Should I block it?
No, this file is 100% safe to run.
Additional versions
| 1, 0, 0, 596 |
16.33% |
|
| 1, 0, 0, 556 |
8.16% |
|
| 1, 0, 0, 549 |
2.04% |
|
| 1, 0, 0, 548 |
2.04% |
|
| 1, 0, 0, 545 |
24.49% |
|
| 1, 0, 0, 501 |
4.08% |
|
| 1, 0, 0, 501 |
2.04% |
|
| 1, 0, 0, 493 |
8.16% |
|
| 1, 0, 0, 462 |
22.45% |
|
| 1, 0, 0, 453 |
2.04% |
|
| 1, 0, 0, 448 |
2.04% |
|
| 1, 0, 0, 339 |
2.04% |
|
| 1, 0, 0, 241 |
2.04% |
|
| 1, 0, 0, 210 |
2.04% |
|
Relationships
GuardMailRu.exe
GuardMailRu Module by LLC Mail.Ru (Signed)
| Version: | 1, 0, 0, 241 |
| MD5: | c98d3d9081e7668e9631e8e64f1618f1 |
| SHA1: | f757a47ccd36c60fe748b720d9e9d2d9d4d4c55e |
| SHA256: | 7e62df1edb69b6d290afdad3dfda4b28c8ee3cd9eefc01c5861ac27ae595c8e0 |
Overview
guardmailru.exe runs as a service under the name Guard.Mail.ru within the local user context. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by LLC Mail.Ru which was issued by the Thawte certificate authority (CA).
Details
| File name: | guardmailru.exe |
| Product name: | GuardMailRu Module |
| Typical file path: | C:\Program Files\mail.ru\guard\guardmailru.exe |
| File version: | 1, 0, 0, 241 |
| Size: | 1.26 MB (1,320,144 bytes) |
| Certificate |
| Issued to: | LLC Mail.Ru |
| Authority (CA): | Thawte |
| Effective date: | Monday, September 12, 2011 |
| Expiration date: | Wednesday, July 2, 2014 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Guard.Mail.ru.gui' → "C:\Program Files\Mail.Ru\Guard\GuardMailRu.exe" /gui
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
42.86% |
|
| Windows 7 Ultimate |
24.49% |
|
| Windows 7 Home Basic |
14.29% |
|
| Windows 7 Home Premium |
12.24% |
|
| Windows 7 Professional |
6.12% |
|
Distribution by country
Russia installs about 32.65% of GuardMailRu Module.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
43.24% |
|
| Samsung |
13.51% |
|
| Dell |
10.81% |
|
| Hewlett-Packard |
10.81% |
|
| GIGABYTE |
8.11% |
|
| American Megatrends |
5.41% |
|
| Lenovo |
5.41% |
|
| Acer |
2.70% |
|
