Should I block it?

No, this file is 100% safe to run.

Additional versions

1, 0, 9, 0	14.00%
1, 0, 9, 0	12.00%
1, 0, 9, 0	13.00%
1, 0, 9, 0	13.00%
1, 0, 9, 0	13.00%
1, 0, 9, 0	5.00%
1, 0, 9, 0	10.00%
1, 0, 9, 0	18.00%
1, 0, 9, 0	1.00%
1, 0, 9, 0	1.00%

(Note, ASUSTeK Computer Inc. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegCreateKeyExA, InitializeSecurityDescriptor, LookupAccountNameA, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, IsValidSecurityDescriptor, RegQueryValueExA, RegCloseKey, RegOpenCurrentUser, RegSetValueExA

kernel32.dll

SetStdHandle, RtlUnwind, LoadLibraryW, CreateFileA, ExitProcess, LocalFree, LocalAlloc, lstrlenA, FormatMessageA, GetLastError, WriteConsoleW, WaitForSingleObject, CreateProcessA, GetModuleFileNameA, GetPrivateProfileIntA, MultiByteToWideChar, WritePrivateProfileStringA, SetFilePointer, ReadFile, OutputDebugStringA, GlobalFree, GlobalUnlock, WriteFile, GlobalLock, GlobalAlloc, GetFileSize, GetPrivateProfileSectionNamesA, CreateThread, CreateEventA, CreateMutexA, OpenMutexA, DeviceIoControl, LCMapStringW, GetStringTypeW, HeapReAlloc, CreateFileW, FlushFileBuffers, GetPrivateProfileStringA, Sleep, CloseHandle, IsValidCodePage, GetCommandLineA, HeapSetInformation, GetStartupInfoW, DecodePointer, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EncodePointer, TerminateProcess, GetCurrentProcess, IsProcessorFeaturePresent, HeapFree, HeapAlloc, RaiseException, GetProcAddress, GetModuleHandleW, GetStdHandle, GetModuleFileNameW, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, DeleteCriticalSection, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapCreate, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetConsoleCP, GetConsoleMode, EnterCriticalSection, LeaveCriticalSection, GetCPInfo, GetACP, GetOEMCP, HeapSize

shell32.dll

ShellExecuteA

shlwapi.dll

PathRemoveFileSpecA

user32.dll

LoadStringA, GetMessageA, TranslateMessage, DispatchMessageA, LoadIconA, RegisterClassExA, DefWindowProcA, CreateWindowExA, PostQuitMessage, FindWindowA, PostMessageA, wsprintfA, MessageBoxA, LoadCursorA

ACMON.exe

ACMON by ASUSTeK Computer Inc. (Signed)

Remove ACMON.exe

Version:	1, 0, 9, 0
MD5:	7d2c5f5a9df7ae26b4e62e2d7032b96b
SHA1:	061613dd9ee568d55547708f66919dc2a630354a
SHA256:	71683898483e24e5830019bb6ffb5c0ff11b28ea70d0c446398f3331bf9403da

What is ACMON.exe?

ACMON is the core process for the Splendid Video Enhancement by ATK installed with most ASUS PCs.

Overview

acmon.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by ASUSTeK Computer Inc. which was issued by the VeriSign certificate authority (CA).

Details

File name:	acmon.exe
Publisher:	ASUS
Product name:	ACMON
Description:	ACMON
Typical file path:	C:\Program Files\asus\splendid\acmon.exe
File version:	1, 0, 9, 0
Product version:	1, 0, 0, 0
Size:	81 KB (82,944 bytes)
Certificate
Issued to:	ASUSTeK Computer Inc.
Authority (CA):	VeriSign
Effective date:	Sunday, August 2, 2009
Expiration date:	Friday, August 3, 2012
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Scheduled tasks

The task 'ASUS Splendid ACMON' runs on logon in the path '\ASUS Splendid ACMON'
The task 'ACMON' runs on logon in the path '\ACMON'
Entry path '\ACMON'

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'ACMON' → C:\Program Files\ASUS\Splendid\ACMON.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00168738%	0.028634%
Kernel CPU:	0.00050357%	0.013761%
User CPU:	0.00118381%	0.014873%
Kernel CPU time:	8,819 ms/min	100,923,805ms/min
CPU cycles:	408,842/sec	17,470,203/sec
Context switches:	10/sec	284/sec
Memory
Private memory:	2.16 MB	21.59 MB
Private (maximum):	5 MB
Private (minimum):	548 KB
Non-paged memory:	2.16 MB	21.59 MB
Virtual memory:	76.49 MB	140.96 MB
Virtual memory (peak):	83.05 MB	169.69 MB
Working set:	685.33 KB	18.61 MB
Working set (peak):	6.67 MB	37.95 MB
Page faults:	91,156/min	2,039/min
I/O
I/O read transfer:	117 Bytes/sec	1.02 MB/min
I/O read operations:	4/sec	343/min
I/O other transfer:	170 Bytes/sec	448.09 KB/min
I/O other operations:	11/sec	1,671/min
Resource allocations
Threads:	5	12
Handles:	109	600
GUI GDI count:	12	103
GUI GDI peak:	14	142
GUI USER count:	7	49
GUI USER peak:	10	71

Process properties

Integrety level:	High
Platform:	64-bit
Command line:	"C:\Program Files\asus\splendid\acmon.exe"
Owner:	User
Parent process:	taskeng.exe (Task Scheduler Engine by Microsoft)

Threads

Averages

ACMON.exe (main module)
Total CPU:	0.00369147%	0.272967%
Kernel CPU:	0.00131106%	0.107585%
User CPU:	0.00238041%	0.165382%
CPU cycles:	133,180/sec	5,741,424/sec
Context switches:	1/sec	79/sec
Memory:	96 KB	1.16 MB
ntdll.dll
Total CPU:	0.00008101%
Kernel CPU:	0.00000000%
User CPU:	0.00008101%
CPU cycles:	487/sec
Memory:	1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	46.94%
Windows 8.1	18.37%
Windows 8	11.22%
Windows 7 Ultimate	9.18%
Windows 8 Pro	5.10%
Windows 7 Home Basic	3.06%
Windows 8 Single Language	3.06%
Windows 8 Pro with Media Center	2.04%
Windows 8.1 Single Language	1.02%

Distribution by country

United States installs about 47.96% of ACMON.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	99.34%
Acer	0.66%

Remove Adware and Spyware Programs, FREE Download!