Should I remove “Marsilia.32654”?

The Marsilia.32654 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Marsilia.32654 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Marsilia.32654?


File Info:
name: DFB915FBD03BA70EC2CF.mlw
path: /opt/CAPEv2/storage/binaries/581f9575f7b1bc1447bcb39468202066d321286bd5cac9fb633d0c239a175ec4
crc32: 29A368B9
md5: dfb915fbd03ba70ec2cf9bcfe23295ff
sha1: a167cac87734152aa3b210c1cb0272456a76f759
sha256: 581f9575f7b1bc1447bcb39468202066d321286bd5cac9fb633d0c239a175ec4
sha512: 248fabb114c11608762d44bfd2ce18fd7297cf77d05db44e1b6f86069ea9e1e976fd6ce33f05fd674d70fb51116206ba37dc388d23a9638ae80e8e41411a31b7
ssdeep: 49152:gBWwWtWbx2BpWgX1NpLR2tpdmFRsOYau9SkT86YVaoDzf5kj49d/hI:gBhuy8BFlio67+r84fC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AED512762BD28F28C1AD73B91991D35DC336B044E127C3FAA48521B92E217379D39C9B
sha3_384: 36d638cad61d5040a1c141fd7240f44bbd11598330307bade96cfae64bb0de8896abb613a6ea3fb4cf366a03b916f49c
ep_bytes: ff250020400000000000000000000000
timestamp: 2079-03-06 02:21:12

Version Info:
Translation: 0x0000 0x04b0
Comments: OliviaProtector
CompanyName: OliviaProtector Inc.
FileDescription: OliviaProtector
FileVersion: 4.0.0.0
InternalName: Vedani Crypter.exe
LegalCopyright: Copyright © 2023 OliviaProtector Software Inc.
LegalTrademarks: 
OriginalFilename: Vedani Crypter.exe
ProductName: OliviaProtector
ProductVersion: 4.0.0.0
Assembly Version: 4.0.0.0

Marsilia.32654 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Crypter.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Marsilia.32654
Skyhigh	Artemis
McAfee	Artemis!DFB915FBD03B
Cylance	unsafe
Zillya	Tool.Crypter.Win32.3783
Sangfor	Riskware.Win32.Crypter.Vqsl
CrowdStrike	win/malicious_confidence_60% (W)
Arcabit	Trojan.Marsilia.D7F8E
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.Crypter.XJ
APEX	Malicious
BitDefender	Gen:Variant.Marsilia.32654
Avast	FileRepMalware [Misc]
Emsisoft	Gen:Variant.Marsilia.32654 (B)
VIPRE	Gen:Variant.Marsilia.32654
Sophos	Generic Reputation PUA (PUA)
Antiy-AVL	RiskWare/MSIL.Crypter
GData	Gen:Variant.Marsilia.32654
Malwarebytes	MachineLearning/Anomalous.100%
TrendMicro-HouseCall	TROJ_GEN.R002H09AA24
Rising	Hacktool.Crypter!8.414 (CLOUD)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Crypter
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS

How to remove Marsilia.32654?

Marsilia.32654 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X