» cerber.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

cerber.exe

Cerber AntiVirus

Mega HighTech SL

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Cerber AntiVirus -m’. This is installed with Cerber AntiVirus 2013.

File name:

cerber.exe

Publisher:

Mega HighTech S.L. (signed by Mega HighTech SL)

Product:

Cerber AntiVirus

Description:

Cerber AntiVirus GUI

Version:

0, 1, 962, 0

MD5:

1d36c8274587304c13e5137a6710f602

SHA-1:

5e658f9272385533b9512b62bb391f160a0918e4

SHA-256:

f46cceb0722d06467b0aec364c3974f037dd5a0719a0bbda862862a497aee648

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 1:14:49 PM UTC (today)

File size:

5.8 MB (6,071,520 bytes)

Product version:

0, 1, 962, 0

Original file name:

cerber.exe

File type:

Executable application (Win64 EXE)

Common path:

C:\Program Files\cerber antivirus\cerber.exe

Digital Signature

Signed by:

Mega HighTech SL

Authority:

VeriSign, Inc.

Valid from:

5/25/2012 3:00:00 AM

Valid to:

5/26/2013 2:59:59 AM

Subject:

CN=Mega HighTech SL, OU=Cerber Antivirus Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mega HighTech SL, L=Marbella, S=Malaga, C=ES

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5F9325FBB30143946B01AA3484C2FCCC

File PE Metadata

Compilation timestamp:

2/26/2013 4:02:48 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

98304:9NT7fgqoaATpnLIbxYlami97nDpF+hTcenjG/nT7bdrEJvCj6m/wYsZKSWBiF:H76aA5LIqama7DS/K3bdAJvCbIYQ8o

Entry address:

0xE17000

Entry point:

48, 83, EC, 08, 50, 53, E8, 01, 00, 00, 00, CC, 58, 48, 89, C3, 48, FF, C0, 48, 2D, 00, A0, 29, 00, 48, 2D, 07, F9, E5, 05, 48, 05, FB, F8, E5, 05, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, FA, F4, C3, 61, 68, E1, 55, 66, 35, 53, 50, E8, 0C, 00, 00, 00, 48, 83, C0, 00, 48, 89, 44, 24, 10, 5B, 58, C3, 55, 48, 89, E5, 50, 53, 51, 56, 48, 8B, 75, 10, 8B, 4D, 18, C1, E9, 02, 8B, 45, 20, 8B, 5D, 28, 85, C9, 74, 0C, 31, 06, 01, 1E, 48, 83, C6, 04, FF, C9, EB, F0, 5E, 59, 5B, 58, C9, C2, 20, 00, 7E... 
[+]

Entropy:

7.9258 (probably packed)

Code size:

4.4 MB (4,609,536 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Cerber AntiVirus -m

Command:

C:\Program Files\cerber antivirus\cerber.exe -m

The file cerber.exe has been discovered within the following program.

Cerber AntiVirus 2013 by Mega HighTech S.L.

About 5% of users remove it

Scan cerber.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.