cistray.exe
COMODO Internet Security by Comodo Security Solutions (Signed)
| Version: | 7, 0, 315459, 4132 |
| MD5: | d67c4c1bae2b6236f21a115e8316d16c |
| SHA1: | d7bf3aa042826f2ed354d2f8fbff0387a0e9e583 |
Overview
cistray.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including COMODO Firewall published by COMODO, COMODO Firewall from COMODO and COMODO Firewall by COMODO. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Comodo Security Solutions which was issued by the COMODO CA Limited certificate authority (CA).
Details
| File name: | cistray.exe |
| Publisher: | COMODO |
| Product name: | COMODO Internet Security |
| Typical file path: | C:\Program Files\comodo\comodo internet security\cistray.exe |
| File version: | 7, 0, 315459, 4132 |
| Size: | 1.22 MB (1,275,608 bytes) |
| Build date: | 3/25/2014 2:50 PM |
| Certificate |
| Issued to: | Comodo Security Solutions |
| Authority (CA): | COMODO CA Limited |
| Effective date: | Wednesday, June 13, 2012 |
| Expiration date: | Friday, June 14, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following programs will install this file
“Comodo's free Firewall is your first layer of defense against viruses, worms, Trojans, hackers and all Internet threats. Comodo's Firewall uses Default Deny Protection to prevent threats from occurring, rather than just detecting them when it's already too late. Whenever an unknown piece of software is introduced to your system, Comodo Firewall cross-references it with a white-list of over 15 million trusted files and applications. If t...”
“Comodo Internet Security is the free, multi-layered, security application that offers complete protection from viruses, Trojans, worms, buffer overflows, zero-day attacks, spyware and hackers. Built from the ground upwards with your security in mind, Comodo Internet Security combines powerful Antivirus protection, an enterprise class packet filtering firewall, advanced host intrusion prevention, application control and anti-spyware in o...”
“Comodo Antivirus is the free way to rid your computer of viruses, malware, Trojans, worms, hackers, and other Internet threats. Scan any drive or file. Get in-depth reports on viral activity. Detect suspicious files that behave like viruses do. Even scan compressed .zip files, where viruses often hide. The latest version sees a major leap forward in security and usability with the addition of cloud based virus-scanning and behavior anal...”
Comodo Internet Security (CIS), developed by Comodo Group, is an Internet security suite available for Microsoft Windows. It offers anti-malware (antivirus) protection, a personal firewall, a sandbox and a Host-based Intrusion Prevention System (HIPS) called Defense+. Comodo Internet Security (CIS) is available in four editions: Comodo Internet Security (the standard edition), Comodo Internet Security Plus, Comodo Internet Security Pro ...
“Comodo Internet Security Complete 2013 guarantees protection against viruses and malware by focusing on prevention not simply detection. Our patent pending prevention based technology creates an impenetrable shield that identifies safe, unsafe and questionable files. Comodo Internet Security Complete 2013 offers real-time protection against Viruses, Trojans, Adware, Spyware and other Malware threats. Other Antivirus products depend on s...”
“Comodo Internet Security Complete 2013 guarantees protection against viruses and malware by focusing on prevention not simply detection. Our patent pending prevention based technology creates an impenetrable shield that identifies safe, unsafe and questionable files. Comodo Internet Security Complete 2013 offers real-time protection against Viruses, Trojans, Adware, Spyware and other Malware threats. Other Antivirus products depend on s...”
Behaviors
Scheduled tasks
- The task '{31DDBD37-5DB7-4030-8064-10B0CAA806C3}' runs on logon in the path '\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}'
- Entry path '\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}'
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'COMODO Internet Security' → C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00186603% | |
| Kernel CPU: | 0.00076003% | |
| User CPU: | 0.00110600% | |
| Kernel CPU time: | 201,733 ms/min | |
| CPU cycles: | 14,676,880/sec | |
| Memory |
| Private memory: | 7.46 MB | |
| Private (maximum): | 11.63 MB | |
| Private (minimum): | 7.29 MB | |
| Non-paged memory: | 7.46 MB | |
| Virtual memory: | 140.04 MB | |
| Virtual memory (peak): | 149.03 MB | |
| Working set: | 10.78 MB | |
| Working set (peak): | 16.77 MB | |
| Page faults: | 17,226,034/min | |
| I/O |
| I/O read transfer: | 426 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 512 Bytes/sec | |
| I/O other operations: | 62/sec | |
| Resource allocations |
| Threads: | 6 | |
| Handles: | 208 | |
| GUI GDI count: | 140 | |
| GUI GDI peak: | 144 | |
| GUI USER count: | 52 | |
| GUI USER peak: | 56 | |
Process properties
| Tray notification: | Yes |
| Integrety level: | High |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\comodo\comodo internet security\cistray.exe" |
| Owner: | User |
| Parent processes: |
|
Threads
Averages
| cistray.exe (main module) |
| Total CPU: | 0.39894013% | |
| Kernel CPU: | 0.16908565% | |
| User CPU: | 0.22985448% | |
| CPU cycles: | 14,342,080/sec | |
| Memory: | 1.25 MB | |
| ntdll.dll |
| Total CPU: | 0.00049137% | |
| Kernel CPU: | 0.00049137% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 101,673/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
21.43% |
|
| Windows 8 |
21.43% |
|
| Windows 7 Professional |
14.29% |
|
| Windows 7 Ultimate |
14.29% |
|
| Windows 8.1 Pro |
10.71% |
|
| Windows 8 Pro |
10.71% |
|
| Windows 8.1 |
3.57% |
|
| Microsoft Windows XP |
3.57% |
|
Distribution by country
United States installs about 50.00% of COMODO Internet Security.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
36.84% |
|
| Sony |
21.05% |
|
| Acer |
10.53% |
|
| Lenovo |
10.53% |
|
| Hewlett-Packard |
7.89% |
|
| ASUS |
5.26% |
|
| GIGABYTE |
5.26% |
|
| Samsung |
2.63% |
|
