<h2>CrowdStrike Submission Test Results failed for falcon sandbox scan.</h2><br/><div style="overflow-x:auto"><article><div ><h3 >Issue </h3><section><ul><li>When we submit the Observable type FILE on the SIR to CrowdStrike sandbox. The results are turning out to be as failed.</li></ul></section></div><div ><h3 >Release</h3><section><ul><li>All</li></ul></section></div><div ><h3 >Cause</h3><section><ul><li>Error received from Sandbox API:<br />"The file "cc3efdf6a184c0a03d8244306923f4a6f8444c4d8f80999cd63ff005f87f4c37" has the file format "image", which is not supported".</li><li>Just as an FYI, <a href="https://www.crowdstrike.com/endpoint-security-products/falcon-sandbox-malware-analysis/falcon-sandbox-faq/" rel="nofollow">https://www.crowdstrike.com/endpoint-security-products/falcon-sandbox-malware-analysis/falcon-sandbox-faq/</a></li><li>Open the flow runtime, you should see the run time error.</li></ul></section></div><div ><h3 >Resolution</h3><section><ul><li> We should use the proper file type, only then results would be completed successfully.<br /><br /><br /></li></ul></section></div></article></div>