Fasle Positive "Fast!" (Generic.ml)

[Andriy_Pelypenko]

Hi Palo Alto Networks team,

Please be advised that we just released an updated versions of Fast! (2.341 and 2.339) and we noticed that your detection engine momentarily classified it as Generic.ml. Can you please advise what triggers such detection?
There were no significant changes in the new version, just some finetuning in the UI design and pricing policy. All the features from previous versions migrated to the new one, (select the installation path, choose if the software starts on Windows start up, no ads). This detection doesn't reflect the true nature of the software as our product is Ads-free. Also, such detection will cause a loss of our customers' trust, which will lead to financial losses. Please reconsider your detection of your software or please provide information on what triggers your detection engine so we can fix ro enhance it on our end.

Please see the file details below:

"Fast!" Version 2.341:
Hash SHA256:  869e1d7509aa8be69a6532098eb75b9ba86f9cc40e93f207f33bb0ea15707020
Link to download: https://repcdn.veryfast.io/download/2.341/Setup.exe
MD5 Hash: 43287ab881f2f0e81bfae1009bd918d1
Filename: Setup.exe  
File purpose: "Fast!" is designed to optimize CPU, RAM, and Windows processes, enhancing the efficiency and speed of PCs for users worldwide, using Microsoft technology. Our company operates within legal frameworks and adheres to all regulations governing software solutions.
VirusTotal Link: https://www.virustotal.com/gui/file/869e1d7509aa8be69a6532098eb75b9ba86f9cc40e93f207f33bb0ea15707020
Signer: Fast Corporate LTD  
Company Name: Fast Corporate  
Company website: https://fastcorporate.com

"Fast!" Version 2.339:

Hash SHA256:   b23ca639ab520aaf1cc977509672d618eff135cdcf5500c2ab13fa3f30929d33
Link to download: https://repcdn.veryfast.io/download/2.339/Setup.exe
MD5 Hash:    c6b826eaeaccafeb3f6c6e3349d68331
Filename: Setup.exe  
File purpose: "Fast!" is designed to optimize CPU, RAM, and Windows processes, enhancing the efficiency and speed of PCs for users worldwide using Microsoft technology. Our company operates within legal frameworks and adheres to all regulations governing software solutions.
VirusTotal Link: https://www.virustotal.com/gui/file/b23ca639ab520aaf1cc977509672d618eff135cdcf5500c2ab13fa3f30929d33
Signer: Fast Corporate LTD  
Company Name: Fast Corporate  
Company website: https://veryfast.io

[Claw4609]

Hello,

If its believed to be a false positive you would need to open a case with TAC and provide them a packet capture.

How to Submit a Vulnerability Signature False Positive - Knowledge Base - Palo Alto Networks