home

acronistrueimage2016_web.exe

Acronis TrueImage 2016

Acronis International GmbH

Publisher:
Acronis  (signed by Acronis International GmbH)

Product:
Acronis TrueImage 2016

Description:
Acronis True Image 2016

Version:
19,0,0,5518

MD5:
6eda9a0ed41fd6f41e921352b4808fc8

SHA-1:
e1fba993d21d28512162a02e477eb6cddbe76650

SHA-256:
a8fe26fc6dd174861dc8ecfbc6a9e2b1658a26c35f3e0ad35ccea1a3e24dff55

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 1:27:45 AM UTC  (today)

File size:
5 MB (5,190,456 bytes)

Product version:
19,0,0,5518

Copyright:
Copyright (C) 2000-2015 Acronis

Trademarks:
Acronis

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\acronistrueimage2016_web.exe

Digital Signature
Signed by:
Acronis International GmbH

Authority:
VeriSign, Inc.

Valid from:
8/27/2012 7:00:00 PM

Valid to:
8/28/2015 6:59:59 PM

Subject:
CN=Acronis International GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Acronis International GmbH, L=Schaffhausen, S=Schaffhausen, C=CH

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
16437AAA13F5543F67E10E03893EA315

File PE Metadata
Compilation timestamp:
8/16/2015 6:22:04 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:2zboOoKBawW/XGjnt5I8A+Sr2eGzGTO/d:2wpKRkXGjnt5I8RGzGzmq

Entry address:
0x1487EB

Entry point:
E8, 6A, 74, 00, 00, E9, 7F, FE, FF, FF, 56, 6A, 04, 6A, 20, E8, 5B, 7A, 00, 00, 59, 59, 8B, F0, 56, FF, 15, F0, 23, 60, 00, A3, 90, 67, 6C, 00, A3, 8C, 67, 6C, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 0C, 68, 40, 2D, 69, 00, E8, A0, 79, 00, 00, 83, 65, E4, 00, E8, 7D, 6A, 00, 00, 83, 65, FC, 00, FF, 75, 08, E8, 23, 00, 00, 00, 59, 8B, F0, 89, 75, E4, C7, 45, FC, FE, FF, FF, FF, E8, 0B, 00, 00, 00, 8B, C6, E8, B7, 79, 00, 00, C3, 8B, 75, E4, E8, 58, 6A, 00, 00, C3, 55, 8B, EC...
 
[+]

Entropy:
7.2935

Code size:
2 MB (2,098,688 bytes)

The file acronistrueimage2016_web.exe has been seen being distributed by the following 4 URLs.

http://besplatnyeprogrammy.ws/go/.../AcronisTrueImage.exe

https://files.giga-downloads.de/.../AcronisTrueImage2016_web.exe

https://store.acronis.com/882/cookie?affiliate=10605&redirectto=http://dl2.acronis.com/.../AcronisTrueImage2016_web.exe

http://download.acronis.com/AcronisTrueImage2016_web.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.