Secure Endpoint BemReporter.exe Retrospective Quarantine

[mski7861]

Secure Endpoint classified BemReporter.exe SHA256: bbffca2256d58c47fec4cb62ff4cb3af2adf9ecb34eba8771dbf4daa90d99640 (C:\Program Files\HP\Sure Click\4.4.2.2945\servers\BemReporter.exe) disposition unknown which triggered a retrospective quarantine of the file and ultimately isolated the host.

Virus Total has no detections and talos has no score available.  

Since the file has an unknown disposition, is the expected behavior to perform a retrospective quarantine?  

[Ken Stieers]

No, but check under Outbreak Control/Simple and see if someone added it.
It doesn't come up in ThreatGrid either.

[mski7861]

Thanks for the suggestion Ken, however I didn't see the SHA added to my simple detection or blocked apps.