Versions

3.2.7.0	29.41%
3.2.5.0	5.88%
2.3.17.0	5.88%
2.3.16.0	5.88%
2.2.17	17.65%
2.1.13	11.76%
2.1.12	11.76%
2.1.10	5.88%
2.1.5	5.88%

There are 9 versions of expresstray.exe in the wild, the latest version being 3.2.7.0. expresstray.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 859.94 KB. The file is a digitally signed and issued to Garmin International by VeriSign. Some variations of the file have been seen to be installed with the program Garmin Express Tray from Garmin. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0038% including both foreground and background operations, the average private memory consumption is about 68.24 MB. Addionally, typically read and write I/O disk operations is about 2.38 KB per minute for reads and 595 Bytes per minute for writes.