Safety-Related

[v6.5] Cerbero – Advanced file security analysis tool

Ⅰ This article along with all titles and tags are the original content of AppNee. All rights reserved. To repost or reproduce, you must add an explicit footnote along with the URL to this article!
Ⅱ Any manual or automated whole-website collecting/crawling behaviors are strictly prohibited.
Ⅲ Any resources shared on AppNee are limited to personal study and research only, any form of commercial behaviors are strictly prohibited. Otherwise, you may receive a variety of copyright complaints and have to deal with them by yourself.
Ⅳ Before using (especially downloading) any resources shared by AppNee, please first go to read our F.A.Q. page more or less. Otherwise, please bear all the consequences by yourself.
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.

Cerbero is an advanced, professional malware classification and file security analysis tool for Windows, Mac and Linux platforms. It was designed to inspect the structure, code and many other things of dozens of file formats for reversing, malware triage, forensics or software development purpose.

As one of the best file format inspectors available, Cerbero comes with amazing PE, font, Flash parsing/disassembly capabilities, and can analyze all major file formats, including PE, Mach-O, ELF, Java, SWF, DEX, PDF, DOC, XLS, RTF, Zip, etc. With its help, you can disassemble shellcode, debug JavaScript, emulate Excel formulas, and more.

In addition, Cerbero also provides automatic analysis, interactive analysis, Carbon Interactive Disassembler, bytecode disassembler (.NET MSIL, Java, DEX, ActionScript 2/3, VBA, font), hexadecimal editor with customizable layout, Windows memory analyzer (raw dumps, WinDmp files, hibernation files), JavaScript debugger, extremely rich Python 3 SDK, extension support, C++/PDB structure importer, support for projects and bookmarks, and more.

// Key Features //

  • PE, MachO & ELF Analysis
  • Java, Dalvik, .NET & Flash Analysis
  • PDF Analysis
  • Office Document Analysis
  • Archive & Database Analysis
  • Image Analysis
  • Font Analysis
  • Managed Code Disassemblers
  • Hex Editor
  • JavaScript Debugger
  • C++ Types
  • Python 3 SDK
  • Projects
  • Actions & Filters
  • Carbon Disassembler (x86, x64, ARM32, ARM64)
  • Sleigh Decompiler (x86, x64, ARM32, ARM64)
  • Silicon Excel Emulator
  • Windows Crash Dump Analysis
  • Windows Memory Analysis
  • Native UI for Ghidra
  • Additional Formats for Forensics
  • Access to Commercial Plugins

// Supported File Formats //

  • Email (EML)
  • Extraction of attachments
  • Torrent
  • Windows Dmp files (WINDMP)
  • Inspection of internal structures
  • Full inspection of memory when available
  • Windows Hibernation files
  • Inspection of internal structures
  • Full inspection of memory
  • Windows Raw Memory Images (WINMEM)
  • Support for all Windows editions
  • Inspection of files in memory
  • Inspection of SSDT, IDT, GDT
  • Suppport for VAD trees
  • User address spaces
  • System address space
  • System symbols of all supported Windows editions

// Edition Statement //

AppNee provides the Cerbero Suite Advanced Edition multilingual full installers and loaders, as well as portable full registered versions for Windows 32-bit and 64-bit.

// Installation Notes //

for v5.6.0+:

  1. Download and install program
  2. Copy the loader to installation folder, and run it to start program instead
  3. Done

// Prompts //

  • To generate a portable version, run program, enter “Settings/Portable”, and click ‘Make portable’.

// Warning //

The loader might be reported as Win32:Evo-gen [Susp] threat with high risk. Use VirusTotal to make a full, authoritative scan, and decide to use it or not by yourself.

*** Please remember: antivirus software is not always right, just be careful and use it at your own risk.

// Related Links //

// Download URLs //

License Version Download Size
for Windows
Suite Advanced Edition (Commercial) v6.5.1 32-bit | 64-bit 29.0 MB | 33.2 MB

(Homepage)

If some download link is missing, and you do need it, just please send an email (along with post link and missing link) to remind us to reupload the missing file for you. And, give us some time to respond.
If there is a password for an archive, it should be "appnee.com".
Most of the reserved downloads (including the 32-bit version) can be requested to reupload via email.