vsmon.exe
TrueVector Service by Check Point Software Technologies Ltd. (Signed)
Version: | 10.1.065.000 |
MD5: | bb4c900fd6bf91422fc44a9cb640ae01 |
SHA1: | 7347cef8edf82720cdab5b171893810b8761a846 |
What is vsmon.exe?
True Vector Internet Monitor, also known as TrueVector Security Engine, is the core scanning engine of ZoneAlarm. It is a Windows service which runs as "vsmon.exe" in the processes list. TrueVector Service Monitors internet traffic and generates alerts for disallowed access.
About vsmon.exe (from Check Point Software Technologies Ltd.)
“ZoneAlarm Security Toolbar is keeping you protected and connected.”
Overview
vsmon.exe runs as a service under the name TrueVector Internet Monitor (vsmon) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including ZoneAlarm Free published by Check Point, Inc, ZoneAlarm Free Firewall from Check Point, Inc and ZoneAlarm Free Firewall by Check Point, Inc. The file is digitally signed by Check Point Software Technologies Ltd. which was issued by the VeriSign certificate authority (CA).
Details
File name: | vsmon.exe |
Publisher: | Check Point Software Technologies LTD |
Product name: | TrueVector Service |
Typical file path: | C:\Program Files\checkpoint\zonealarm\vsmon.exe |
Original name: | vsmondll.dll |
File version: | 10.1.065.000 |
Size: | 2.31 MB (2,420,616 bytes) |
Build date: | 11/9/2011 8:00 PM |
Certificate |
Issued to: | Check Point Software Technologies Ltd. |
Authority (CA): | VeriSign |
Expiration date: | Monday, May 5, 2014 |
Digital DNA |
File packed: | No |
.NET CLR: | No |
More details
Programs
The following programs will install this file
“Protect your PC from viruses, spyware, phishing and other attacks with our advanced computer security software products. ZoneAlarm Free Firewall blocks viruses that antivirus alone misses, stops hackers attempting to break into your computer, and unlike the default Windows firewall, provides outbound firewall protection to stop spyware from phoning home and botnets from taking over your PC. ZoneAlarm Free Firewall is easy for anyone to...”
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading security companies. Note: Includes ZoneAlarm Security Toolbar with ZoneAlarm homepage, search default and new tab page search."
“ZoneAlarm Extreme Security is a comprehensive security suite protects your PC, identity, data and everything you do online. Further protection comes with anti-phishing, anti-spam, parental controls and online backup. Also includes unique security not found in other suites like virtual and private browsing, identity protection with victim recovery services, and optional hard drive encryption that stops others from reading your PC, laptop...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'vsmon' (TrueVector Internet Monitor)
- vsmon
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00084020% | |
Kernel CPU: | 0.00027811% | |
User CPU: | 0.00056209% | |
Kernel CPU time: | 85,379 ms/min | |
Memory |
Private memory: | 31.48 MB | |
Private (maximum): | 21.92 MB | |
Private (minimum): | 14.82 MB | |
Non-paged memory: | 31.48 MB | |
Virtual memory: | 170.11 MB | |
Virtual memory (peak): | 187.3 MB | |
Working set: | 17.43 MB | |
Working set (peak): | 34.05 MB | |
Page faults: | 229,957/min | |
Resource allocations |
Threads: | 29 | |
Handles: | 680 | |
Process properties
Integrety level: | Undefined |
Platform: | 64-bit |
Command line: | "C:\Program Files\checkpoint\zonealarm\vsmon.exe" -service |
Owner: | SYSTEM |
Windows Service |
Service name: | vsmon |
Display name: | TrueVector Internet Monitor |
Description: | “Monitors internet traffic and generates alerts for disallowed access.” |
Type: | Win32OwnProcess, InteractiveProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
vsmon.exe (main module) |
Total CPU: | 0.01815840% | |
Kernel CPU: | 0.00598310% | |
User CPU: | 0.01217530% | |
CPU cycles: | 181,330/sec | |
Memory: | 2.41 MB | |
wow64.dll |
Total CPU: | 0.01050111% | |
Kernel CPU: | 0.00365710% | |
User CPU: | 0.00684400% | |
CPU cycles: | 106,277/sec | |
Memory: | 252 KB | |
ntdll.dll |
Total CPU: | 0.00009144% | |
Kernel CPU: | 0.00009144% | |
User CPU: | 0.00000000% | |
CPU cycles: | 916/sec | |
Memory: | 1.66 MB | |
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
58.82% |
|
Windows 7 Ultimate |
11.76% |
|
Microsoft Windows XP |
8.82% |
|
Windows 7 Professional |
5.88% |
|
Windows Vista Home Premium |
2.94% |
|
Windows Vista Home Basic |
2.94% |
|
Windows 8 Pro |
2.94% |
|
Windows 7 Ultimate N |
2.94% |
|
Windows Vista Ultimate |
2.94% |
|
Distribution by country
United States installs about 58.82% of TrueVector Service.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Acer |
36.84% |
|
Sony |
21.05% |
|
Hewlett-Packard |
21.05% |
|
Sahara |
10.53% |
|
Toshiba |
10.53% |
|