https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1235125#M3058 <P>File Hash: 670B8D24C9CE30C24A74864140C5D91D9AA35713C4079594C909726D38057E49</P> <P>Link to Virustotal report for the file: <A href="https://www.virustotal.com/gui/file/670b8d24c9ce30c24a74864140c5d91d9aa35713c4079594c909726d38057e49" target="_blank">https://www.virustotal.com/gui/file/670b8d24c9ce30c24a74864140c5d91d9aa35713c4079594c909726d38057e49</A></P> <P>Current VirusTotal Verdict: <SPAN><SPAN class="malicious result file hstack gap-2" data-tooltip="Generic.ml"><SPAN class="individual-detection">Generic.ml</SPAN></SPAN></SPAN></P> <P>Description: <SPAN class="HwtZe"><SPAN class="jCAhz ChMk0b"><SPAN class="ryNqvb">The tool is an application for partial recovery of JPEG files encrypted by the STOP/DJVU ransomware. The tool is protected by VMProtect.</SPAN></SPAN></SPAN></P> Thu, 31 Jul 2025 10:17:07 GMT DenisAnisimov 2025-07-31T10:17:07Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1234927#M3054 <P>Hello.</P> <P>&nbsp;</P> <P>My tool is being flagged as Generic.ml</P> <P>&nbsp;</P> <P data-unlink="true"><A href="https://www.virustotal.com/gui/file/670b8d24c9ce30c24a74864140c5d91d9aa35713c4079594c909726d38057e49" target="_blank">https://www.virustotal.com/gui/file/670b8d24c9ce30c24a74864140c5d91d9aa35713c4079594c909726d38057e49</A></P> <P data-unlink="true">&nbsp;</P> <P data-unlink="true"><SPAN class="HwtZe"><SPAN class="jCAhz ChMk0b"><SPAN class="ryNqvb">The tool is an application for partial recovery of JPEG files encrypted by the STOP/DJVU ransomware. The tool is protected by VMProtect.</SPAN></SPAN></SPAN></P> <P data-unlink="true">&nbsp;</P> <P data-unlink="true"><SPAN class="HwtZe"><SPAN class="jCAhz ChMk0b"><SPAN class="ryNqvb">Home page:&nbsp;jpegmedic.com/tools/jpegmedic-arwe/&nbsp;</SPAN></SPAN></SPAN></P> <P data-unlink="true"><SPAN class="HwtZe"><SPAN class="jCAhz ChMk0b"><SPAN class="ryNqvb">Direct link to exe:&nbsp;jpegmedic.com/bin/JpegMedicARWE.exe&nbsp;</SPAN></SPAN></SPAN></P> <P data-unlink="true"><SPAN class="HwtZe"><SPAN class="jCAhz ChMk0b"><SPAN class="ryNqvb">&nbsp;</SPAN></SPAN></SPAN></P> <P data-unlink="true"><SPAN class="HwtZe"><SPAN class="jCAhz ChMk0b"><SPAN class="ryNqvb">Could you check it?</SPAN></SPAN></SPAN></P> Wed, 30 Jul 2025 00:33:55 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1234927#M3054 DecAns 2025-07-30T00:33:55Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1235125#M3058 <P>File Hash: 670B8D24C9CE30C24A74864140C5D91D9AA35713C4079594C909726D38057E49</P> <P>Link to Virustotal report for the file: <A href="https://www.virustotal.com/gui/file/670b8d24c9ce30c24a74864140c5d91d9aa35713c4079594c909726d38057e49" target="_blank">https://www.virustotal.com/gui/file/670b8d24c9ce30c24a74864140c5d91d9aa35713c4079594c909726d38057e49</A></P> <P>Current VirusTotal Verdict: <SPAN><SPAN class="malicious result file hstack gap-2" data-tooltip="Generic.ml"><SPAN class="individual-detection">Generic.ml</SPAN></SPAN></SPAN></P> <P>Description: <SPAN class="HwtZe"><SPAN class="jCAhz ChMk0b"><SPAN class="ryNqvb">The tool is an application for partial recovery of JPEG files encrypted by the STOP/DJVU ransomware. The tool is protected by VMProtect.</SPAN></SPAN></SPAN></P> Thu, 31 Jul 2025 10:17:07 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1235125#M3058 DenisAnisimov 2025-07-31T10:17:07Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1235141#M3059 <P>File submitted for review</P> Thu, 31 Jul 2025 17:09:48 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1235141#M3059 DaBone 2025-07-31T17:09:48Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1235224#M3060 <P>File no longer seen as malware</P> Fri, 01 Aug 2025 16:45:19 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1235224#M3060 DaBone 2025-08-01T16:45:19Z