iswsvc.exe
ZoneAlarm Browser Security by Check Point Software Technologies Ltd. (Signed)
| Version: | 1, 5, 395, 0 |
| MD5: | eedac170e922a4bd19fdb3d0d55786bb |
| SHA1: | cbe4720d817045126393b13874c1c76a11f5cec4 |
| SHA256: | cc2c60f69b3adebb5b665c7d0ff33f460b596e798a5ba00dfd23802df11f2904 |
What is iswsvc.exe?
Check Point's ZoneAlarm ForceField is designed to secure Web browsing sessions through the use of browser virtualization, inline download scanning and DNS validation services.
About iswsvc.exe (from Check Point Software Technologies Ltd.)
“Get ZoneAlarm ForceField for your browser. ForceField works hard at Web safety so you don't have to, but you should continue to browse with common sense in mind.”
Overview
iswsvc.exe runs as a service under the name ZoneAlarm Toolbar IswSvc (IswSvc) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | iswsvc.exe |
| Publisher: | Check Point Software Technologies |
| Product name: | ZoneAlarm Browser Security |
| Typical file path: | C:\Program Files\checkpoint\zaforcefield\iswsvc.exe |
| File version: | 1, 5, 395, 0 |
| Size: | 808.16 KB (827,560 bytes) |
| Certificate |
| Issued to: | Check Point Software Technologies Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Monday, May 5, 2014 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'IswSvc' (ZoneAlarm Toolbar IswSvc)
- IswSvc
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00053512% | |
| Kernel CPU: | 0.00045213% | |
| User CPU: | 0.00008299% | |
| Kernel CPU time: | 505,069 ms/min | |
| Memory |
| Private memory: | 6.6 MB | |
| Private (maximum): | 12.12 MB | |
| Private (minimum): | 11.02 MB | |
| Non-paged memory: | 6.6 MB | |
| Virtual memory: | 84.65 MB | |
| Virtual memory (peak): | 119.26 MB | |
| Working set: | 11.75 MB | |
| Working set (peak): | 20.53 MB | |
| Resource allocations |
| Threads: | 11 | |
| Handles: | 204 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\checkpoint\zaforcefield\iswsvc.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | IswSvc |
| Display name: | ZoneAlarm Toolbar IswSvc |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.31085532% | |
| Kernel CPU: | 0.12264615% | |
| User CPU: | 0.18820917% | |
| CPU cycles: | 9,636,633/sec | |
| Context switches: | 157/sec | |
| Memory: | 1.66 MB | |
| MSVCR80.dll |
| Total CPU: | 0.00002231% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00002231% | |
| CPU cycles: | 1,045/sec | |
| Memory: | 804 KB | |
| sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft) |
| Total CPU: | 0.00002231% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00002231% | |
| CPU cycles: | 641/sec | |
| Memory: | 124 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
48.00% |
|
| Microsoft Windows XP |
16.00% |
|
| Windows Vista Home Basic |
8.00% |
|
| Windows 8 Pro |
8.00% |
|
| Windows 7 Professional |
8.00% |
|
| Windows 7 Ultimate N |
4.00% |
|
| Windows Vista Ultimate |
4.00% |
|
| Windows 7 Ultimate |
4.00% |
|
Distribution by country
United States installs about 60.00% of ZoneAlarm Browser Security.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
80.00% |
|
| Acer |
20.00% |
|
