my tweets are severely limited by my lack of understanding of what I am doing.
Carbon Black aren't only vendor to upload files to VirusTotal (and in fairness to CB it's an optional feature which is disabled by default).
-
Nexthink, an Endpoint analytics product, transparently queries hashes on VirusTotal and uses result number to assign low/medium/high malware
...which is actually against the VT terms of service, but that's another topic.
