital signature details for verification, or collaborate with your IT/security team to assist in the whitelisting process.

Let us know if you’d like further assistance.

Best regards,
Robotiq.ai Support Team