vsmon.exe
TrueVector Service by Check Point Software Technologies Ltd. (Signed)
| Version: | 13.2.15.0 |
| MD5: | abc70d66394c27f0b50e41a19e89c2d7 |
| SHA1: | a71a7f38026f5e15f20cdb463e19c3d6add19ac0 |
Overview
vsmon.exe runs as a service under the name TrueVector Internet Monitor (vsmon) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including ZoneAlarm Free Antivirus + Firewall published by Check Point, Inc, ZoneAlarm Free Firewall from Check Point, Inc and ZoneAlarm Free Firewall by Check Point, Inc. The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | vsmon.exe |
| Publisher: | Check Point Software Technologies Ltd. |
| Product name: | TrueVector Service |
| Typical file path: | C:\Program Files\checkpoint\zonealarm\vsmon.exe |
| File version: | 13.2.15.0 |
| Size: | 3.43 MB (3,592,120 bytes) |
| Build date: | 5/29/2014 8:16 PM |
| Certificate |
| Issued to: | Check Point Software Technologies Ltd. |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, May 11, 2014 |
| Expiration date: | Monday, July 10, 2017 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security solution that seamlessly integrates antivirus and firewall together for maximum protection and performance. Product features: Antivirus/Anti-spyware Engine--Detect and blocks viruses, spyware, trojans, worms, bots, and rootkits. Two-Way Firewall--Makes your PC invisible to hackers and stops s...”
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies. Note: Includes ZoneAlarm Security Toolbar with ZoneAlarm homepage, search default and new tab page search."
“ZoneAlarm Extreme Security is a comprehensive security suite protects your PC, identity, data and everything you do online. Further protection comes with anti-phishing, anti-spam, parental controls and online backup. Also includes unique security not found in other suites like virtual and private browsing, identity protection with victim recovery services, and optional hard drive encryption that stops others from reading your PC, laptop...”
“Detects and removes viruses, spyware, Trojan horses, worms, bots and more. Independently tested to provide superior protection. Restricts programs from malicious activities – blocking attacks that bypass other defenses. Antivirus by itself is on average only 68% effective against new threats and even two-way firewalls can’t keep all hackers out. Application Control stops malware from phoning home or turning your PC into a bot. Stops Int...”
“Monitors programs for suspicious behavior spotting and stopping new attacks that bypass traditional anti-virus protection. Locks out hackers, blocks intrusions and makes your PC invisible online. No product is 100% effective against viruses or spyware. ZoneAlarm's advanced firewall monitors behaviors within your computer to spot and stop even the most sophisticated new attacks that bypass traditional antivirus and security suites. Autom...”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'vsmon' (TrueVector Internet Monitor)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00171934% | |
| Kernel CPU: | 0.00093370% | |
| User CPU: | 0.00078564% | |
| Kernel CPU time: | 110,269 ms/min | |
| Context switches: | 79/sec | |
| Memory |
| Private memory: | 161.13 MB | |
| Private (maximum): | 151.28 MB | |
| Private (minimum): | 29.07 MB | |
| Non-paged memory: | 161.13 MB | |
| Virtual memory: | 364.17 MB | |
| Virtual memory (peak): | 478.82 MB | |
| Working set: | 151.39 MB | |
| Working set (peak): | 292.08 MB | |
| Page faults: | 1,916,942/min | |
| Resource allocations |
| Threads: | 52 | |
| Handles: | 2558 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\checkpoint\zonealarm\vsmon.exe" -service |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | vsmon |
| Display name: | TrueVector Internet Monitor |
| Description: | “Monitors internet traffic and generates alerts for disallowed access.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| vsmon.exe (main module) |
| Total CPU: | 0.01980482% | |
| Kernel CPU: | 0.00629532% | |
| User CPU: | 0.01350951% | |
| CPU cycles: | 574,551/sec | |
| Context switches: | 1/sec | |
| Memory: | 3.44 MB | |
| ntdll.dll |
| Total CPU: | 0.00150996% | |
| Kernel CPU: | 0.00000796% | |
| User CPU: | 0.00150199% | |
| CPU cycles: | 289,814/sec | |
| Memory: | 1.67 MB | |
| wow64cpu.dll |
| Total CPU: | 0.00041948% | |
| Kernel CPU: | 0.00027080% | |
| User CPU: | 0.00014868% | |
| CPU cycles: | 8,891/sec | |
| Memory: | 32 KB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
50.00% |
|
| Windows 8 |
25.00% |
|
| Windows Vista Home Premium |
25.00% |
|
Distribution by country
United States installs about 50.00% of TrueVector Service.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
85.71% |
|
| Acer |
14.29% |
|
