home

cis.exe

COMODO Internet Security

Comodo Security Solutions

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This is installed with multiple programs including COMODO Internet Security Premium and COMODO Firewall.
Publisher:
COMODO  (signed by Comodo Security Solutions)

Product:
COMODO Internet Security

Version:
6, 3, 301686, 2974

MD5:
1d99af0b19cddb7d9e62af20e675145b

SHA-1:
8a471c2fb3a5e5d5f23d1109b1ec6f1b74dc13ba

SHA-256:
2b1a2e3591fa38a960b5754fffc3775e58a148882dbef4f597056223a8772cd7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:26:21 PM UTC  (today)

File size:
8.4 MB (8,788,696 bytes)

Product version:
6, 3, 301686, 2974

Copyright:
2005-2013 COMODO. All rights reserved.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\comodo\comodo internet security\cis.exe

Digital Signature
Signed by:
Comodo Security Solutions

Authority:
COMODO CA Limited

Valid from:
4/7/2013 7:00:00 PM

Valid to:
4/8/2014 6:59:59 PM

Subject:
CN=Comodo Security Solutions, O=Comodo Security Solutions, STREET=1255 Broad St., STREET=Suite 100, L=Clifton, S=New Jersey, PostalCode=07013, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
071AE4A2402BB0AD40F3FBD4402B9290

File PE Metadata
Compilation timestamp:
11/20/2013 6:13:46 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:Q3gmuZFE7UANjbauAYo6bMk7HkWva95S150ja0rLzsxEqPpClDDqzDD3ccCWDDD1:0gm6O7UAMv6wk7HkWva95S150ja0rLzO

Entry address:
0x3C2C18

Entry point:
48, 83, EC, 28, E8, CB, A3, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, F1, 0B, 2C, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, 41, A4, 00, 00, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, F9, E8, 06, A1, 00, 00, 48, 8B, 98, E0, 00, 00, 00, E8, FA, A0, 00, 00, 48, 89, B8, E0, 00, 00, 00, 48, 8B, C3, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, C3, CC, 40, 53, 48, 83...
 
[+]

Entropy:
6.1754

Code size:
4.5 MB (4,673,536 bytes)

Scheduled Task
Task name:
COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69}

Path:
\COMODO\COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69}

Trigger:
Logon (Runs on logon)

Action:
cis.exe --welcomeui


The file cis.exe has been discovered within the following programs.

COMODO Antivirus  by COMODO
Publisher's description - “Comodo Antivirus is the free way to rid your computer of viruses, malware, Trojans, worms, hackers, and other Internet threats. Scan any drive or file. Get in-depth reports on viral activity. Detect suspicious files that behave like viruses do. Even scan compressed .”
www.comodo.com/home/internet-security/antivirus.php
7% remove it
COMODO Firewall  by COMODO
Publisher's description - “Comodo's free Firewall is your first layer of defense against viruses, worms, Trojans, hackers and all Internet threats. Comodo's Firewall uses Default Deny Protection to prevent threats from occurring, rather than just detecting them when it's already too late.”
www.comodo.com/home/internet-security/firewall.php
7% remove it
COMODO Internet Security Complete 2013  by COMODO
Publisher's description - “Comodo Internet Security Complete 2013 guarantees protection against viruses and malware by focusing on prevention not simply detection. Our patent pending prevention based technology creates an impenetrable shield that identifies safe, unsafe and questionable files.”
www.comodo.com/home/internet-security/internet-security-complete.php
4% remove it
COMODO Internet Security Premium  by COMODO
Publisher's description - “Comodo Internet Security is the free, multi-layered, security application that offers complete protection from viruses, Trojans, worms, buffer overflows, zero-day attacks, spyware and hackers.”
www.comodo.com
22% remove it
 
Powered by Should I Remove It?

Scan cis.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.