Cerbero is an advanced, professional malware classification and file security analysis tool for Windows, Mac and Linux platforms. It was designed to inspect the structure, code and many other things of dozens of file formats for reversing, malware triage, forensics or software development purpose.

As one of the best file format inspectors available, Cerbero comes with amazing PE, font, Flash parsing/disassembly capabilities, and can analyze all major file formats, including PE, Mach-O, ELF, Java, SWF, DEX, PDF, DOC, XLS, RTF, Zip, etc. With its help, you can disassemble shellcode, debug JavaScript, emulate Excel formulas, and more.

In addition, Cerbero also provides automatic analysis, interactive analysis, Carbon Interactive Disassembler, bytecode disassembler (.NET MSIL, Java, DEX, ActionScript 2/3, VBA, font), hexadecimal editor with customizable layout, Windows memory analyzer (raw dumps, WinDmp files, hibernation files), JavaScript debugger, extremely rich Python 3 SDK, extension support, C++/PDB structure importer, support for projects and bookmarks, and more.

Key Features

  • PE, MachO & ELF Analysis
  • Java, Dalvik, .NET & Flash Analysis
  • PDF Analysis
  • Office Document Analysis
  • Archive & Database Analysis
  • Image Analysis
  • Font Analysis
  • Managed Code Disassemblers
  • Hex Editor
  • JavaScript Debugger
  • C++ Types
  • Python 3 SDK
  • Projects
  • Actions & Filters
  • Carbon Disassembler (x86, x64, ARM32, ARM64)
  • Sleigh Decompiler (x86, x64, ARM32, ARM64)
  • Silicon Excel Emulator
  • Windows Crash Dump Analysis
  • Windows Memory Analysis
  • Native UI for Ghidra
  • Additional Formats for Forensics
  • Access to Commercial Plugins

Supported File Formats

  • Email (EML)
  • Extraction of attachments
  • Torrent
  • Windows Dmp files (WINDMP)
  • Inspection of internal structures
  • Full inspection of memory when available
  • Windows Hibernation files
  • Inspection of internal structures
  • Full inspection of memory
  • Windows Raw Memory Images (WINMEM)
  • Support for all Windows editions
  • Inspection of files in memory
  • Inspection of SSDT, IDT, GDT
  • Suppport for VAD trees
  • User address spaces
  • System address space
  • System symbols of all supported Windows editions

Edition Statement

AppNee provides the Cerbero Suite Advanced Edition multilingual full installers and loaders, as well as portable full registered versions for Windows 32-bit and 64-bit.

Installation Notes

for v5.6.0+:
  1. Download and install program
  2. Copy the loader to installation folder, and run it to start program instead
  3. Done

Prompts

  • To generate a portable version, run program, enter "Settings/Portable", and click 'Make portable'.

Warning

The loader might be reported as Win32:Evo-gen [Susp] threat with high risk. Use VirusTotal to make a full, authoritative scan, and decide to use it or not by yourself.

*** Please remember: antivirus software is not always right, just be careful and use it at your own risk.

Related Links

Download URLs

License Version Download Size
for Windows
Suite Advanced Edition (Commercial) v6.5.1 32-bit | 64-bit 29.0 MB | 33.2 MB
(Homepage)