home

acsmux.sys

Cisco AnyConnect Secure Mobility Client

Cisco Systems, Inc.

Publisher:
Cisco Systems, Inc.  (signed and verified)

Product:
Cisco AnyConnect Secure Mobility Client

Description:
Cisco AnyConnect Kernel Driver Framework Socket Layer Multiplexor

Version:
4, 2, 03009

MD5:
63f4063f588a4d519299c23fecfb106d

SHA-1:
d1af84d213a91807fd12ce0d6a511433adec7759

SHA-256:
8b657d7e7c4c3cc49697135a2c7b3ee0f5147f94e7720e90901cdf2966b20ca8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 1:25:40 PM UTC  (today)

File size:
109.1 KB (111,752 bytes)

Product version:
4, 2, 03009

Copyright:
© Copyright 2004-2016, Cisco Systems, Inc.

Trademarks:
You can request legal trademarks and credits at anyconnect-credits@cisco.com

Original file name:
acsmux.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\a1aaa8a\acsmux.sys

Digital Signature
Signed by:
Cisco Systems, Inc.

Authority:
VeriSign, Inc.

Valid from:
3/23/2015 6:00:00 PM

Valid to:
5/22/2017 5:59:59 PM

Subject:
CN="Cisco Systems, Inc.", O="Cisco Systems, Inc.", L=Boxborough, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
64813F6B7BDE8BA2ED1B9263A6DAB71A

File PE Metadata
Compilation timestamp:
3/22/2016 9:15:32 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
1536:X4c+22LXFVruBrDsgdjB05WH2VAWauQAMT53ov8o5M2L/oeLynNbAfy+m:IcwrjiFVju5QtT53ov8o5M8//qp

Entry address:
0x146BE

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 00, BE, FE, FF, CC, CC, 38, 47, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 34, 4A, 01, 00, 98, B9, 00, 00, 20, 47, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 98, 4A, 01, 00, 80, B9, 00, 00, 30, 47, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, B8, 4A, 01, 00, 90, B9, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7C, 4A, 01, 00, 60, 4A, 01, 00, 42, 4A, 01, 00, 00, 00, 00, 00, A2, 4A, 01, 00, 00, 00, 00, 00, 00, 49, 01, 00, 10, 49...
 
[+]

Entropy:
6.1482

Code size:
52.4 KB (53,632 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.