home

TrueImageMonitor.exe

Acronis True Image

Acronis, Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TrueImageMonitor.exe’.
Publisher:
Acronis  (signed by Acronis, Inc)

Product:
Acronis True Image

Description:
Acronis True Image Monitor

Version:
10,0,0,4921

MD5:
be1edd146b33467001971b2d9d1bd5fe

SHA-1:
daa8f07bbff4b0053043c05b1fa2b74334b5457e

SHA-256:
b0e090d27b8e5af68f53513514dd21b45cb3686673fe00c3aacf39a062c4b1d7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 12:44:09 AM UTC  (today)

File size:
1.3 MB (1,353,624 bytes)

Product version:
10,0,0,4921

Copyright:
Copyright (C) Acronis, 2000-2006.

Trademarks:
Acronis

Original file name:
TrueImageMonitor.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\acronis\trueimagehome\trueimagemonitor.exe

Digital Signature
Signed by:
Acronis, Inc

Authority:
VeriSign, Inc.

Valid from:
9/25/2006 9:00:00 AM

Valid to:
9/26/2007 8:59:59 AM

Subject:
CN="Acronis, Inc", OU=Headquarter, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Acronis, Inc", L=South San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
57D50A48CDF681BB93C28879633A4452

File PE Metadata
Compilation timestamp:
1/11/2007 10:31:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
24576:JzYY61JM87Tu0Mr+0VfmwT5PEQiUk6WTp:Jzm1Q0xwT5PGR6g

Entry address:
0x82930

Entry point:
6A, 28, 68, 38, 5D, 4D, 00, E8, 60, 09, 00, 00, 33, FF, 57, FF, 15, 4C, 33, 49, 00, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 7D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, B9, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, B9, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 7D, FC, 6A, 01, FF, 15, 24, 35, 49, 00, 59, 83, 0D, 50, FD, 4E, 00, FF, 83, 0D, 54, FD, 4E, 00...
 
[+]

Entropy:
6.8167

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
584 KB (598,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TrueImageMonitor.exe

Command:
C:\Program Files\acronis\trueimagehome\trueimagemonitor.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.