vpnagent.exe
Cisco AnyConnect Secure Mobility Client by Cisco Systems (Signed)
| Version: | 3, 1, 01065 |
| MD5: | e23bc9b12ef85b58083a6985f9be3c44 |
| SHA1: | 9da588d0b08986de5f29a88e915553006aa00a2a |
| SHA256: | 6910bdc4d4ee7f8765fe281bc239d027aa7f4c901dfd03037dd9fbffa3c4d3c4 |
Overview
vpnagent.exe runs as a service under the name Cisco AnyConnect Secure Mobility Agent (vpnagent) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Cisco AnyConnect Secure Mobility Client published by Cisco Systems, Inc., Cisco AnyConnect Web Security Module from Cisco Systems, Inc. and Cisco AnyConnect Web Security Module by Cisco Systems, Inc.. The file is digitally signed by Cisco Systems which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 8 Pro with Media Center (6.2.9200.0).
Details
| File name: | vpnagent.exe |
| Publisher: | Cisco Systems, Inc. |
| Product name: | Cisco AnyConnect Secure Mobility Client |
| Description: | VPN Agent Service |
| Typical file path: | C:\Program Files\cisco\cisco anyconnect secure mobility client\vpnagent.exe |
| File version: | 3, 1, 01065 |
| Size: | 531.49 KB (544,248 bytes) |
| Certificate |
| Issued to: | Cisco Systems |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, August 2, 2011 |
| Expiration date: | Friday, August 2, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“Make the VPN experience easier and more secure with the enhanced remote access technology of Cisco AnyConnect Secure Mobility Client. This software builds on prior Cisco AnyConnect VPN Client offerings to improve the always-on VPN experience across more laptop and smartphone-based mobile devices, including laptops using Microsoft Windows 7. This client now universally supports IPv6. Automatically selects the optimal network access point...”
“You can deploy the Web Security module and benefit from the ScanSafe web scanning services without having to install an ASA and without enabling the VPN capabilities of the AnyConnect Secure Mobility Client. You still need a Secure Mobility for ScanSafe license in addition to ScanSafe Web Filtering and/or ScanSafe Malware Scanning licenses in order for roaming users to be protected by ScanSafe web scanning services. Cisco AnyConnect Se...”
“The AnyConnect telemetry module for AnyConnect Secure Mobility Client sends information about the origin of malicious content to the web filtering infrastructure of the Cisco IronPort Web Security Appliance (WSA). The web filtering infrastructure uses this data to strengthen its web security scanning algorithms, improve the accuracy of the URL categories and web reputation database, and ultimately provide better URL filtering rules. Che...”
“The Network Access Manager is client software that provides a secure Layer 2 network in accordance with policies set forth by the enterprise network administrators. The Network Access Manager detects and selects the optimal Layer 2 access network and performs device authentication for access to both wired and wireless networks. The Network Access Manager manages user and device identity and the network access protocols required for secu...”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'vpnagent' (Cisco AnyConnect Secure Mobility Agent)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00097181% | |
| Kernel CPU: | 0.00026349% | |
| User CPU: | 0.00070832% | |
| Kernel CPU time: | 9,375 ms/min | |
| Memory |
| Private memory: | 5.03 MB | |
| Private (maximum): | 14.49 MB | |
| Private (minimum): | 14.49 MB | |
| Non-paged memory: | 5.03 MB | |
| Virtual memory: | 79.98 MB | |
| Virtual memory (peak): | 90.13 MB | |
| Working set: | 14.49 MB | |
| Working set (peak): | 14.7 MB | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 330 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\cisco\cisco anyconnect secure mobility client\vpnagent.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | vpnagent |
| Display name: | Cisco AnyConnect Secure Mobility Agent |
| Description: | “Cisco AnyConnect Secure Mobility Agent for Windows” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 8 Pro with Media Center |
100.00% |
|
