home

vpnagent.exe

Cisco AnyConnect Secure Mobility Client

Cisco Systems, Inc.

It runs as a separate (within the context of its own process) windows Service named “Cisco AnyConnect Secure Mobility Agent”. This is installed with multiple programs including Cisco AnyConnect Telemetry Module and Cisco AnyConnect Secure Mobility Client.
Publisher:
Cisco Systems, Inc.  (signed and verified)

Product:
Cisco AnyConnect Secure Mobility Client

Description:
VPN Agent Service

Version:
3, 0, 08057

MD5:
18507bdc6c15bd464de9ab18b6af1c23

SHA-1:
448d75339c71b3fbe553fa4ccefde3cad4aec9b1

SHA-256:
b06c90a2e2b1a2915da5bdfb9b9f48d8b6d541af9147a0afe9461aae208acc9b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/3/2024 5:32:39 AM UTC  (today)

File size:
467.5 KB (478,712 bytes)

Product version:
3, 0, 08057

Copyright:
© Copyright 2004-2012, Cisco Systems, Inc.

Trademarks:
You can request legal trademarks and credits at anyconnect-credits@cisco.com

Original file name:
vpnagent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cisco\cisco anyconnect secure mobility client\vpnagent.exe

Digital Signature
Signed by:
Cisco Systems, Inc.

Authority:
VeriSign, Inc.

Valid from:
2/7/2011 7:00:00 PM

Valid to:
2/7/2013 6:59:59 PM

Subject:
CN="Cisco Systems, Inc.", OU=Endpoint Security, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Cisco Systems, Inc.", L=Boxborough, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
06DB161D57C91FB4A942678B9975D458

File PE Metadata
Compilation timestamp:
6/7/2012 11:32:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:XSarC/Sbk5sJNTPfLorGSy94j0T/gbbThPLXm/tUKgitdwaYMfe7r9Q7GBTLcpYL:XdeC3Uny94j0T/gbv1LX9c9bgz

Entry address:
0x37B90

Entry point:
E8, D8, 05, 00, 00, E9, 57, FD, FF, FF, FF, 25, E0, D2, 43, 00, FF, 25, DC, D2, 43, 00, FF, 25, D8, D2, 43, 00, FF, 25, D4, D2, 43, 00, FF, 25, D0, D2, 43, 00, FF, 25, CC, D2, 43, 00, CC, CC, 68, 19, 7C, 43, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 3C, 00, 46, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59...
 
[+]

Entropy:
6.5089

Code size:
239 KB (244,736 bytes)

Service
Display name:
Cisco AnyConnect Secure Mobility Agent

Service name:
vpnagent

Description:
Cisco AnyConnect Secure Mobility Agent for Windows

Type:
Win32OwnProcess


The file vpnagent.exe has been discovered within the following programs.

CAD Clients Service Release  by Spanlink Communications
About 5% of users remove it
Cisco Agent Desktop  by Calabrio Inc.
calabrio.com
About 3% of users remove it
Cisco AnyConnect Network Access Manager  by Cisco Systems, Inc.
Publisher's description - “The Network Access Manager is client software that provides a secure Layer 2 network in accordance with policies set forth by the enterprise network administrators.”
www.cisco.com
7% remove it
Cisco AnyConnect Secure Mobility Client  by Cisco Systems, Inc.
Publisher's description - “Make the VPN experience easier and more secure with the enhanced remote access technology of Cisco AnyConnect Secure Mobility Client.”
7% remove it
Cisco AnyConnect Secure Mobility Client - Always On  by Cisco Systems, Inc.
11% remove it
Cisco AnyConnect Telemetry Module  by Cisco Systems, Inc.
Publisher's description - “The AnyConnect telemetry module for AnyConnect Secure Mobility Client sends information about the origin of malicious content to the web filtering infrastructure of the Cisco IronPort Web Security Appliance (WSA).”
9% remove it
Cisco AnyConnect Web Security Module  by Cisco Systems, Inc.
Publisher's description - “You can deploy the Web Security module and benefit from the ScanSafe web scanning services without having to install an ASA and without enabling the VPN capabilities of the AnyConnect Secure Mobility Client.”
8% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.