Malware.AI.6702654 malicious file

The Malware.AI.6702654 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.6702654 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Malware.AI.6702654?


File Info:
name: 15661F67C9ABB5F44189.mlw
path: /opt/CAPEv2/storage/binaries/2e0a2df9e79ba017e7b12d267a817a75d814f627bbc627961eac4785c1304d81
crc32: 2BB5C4A6
md5: 15661f67c9abb5f441898537b36d72ea
sha1: e102524261d9de7b0ec34ec40edb3456df659b99
sha256: 2e0a2df9e79ba017e7b12d267a817a75d814f627bbc627961eac4785c1304d81
sha512: 77a81e46949e283c7b839d6477ce9b0006a4fe46cd2f3b52da226a8bca8cac3eaaacf76b34742ff9e8ab13d6dbac2d98d770744c33ef8844fd8c5fbccd5ca697
ssdeep: 6144:G/9AiYroWwg0h9PA/xbcoioECitxTr0l3L79fkFXGk9Ti:o5YroNDY5blnEVJr0J9fstu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BA74E13937E2C072E023057099E6EAB19ABDFC326662541BD7D80F8F79705C1A279763
sha3_384: e414a4a4f5f7d5d78e3d5333167ed37cb56d92a86e6ff3c529be32be7eb36cd53af77c003014c9b2ffc666a579227cb1
ep_bytes: e8202c0000e916feffff558bec83ec08
timestamp: 2012-12-04 14:13:53

Version Info:
CompanyName: NVIDIA Corporation
FileDescription: WLMerger Application
FileVersion: 1.5.20.0
InternalName: WLMerger
LegalCopyright: (C) NVIDIA Corporation. All rights reserved.
OriginalFilename: WLMerger.exe
ProductName: NVIDIA Update Components
ProductVersion: 1.5.20.0
Translation: 0x0409 0x04b0

Malware.AI.6702654 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop14.21968
MicroWorld-eScan	Generic.Malware.PfHBPk!g.483ACC57
FireEye	Generic.mg.15661f67c9abb5f4
McAfee	GenericRXTZ-BM!15661F67C9AB
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1480771
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Password-Stealer ( 0049b09a1 )
K7GW	Password-Stealer ( 0049b09a1 )
Cybereason	malicious.7c9abb
BitDefenderTheta	Gen:NN.ZexaF.34606.vu0@aKL4Vpmi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.Agent.NYQ
ClamAV	Win.Trojan.Zusy-9876296-0
Kaspersky	HEUR:Trojan.Win32.APosT.gen
BitDefender	Generic.Malware.PfHBPk!g.483ACC57
NANO-Antivirus	Trojan.Win32.Ric.iatmzx
Avast	Win32:MiniDuke-H [Trj]
Ad-Aware	Generic.Malware.PfHBPk!g.483ACC57
Sophos	Generic ML PUA (PUA)
VIPRE	Generic.Malware.PfHBPk!g.483ACC57
McAfee-GW-Edition	BehavesLike.Win32.Injector.fh
Trapmine	malicious.moderate.ml.score
Emsisoft	Generic.Malware.PfHBPk!g.483ACC57 (B)
Ikarus	Trojan-PSW.Agent
GData	Win32.Trojan.PSE.7QDW3D
Jiangmin	Trojan.APosT.bdc
Google	Detected
Antiy-AVL	Trojan/Generic.ASMalwS.4B
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C5225085
ALYac	Generic.Malware.PfHBPk!g.483ACC57
MAX	malware (ai score=81)
VBA32	Trojan.Wacatac
Malwarebytes	Malware.AI.6702654
APEX	Malicious
Rising	Stealer.Agent!8.C2 (TFE:5:Fz62PILaY1L)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7175209.susgen
Fortinet	W32/Agent.NYQ!tr.pws
AVG	Win32:MiniDuke-H [Trj]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Malware.AI.6702654?

Malware.AI.6702654 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X