Versions

7, 0, 315459, 4132	10.71%
6, 3, 300670, 2970	14.29%
6, 3, 297838, 2953	3.57%
6, 2, 285401, 2860	10.71%
6, 2, 285401, 2860	10.71%
6, 2, 282872, 2847	21.43%
6, 2, 282872, 2847	3.57%
6, 1, 275152, 2801	14.29%
6, 0, 264710, 2708	10.71%

cistray.exe has 9 known versions, the most recent one is 7, 0, 315459, 4132. cistray.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. In order execute the program with adminsitrator rights and prevent a UAC prompt, the program will add a job to the Windows Task Scheduler that will automtaiclaly start it when a user logs on. The average file size is about 1.64 MB. It is an authenticode code-signed executable issued to Comodo Security Solutions by the certification authority COMODO CA Limited. The programs COMODO Internet Security, COMODO Internet Security Premium and COMODO Internet Security Complete have been observed as installing specific variations of cistray.exe. This is a .NET Common Language Runtime (CLR) assembly. During the process's lifecycle, the typical CPU resource utilization is about 0.0016% including both foreground and background operations, the average private memory consumption is about 6.46 MB with the maximum memory reaching around 7.54 MB and typical read I/O operations are around 198 Bytes per minute.