vsmon.exe
TrueVector Service by Check Point Software Technologies Ltd. (Signed)
| Version: | 11.0.000.018 |
| MD5: | 25f1342a0769be5bc45ec2cdc1f06299 |
| SHA1: | 12c2d90bb092f7127b00ec92d10dc84ef94080c1 |
| SHA256: | 04b8aabba321ede0ca39e2a388c9fa0cc247494d02b69ff9af89070d0e843610 |
What is vsmon.exe?
True Vector Internet Monitor, also known as TrueVector Security Engine, is the core scanning engine of ZoneAlarm. It is a Windows service which runs as "vsmon.exe" in the processes list. TrueVector Service Monitors internet traffic and generates alerts for disallowed access.
About vsmon.exe (from Check Point Software Technologies Ltd.)
“ZoneAlarm Security Toolbar is keeping you protected and connected.”
Overview
vsmon.exe runs as a service under the name TrueVector Internet Monitor (vsmon) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including ZoneAlarm Free Firewall published by Check Point, Inc, ZoneAlarm Free Firewall from Check Point, Inc and ZoneAlarm Free Firewall by Check Point, Inc. The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | vsmon.exe |
| Publisher: | Check Point Software Technologies LTD |
| Product name: | TrueVector Service |
| Typical file path: | C:\Program Files\checkpoint\zonealarm\vsmon.exe |
| Original name: | vsmondll.dll |
| File version: | 11.0.000.018 |
| Size: | 2.33 MB (2,447,440 bytes) |
| Certificate |
| Issued to: | Check Point Software Technologies Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Monday, May 5, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies. Note: Includes ZoneAlarm Security Toolbar with ZoneAlarm homepage, search default and new tab page search."
“The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security solution that seamlessly integrates antivirus and firewall together for maximum protection and performance. Product features: Antivirus/Anti-spyware Engine--Detect and blocks viruses, spyware, trojans, worms, bots, and rootkits. Two-Way Firewall--Makes your PC invisible to hackers and stops s...”
“Protect your PC from viruses, spyware, phishing and other attacks with our advanced computer security software products. ZoneAlarm Free Firewall blocks viruses that antivirus alone misses, stops hackers attempting to break into your computer, and unlike the default Windows firewall, provides outbound firewall protection to stop spyware from phoning home and botnets from taking over your PC. ZoneAlarm Free Firewall is easy for anyone to...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'vsmon' (TrueVector Internet Monitor)
- vsmon
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00067753% | |
| Kernel CPU: | 0.00026324% | |
| User CPU: | 0.00041429% | |
| Kernel CPU time: | 45,505 ms/min | |
| CPU cycles: | 4,667,262/sec | |
| Memory |
| Private memory: | 29.28 MB | |
| Private (maximum): | 59.1 MB | |
| Private (minimum): | 19.75 MB | |
| Non-paged memory: | 29.28 MB | |
| Virtual memory: | 157.33 MB | |
| Virtual memory (peak): | 172.89 MB | |
| Working set: | 36.7 MB | |
| Working set (peak): | 68.73 MB | |
| Page faults: | 162,690/min | |
| I/O |
| I/O read transfer: | 408.27 KB/sec | |
| I/O read operations: | 99/sec | |
| I/O write transfer: | 190.71 KB/sec | |
| I/O write operations: | 443/sec | |
| I/O other transfer: | 2.25 KB/sec | |
| I/O other operations: | 253/sec | |
| Resource allocations |
| Threads: | 29 | |
| Handles: | 692 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\checkpoint\zonealarm\vsmon.exe" -service |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | vsmon |
| Display name: | TrueVector Internet Monitor |
| Description: | “Monitors internet traffic and generates alerts for disallowed access.” |
| Type: | Win32OwnProcess, InteractiveProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| vsmon.exe (main module) |
| Total CPU: | 0.00996354% | |
| Kernel CPU: | 0.00232942% | |
| User CPU: | 0.00763413% | |
| CPU cycles: | 207,646/sec | |
| Memory: | 2.44 MB | |
| wow64.dll (Win32 Emulation on NT64 by Microsoft) |
| Total CPU: | 0.00235576% | |
| Kernel CPU: | 0.00109127% | |
| User CPU: | 0.00126449% | |
| CPU cycles: | 45,696/sec | |
| Memory: | 252 KB | |
| ntdll.dll |
| Total CPU: | 0.00005439% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00005439% | |
| CPU cycles: | 1,248/sec | |
| Memory: | 1.66 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
58.82% |
|
| Windows 7 Ultimate |
11.76% |
|
| Microsoft Windows XP |
8.82% |
|
| Windows 7 Professional |
5.88% |
|
| Windows Vista Home Premium |
2.94% |
|
| Windows Vista Home Basic |
2.94% |
|
| Windows 8 Pro |
2.94% |
|
| Windows 7 Ultimate N |
2.94% |
|
| Windows Vista Ultimate |
2.94% |
|
Distribution by country
United States installs about 58.82% of TrueVector Service.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
36.84% |
|
| Sony |
21.05% |
|
| Hewlett-Packard |
21.05% |
|
| Sahara |
10.53% |
|
| Toshiba |
10.53% |
|
