What is “Cerbu.120584”?

The Cerbu.120584 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.120584 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Cerbu.120584?


File Info:
name: E52D4703AE7226E015B6.mlw
path: /opt/CAPEv2/storage/binaries/df62c8595a3e20af2298134f9b192fbc8b46a31f53258df6f9639b7d56bda27c
crc32: 0BC23872
md5: e52d4703ae7226e015b6b08b63bd27e3
sha1: 7089d0d9b5d33179e57ebd051498b87edf3b55dc
sha256: df62c8595a3e20af2298134f9b192fbc8b46a31f53258df6f9639b7d56bda27c
sha512: 8cf57cbfa522329dfe8565e24ca057a2a8b516d22998376a6f555a07bdec31e37918d47942797a85e89bd41519480f8f4bf50b3d3b87b53a97d1353931b404fe
ssdeep: 24576:muIlMnUE1SeYJLMq2qDFUwQRAR4dYJLCV:mVMNFYFMq2qDFUPiR4dYFg
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1D7B51D86F643ED4BE3D5E8348825CA72A26237BE87F3447DBC5CB599F62A1537011E02
sha3_384: 5e39b2d8b736a9b753401642e7ede4c3ced3ff09d403c41c4389b5ddf03b377ecd51c34b352b7fbe00dc3dea96cdee2d
ep_bytes: 4883ec28e8270700004883c428e90200
timestamp: 2022-08-27 10:14:31

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Windows Media Configuration Utility
FileVersion: 12.0.17134.1 (WinBuild.160101.0800)
InternalName: setup_wm.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: setup_wm.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 12.0.17134.1
Translation: 0x0409 0x04b0

Cerbu.120584 also known as:

MicroWorld-eScan	Gen:Variant.Cerbu.120584
FireEye	Gen:Variant.Cerbu.120584
Cylance	Unsafe
Zillya	Trojan.CliptoShuffler.Win32.4622
BitDefender	Gen:Variant.Cerbu.120584
Ad-Aware	Gen:Variant.Cerbu.120584
Emsisoft	Gen:Variant.Cerbu.120584 (B)
GData	Gen:Variant.Cerbu.120584
Arcabit	Trojan.Cerbu.D1D708
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ALYac	Gen:Variant.Cerbu.120584
MAX	malware (ai score=85)

How to remove Cerbu.120584?

Cerbu.120584 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X