vsmon.exe
TrueVector Service by Check Point Software Technologies Ltd. (Signed)
| Version: | 10.2.074.000 |
| MD5: | 76b311df9bf7a4a841db2fbad4e3b163 |
| SHA1: | ba7bebb9e3e49f282446cf545a2424fa1ff29470 |
| SHA256: | 0fc6a2c769c603853a3f286c28f3ce60c6bfde0c62ec6bda0134f14ea2cca420 |
What is vsmon.exe?
True Vector Internet Monitor, also known as TrueVector Security Engine, is the core scanning engine of ZoneAlarm. It is a Windows service which runs as "vsmon.exe" in the processes list. TrueVector Service Monitors internet traffic and generates alerts for disallowed access.
About vsmon.exe (from Check Point Software Technologies Ltd.)
“ZoneAlarm Security Toolbar is keeping you protected and connected.”
Overview
vsmon.exe runs as a service under the name TrueVector Internet Monitor (vsmon) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including ZoneAlarm Free Firewall published by Check Point, Inc, ZoneAlarm Free Firewall from Check Point, Inc and ZoneAlarm Free Firewall by Check Point, Inc. The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | vsmon.exe |
| Publisher: | Check Point Software Technologies LTD |
| Product name: | TrueVector Service |
| Typical file path: | C:\Program Files\checkpoint\zonealarm\vsmon.exe |
| Original name: | vsmondll.dll |
| File version: | 10.2.074.000 |
| Size: | 2.33 MB (2,445,880 bytes) |
| Certificate |
| Issued to: | Check Point Software Technologies Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Monday, May 5, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies. Note: Includes ZoneAlarm Security Toolbar with ZoneAlarm homepage, search default and new tab page search."
“ZoneAlarm Extreme Security is a comprehensive security suite protects your PC, identity, data and everything you do online. Further protection comes with anti-phishing, anti-spam, parental controls and online backup. Also includes unique security not found in other suites like virtual and private browsing, identity protection with victim recovery services, and optional hard drive encryption that stops others from reading your PC, laptop...”
“The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security solution that seamlessly integrates antivirus and firewall together for maximum protection and performance. Product features: Antivirus/Anti-spyware Engine--Detect and blocks viruses, spyware, trojans, worms, bots, and rootkits. Two-Way Firewall--Makes your PC invisible to hackers and stops s...”
“Monitors programs for suspicious behavior spotting and stopping new attacks that bypass traditional anti-virus protection. Locks out hackers, blocks intrusions and makes your PC invisible online. No product is 100% effective against viruses or spyware. ZoneAlarm's advanced firewall monitors behaviors within your computer to spot and stop even the most sophisticated new attacks that bypass traditional antivirus and security suites. Autom...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'vsmon' (TrueVector Internet Monitor)
- vsmon
Network connections
[TCP] a60-254-143-88.deploy.akamaitechnologies.com (60.254.143.88:80)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00107777% | |
| Kernel CPU: | 0.00048299% | |
| User CPU: | 0.00059478% | |
| Kernel CPU time: | 459,142 ms/min | |
| Memory |
| Private memory: | 414.5 MB | |
| Private (maximum): | 511.23 MB | |
| Private (minimum): | 131.23 MB | |
| Non-paged memory: | 414.5 MB | |
| Virtual memory: | 1 GB | |
| Virtual memory (peak): | 1.42 GB | |
| Working set: | 194.7 MB | |
| Working set (peak): | 648.61 MB | |
| Resource allocations |
| Threads: | 90 | |
| Handles: | 2270 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\checkpoint\zonealarm\vsmon.exe" -service |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | vsmon |
| Display name: | TrueVector Internet Monitor |
| Description: | “Monitors internet traffic and generates alerts for disallowed access.” |
| Type: | Win32OwnProcess, InteractiveProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| vsmon.exe (main module) |
| Total CPU: | 0.03569136% | |
| Kernel CPU: | 0.01200072% | |
| User CPU: | 0.02369064% | |
| CPU cycles: | 1,065,304/sec | |
| Context switches: | 2/sec | |
| Memory: | 2.43 MB | |
| wow64.dll (Win32 Emulation on NT64 by Microsoft) |
| Total CPU: | 0.00297137% | |
| Kernel CPU: | 0.00129579% | |
| User CPU: | 0.00167559% | |
| CPU cycles: | 78,749/sec | |
| Memory: | 252 KB | |
| ntdll.dll |
| Total CPU: | 0.00027131% | |
| Kernel CPU: | 0.00003724% | |
| User CPU: | 0.00023407% | |
| CPU cycles: | 7,727/sec | |
| Memory: | 1.66 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
58.82% |
|
| Windows 7 Ultimate |
11.76% |
|
| Microsoft Windows XP |
8.82% |
|
| Windows 7 Professional |
5.88% |
|
| Windows Vista Home Premium |
2.94% |
|
| Windows Vista Home Basic |
2.94% |
|
| Windows 8 Pro |
2.94% |
|
| Windows 7 Ultimate N |
2.94% |
|
| Windows Vista Ultimate |
2.94% |
|
Distribution by country
United States installs about 58.82% of TrueVector Service.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
36.84% |
|
| Sony |
21.05% |
|
| Hewlett-Packard |
21.05% |
|
| Sahara |
10.53% |
|
| Toshiba |
10.53% |
|
