guardagent.exe
EaseUS Todo Backup by CHENGDU YIWO Tech Development Co. (Signed)
| Version: | 3, 0, 0, 1 | 
| MD5: | 714e18abbe6ebed6b8f8a7314c026260 | 
| SHA1: | b3e84d0adc27f2bccf9e42ffaf767e2b1fbf6bde | 
| SHA256: | 72199ab00a9ecdffc225826bd9cb817f57a4af16f3ee0fa6744243cca5da7af5 | 
Overview
guardagent.exe runs as a service under the name Guard Agent Service (Guard Agent) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by CHENGDU YIWO Tech Development Co. which was issued by the VeriSign certificate authority (CA).
 Details
Details
| File name: | guardagent.exe | 
| Publisher: | CHENGDU YIWO Tech Development Co., Ltd | 
| Product name: | EaseUS Todo Backup | 
| Description: | EaseUS Todo Backup Agent Application | 
| Typical file path: | C:\Program Files\easeus\todo backup\bin\guardagent.exe | 
| Original name: | GuardAgent | 
| File version: | 3, 0, 0, 1 | 
| Size: | 23.07 KB (23,624 bytes) | 
| Certificate | 
| Issued to: | CHENGDU YIWO Tech Development Co. | 
| Authority (CA): | VeriSign | 
| Expiration date: | Sunday, November 9, 2014 | 
| Digital DNA | 
| File packed: | No | 
| .NET CLR: | No | 
More details
 Behaviors
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
 Resource utilization
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
| CPU | 
| Total CPU: | 0.00003905% |  | 
| Kernel CPU: | 0.00000969% |  | 
| User CPU: | 0.00002936% |  | 
| Kernel CPU time: | 164 ms/min |  | 
| CPU cycles: | 204,181/sec |  | 
| Context switches: | 5/sec |  | 
| Memory | 
| Private memory: | 1014 KB |  | 
| Private (maximum): | 3.4 MB |  | 
| Private (minimum): | 3.33 MB |  | 
| Non-paged memory: | 1014 KB |  | 
| Virtual memory: | 24.02 MB |  | 
| Virtual memory (peak): | 25.92 MB |  | 
| Working set: | 3.33 MB |  | 
| Working set (peak): | 3.43 MB |  | 
| Page faults: | 936/min |  | 
| I/O | 
| I/O write transfer: | 0 Bytes/sec |  | 
| I/O write operations: | 1/sec |  | 
| I/O other transfer: | 0 Bytes/sec |  | 
| I/O other operations: | 1/sec |  | 
| Resource allocations | 
| Threads: | 3 |  | 
| Handles: | 48 |  | 
 
 Process properties
Process properties
| Integrety level: | Undefined | 
| Platform: | 64-bit | 
| Command line: | "C:\Program Files\easeus\todo backup\bin\guardagent.exe" | 
| Owner: | SYSTEM | 
| Windows Service | 
| Service name: | Guard Agent | 
| Display name: | Guard Agent Service | 
| Description: | “Monitor EaseUS Todo Backup agent.” | 
| Type: | Win32OwnProcess | 
| Parent process: | services.exe (Services and Controller app by Microsoft) | 
 Threads
Threads
Averages
 
| wow64.dll (Win32 Emulation on NT64 by Microsoft) | 
| Total CPU: | 0.00015481% |  | 
| Kernel CPU: | 0.00003883% |  | 
| User CPU: | 0.00011598% |  | 
| CPU cycles: | 198,258/sec |  | 
| Context switches: | 5/sec |  | 
| Memory: | 252 KB |  | 
| GuardAgent.exe (main module) | 
| Total CPU: | 0.00000319% |  | 
| Kernel CPU: | 0.00000000% |  | 
| User CPU: | 0.00000319% |  | 
| CPU cycles: | 32/sec |  | 
| Memory: | 32 KB |  | 
 
 Distribution by Windows OS
Distribution by Windows OS
| OS version | distribution | 
| Windows 7 Home Premium | 40.00% |  | 
| Windows 7 Professional | 20.00% |  | 
| Windows 7 Ultimate | 15.00% |  | 
| Windows 8 | 10.00% |  | 
| Windows 8 Pro | 10.00% |  | 
| Microsoft Windows XP | 5.00% |  | 
 Distribution by country
Distribution by country
United States installs about 60.00% of EaseUS Todo Backup.
 Distribution by PC manufacturer
Distribution by PC manufacturer
| PC Manufacturer | distribution | 
| Dell | 60.87% |  | 
| Intel | 17.39% |  | 
| Hewlett-Packard | 8.70% |  | 
| Acer | 4.35% |  | 
| GIGABYTE | 4.35% |  | 
| American Megatrends | 4.35% |  |