Additional versions

1, 0, 0, 596	16.33%
1, 0, 0, 556	8.16%
1, 0, 0, 549	2.04%
1, 0, 0, 548	2.04%
1, 0, 0, 545	24.49%
1, 0, 0, 501	4.08%
1, 0, 0, 501	2.04%
1, 0, 0, 493	8.16%
1, 0, 0, 462	22.45%
1, 0, 0, 453	2.04%
1, 0, 0, 448	2.04%
1, 0, 0, 339	2.04%
1, 0, 0, 241	2.04%
1, 0, 0, 210	2.04%

Parent process

Related files

guardmailru.exe runs as a service under the name Guard.Mail.ru within the local user context. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Guard.Mail.ru published by Mail.Ru, [email protected] from Mail.Ru and [email protected] by Mail.Ru. The file is digitally signed by LLC Mail.Ru which was issued by the Thawte certificate authority (CA).

CPU
Total CPU:	0.00104963%	0.028634%
Kernel CPU:	0.00072607%	0.013761%
User CPU:	0.00032357%	0.014873%
Kernel CPU time:	48,517,550 ms/min	100,923,805ms/min
CPU cycles:	3,109,458/sec	17,470,203/sec
Context switches:	43/sec	284/sec
Memory
Private memory:	4.54 MB	21.59 MB
Private (maximum):	11.5 MB
Private (minimum):	7.88 MB
Non-paged memory:	4.54 MB	21.59 MB
Virtual memory:	85.44 MB	140.96 MB
Virtual memory (peak):	89.87 MB	169.69 MB
Working set:	11.15 MB	18.61 MB
Working set (peak):	11.63 MB	37.95 MB
Page faults:	1,032,917/min	2,039/min
I/O
I/O read transfer:	302.1 KB/sec	1.02 MB/min
I/O read operations:	154/sec	343/min
I/O write transfer:	6.25 KB/sec	274.99 KB/min
I/O write operations:	3/sec	227/min
I/O other transfer:	4.36 KB/sec	448.09 KB/min
I/O other operations:	187/sec	1,671/min
Resource allocations
Threads:	13	12
Handles:	245	600
GUI GDI count:	47	103
GUI GDI peak:	62	142
GUI USER count:	32	49
GUI USER peak:	48	71

GuardMailRu.exe (main module)
Total CPU:	0.05228965%	0.272967%
Kernel CPU:	0.02078605%	0.107585%
User CPU:	0.03150360%	0.165382%
CPU cycles:	1,241,691/sec	5,741,424/sec
Context switches:	2/sec	79/sec
Memory:	2.18 MB	1.16 MB
ntdll.dll
Total CPU:	0.00530851%
Kernel CPU:	0.00397010%
User CPU:	0.00133841%
CPU cycles:	159,663/sec
Memory:	1.66 MB