Application.NotMalware (A) malicious file

The Application.NotMalware (A) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.NotMalware (A) virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Application.NotMalware (A)?


File Info:
name: CAB932D5C6372B977399.mlw
path: /opt/CAPEv2/storage/binaries/16bc4fc495ec822b15418f1403ef2b00e66a3556474242720ebd6dfdb2b8003b
crc32: B097F716
md5: cab932d5c6372b9773993772c1ae9331
sha1: f0bd575f872644b44c37748c0732c58c8e5483a2
sha256: 16bc4fc495ec822b15418f1403ef2b00e66a3556474242720ebd6dfdb2b8003b
sha512: 370e8aa9bf41fe20a1f841b27abafc094299cca818abd69f0598095ae302b7b8f10566de211b4f852da7e36ecf0a0aedd7205d0555746610aced62c6cd8a4629
ssdeep: 49152:Q8kx7bDkJ7+NVzaCe5K7rogN5UIjBofx1Zw:QbbkuaJ5KDMIjv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16895234A987BC805C91712B280421EE973BD49533D87256FFB40BBF87EB993B15809ED
sha3_384: 06d9840bfa77849fe6e3d3582897bae5c715aeed54884c28f393413281981f593b11d5ebc5c248d854ed48790ff42a92
ep_bytes: e80600000050e8bb010000558bec81c4
timestamp: 1972-12-25 05:33:23

Version Info:
FileVersion: 1.0.0.0
FileDescription: 播放器
ProductName: 播放器
ProductVersion: 1.0.0.0
CompanyName: 飞天小马
LegalCopyright: 飞天小马 版权所有
Comments: 播放器
Translation: 0x0804 0x04b0

Application.NotMalware (A) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.FlyStudio.4!c
tehtris	Generic.Malware
ClamAV	Win.Packed.Flystudio-9979234-0
FireEye	Generic.mg.cab932d5c6372b97
Skyhigh	BehavesLike.Win32.RealProtect.tc
McAfee	Artemis!CAB932D5C637
Cylance	unsafe
Sangfor	Trojan.Win32.FlyStudio.Vlr0
CrowdStrike	win/malicious_confidence_60% (W)
K7GW	Trojan ( 005194cc1 )
K7AntiVirus	Trojan ( 005194cc1 )
BitDefenderTheta	Gen:NN.ZexaF.36680.7r3@aynLK7ab
VirIT	Trojan.Win32.Click2.DFZZ
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio potentially unwanted
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Cynet	Malicious (score: 100)
Emsisoft	Application.NotMalware (A)
Trapmine	malicious.high.ml.score
Sophos	Generic Reputation PUA (PUA)
Jiangmin	Trojan/Generic.bdesa
Google	Detected
Antiy-AVL	Trojan/Win32.Wacatac.b
Kingsoft	Win32.Troj.Undef.a
Xcitium	TrojWare.Win32.FlyStudio.~UJ@1sa9s6
GData	Win32.Riskware.FlyStudio.C
Varist	W32/Trojan.GMK.gen!Eldorado
DeepInstinct	MALICIOUS
Malwarebytes	Trojan.FlyStudio
Rising	Trojan.Generic@AI.80 (RDML:fM7sRdBxp9v7nH4YFDbXAA)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/FlyStudio.C!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.f87264

How to remove Application.NotMalware (A)?

Application.NotMalware (A) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X