False positive?: SAPE.Jorik.1 for "Praetorians mods complex 2.4.exe"

Hi,

I've followed the "file insight" window's link to the Norton page about the SAPE heuristic technology. Doesn't a heuristic scan method try to detect software with malicious intentions by running it in a secure way, like inside a virtual machine, to see what it does when its executed?

This zip I've downloaded [www . moddb . com/games/praetorians/downloads/ praetorians-mods-complex-24] contains a setup program which modifies an old PC strategy game by installing new fan made content and modifications for it which include changes to its binary files to make it run in modern Windows operating systems without crashing. 

So as a setup program created and released by an individual instead of a software publishing company Norton trusts, isn't it possible that my Norton SAPE scanner could have wrongly identified this program as a virus?