https://www.virustotal.com/gui/url/9525d0fe32cebf7933bf84dcfad93811e799c7e8460e374f230a232893a1ba9a
... and when the file hash is given (I download the file from the URL and then upload it to VirusTotal, using my browser) ...
https://www.virustotal.com/gui/file/03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8
(My expectation is that it also computes the hash from the file found at the download url)
To add to this, the file lives on my system as "Optimizer-16.7.exe", but the VirusTotal GUI, after I upload that file, gives it as "Optimizer.exe"
_a9•1h ago
You can see and compare the different vendors of each. File analysis goes to all the antivirus' and does the sandbox stuff and the URL analysis goes to things like Google Safebrowsing, phishing check services, etc
tldr different systems for URL analysis (web firewall check) & file analysis (antivirus/sandbox check)
nilslindemann•1h ago