» libhostscan.dll
Overview
Analysis
File Details
Programs (1)

libhostscan.dll

Cisco AnyConnect Posture

Cisco Systems, Inc.

This is installed with Cisco AnyConnect Posture Module.

File name:

libhostscan.dll

Publisher:

Cisco Systems, Inc. (signed and verified)

Product:

Cisco AnyConnect Posture

Description:

libhostscan Dynamic Link Library

Version:

3, 1, 04066

MD5:

ab205a30870de4931ecd12634867f75f

SHA-1:

ea02a638df56be8b4d00ffb2d6709ccf377c452a

SHA-256:

1afc123cb3f75c37cfe769b154abb1e8b976e540fc83ee257d1b2342649e71f7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:18:24 PM UTC (today)

File size:

164.9 KB (168,848 bytes)

Product version:

3, 1, 04066

Trademarks:

You can request legal trademarks and credits at csd-credits@cisco.com

Original file name:

libhostscan.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\cisco\cisco anyconnect secure mobility client\posture\libhostscan.dll

Digital Signature

Signed by:

Cisco Systems, Inc.

Authority:

VeriSign, Inc.

Valid from:

1/2/2013 7:00:00 PM

Valid to:

4/4/2015 7:59:59 PM

Subject:

CN="Cisco Systems, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Cisco Systems, Inc.", L=Boxborough, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5ECE4ABD054DB0EE1ACEF57C4D3F442C

File PE Metadata

Compilation timestamp:

8/30/2013 5:58:12 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:8qPVqqyrTXLzHz++CcTvSmQFGBeYheINWr9K63YnopMOLTBfa6k2VwHs:5PVqqyrTXLzucTYGBeGE46mOLTBTVwM

Entry address:

0x1A907

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 4B, 03, 00, 00, 5D, E9, 8E, FD, FF, FF, CC, FF, 25, 88, B2, 01, 10, FF, 25, 5C, B2, 01, 10, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 68, 65, 02, 10, 89, 0D, 64, 65, 02, 10, 89, 15, 60, 65, 02, 10, 89, 1D, 5C, 65, 02, 10, 89, 35, 58, 65, 02, 10, 89, 3D, 54, 65, 02, 10, 66, 8C, 15, 80, 65, 02, 10, 66, 8C, 0D, 74, 65, 02, 10, 66, 8C, 1D, 50, 65, 02, 10, 66, 8C, 05, 4C, 65, 02, 10, 66, 8C, 25, 48, 65, 02, 10, 66, 8C, 2D, 44, 65, 02, 10, 9C, 8F, 05, 78, 65... 
[+]

Entropy:

6.8733

Code size:

104 KB (106,496 bytes)

The file libhostscan.dll has been discovered within the following program.

Cisco AnyConnect Posture Module by Cisco Systems, Inc.

Publisher's description - “he AnyConnect Posture Module can be deployed by the ASA to the endpoint, or it can be installed on the endpoint using a pre-deployment kit before the endpoint makes its initial connection to the ASA.”

www.cisco.com

5% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.