Cisco AnyConnect Telemetry Module
What is Cisco AnyConnect Telemetry Module? (from Cisco Systems)
The AnyConnect telemetry module for AnyConnect Secure Mobility Client sends information about the origin of malicious content to the web filtering infrastructure of the Cisco IronPort Web Security Appliance (WSA). The web filtering infrastructure uses this data to strengthen its web security scanning algorithms, improv... Read more
Overview
Cisco AnyConnect Telemetry Module is a program developed by Cisco Systems. The most used version is 3.1.05160, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The software installer includes 50 files and is usually about 14.12 MB (14,803,300 bytes). In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 81% of users of Cisco AnyConnect Telemetry Module come from the United States, it is also popular in Mexico and Netherlands.
Program details
URL: www.cisco.com
Help link: www.cisco.com/TAC
Installation folder: C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\
Uninstaller: MsiExec.exe /X{9FBA8080-DFDB-4498-80CD-0DC58739BFA5}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 14.12 MB
Language: English (United States)
Files installed by Cisco AnyConnect Telemetry Module
-
ac_sock_fltr_api.dll - Cisco AnyConnect Secure Mobility Client (Cisco AnyConnect Kernel Driver Framework Socket Layer Configuration Library)
-
acnamagent.exe - Cisco AnyConnect Network Access Manager (AnyConnect NAM Service)
-
acnamauth.dll - AnyConnect NAM Authentication Library
-
acnamcontrol.exe - AnyConnect NAM Control Utility
-
acnamcorelib.dll - AnyConnect NAM OS Core Library
-
acnamfdapi.dll - Cisco AnyConnect Network Access Manager Filter Driver API
-
acnamihv.dll - Cisco AnyConnect Network Access Manager IHV Service
-
acnamihvapi.dll - Cisco AnyConnect Network Access Manager IHV Service API DLL
-
acnamlogging.dll - AnyConnect Nam Logging Library
-
acnamlogonagent.exe - AnyConnect NAM Logon Agent
-
acnampwdcredprovider.dll - AnyConnect NAM Password Credential Provider Library
-
acnamsyslib.dll - AnyConnect NAM System Library
-
acsock.sys - Cisco AnyConnect Kernel Driver Framework Socket Layer Interceptor
-
acsock64.sys
-
InstallHelper.exe - AnyConnect Secure Mobility Client Install Helper
-
InstallHelper64.exe
-
ManifestTool.exe - Cisco AnyConnect Secure Mobility Client ManifestTool
-
Uninstall.exe - Cisco AnyConnect Secure Mobility Client Setup Application
-
VACon.exe - AnyConnect Secure Mobility Client Virtual Adapter Installer
-
VACon64.exe
-
vpnagent.exe - VPN Agent Service
-
vpnagentutilities.dll - AgentUtilities
-
vpnapi.dll - AnyConnect Secure Mobility Client VPN API
-
vpncli.exe - VPN Client Command Line Interface
-
vpncommon.dll - Common
-
vpncommoncrypt.dll - CommonCrypt
-
vpndownloader.exe - Cisco AnyConnect Secure Mobility Client Downloader
-
vpnui.exe - Cisco AnyConnect User Interface
-
vpnva-6.sys - Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows
-
vpnva64-6.sys
-
acobfuscate.exe - Cisco AnyConnect Web Security Module (Cisco AnyConnect Web Security Configuration Obfuscator)
-
acwebsecagent.exe - Cisco AnyConnect Web Security Agent
-
dartcli.exe - Cisco AnyConnect DART (Dart CLI)
-
DARTEngine.dll - Dart Engine
-
DartOffline.exe - Dart Offline
-
wineventlog.exe - Windows Event Log Utility
-
acciscocrypto.dll (by The OpenSSL Project, http://www.openssl.org/) - The OpenSSL Toolkit (OpenSSL Shared Library)
-
acciscossl.dll (by The OpenSSL Project, http://www.openssl.org/)
-
zlib1.dll - zlib (zlib data compression library)
-
libxml2.dll
Behaviors exhibited
2 Scheduled Tasks
- vpnui.exe is scheduled as a task with the class '{B6B1C53A-557E-4AAF-9BD5-2BD15DC389C2}' (runs on registration).
- vpndownloader.exe is scheduled as a task with the class '{7D65395E-3935-4C7A-90C5-CDADA66AB45D}' (runs on registration).
Scheduled Task (Boot/Login)
- vpnui.exe is automatically launched at startup through a scheduled task named Cisco AnyConnect Secure Mobility Agent for Windows.
4 Services
- acwebsecagent.exe runs as a service named 'Cisco AnyConnect Web Security Agent' (acwebsecagent) "Cisco AnyConnect Advanced Web Security Framework Service".
- acnamlogonagent.exe runs as a service named 'Cisco AnyConnect Network Access Manager Logon Module' (namlm) "Provides Single Sign On support for the Cisco AnyConnect Network Access Manager".
- acnamagent.exe runs as a service named 'Cisco AnyConnect Network Access Manager' (nam) "Establishes secure, authenticated WiFi or Ethernet connections for this computer.".
- vpnagent.exe runs as a service named 'Cisco AnyConnect Secure Mobility Agent' (vpnagent) "Cisco AnyConnect Secure Mobility Agent for Windows".
Startup File (All Users Run)
- vpnui.exe is loaded in the all users (HKLM) registry as a startup file name 'Cisco AnyConnect Secure Mobility Agent for Windows' which loads as "C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized.
2 Windows Firewall Allowed Programs
- vpnui.exe is added as a firewall exception for 'C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe'.
- acwebsecagent.exe is added as a firewall exception for 'C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\acwebsecagent.exe'.
Resource utilization averages
Show technical details
| vpnagent.exe |
| Memory: | 5.03 MB | |
| Total CPU: | 0.0009718095% | |
| Kernel CPU: | 0.00026349% | |
| User CPU: | 0.00070832% | |
How do I remove Cisco AnyConnect Telemetry Module?
You can uninstall Cisco AnyConnect Telemetry Module from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Cisco AnyConnect Telemetry Module, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Cisco AnyConnect Telemetry Module.
OS VERSIONS
Win 7 (SP1) 67%
Win XP 3%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 9%
Keep it 91%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
66.67% |
|
| Windows 10 |
27.78% |
|
| Windows Vista |
2.78% |
|
| Windows XP |
2.78% |
|
Which OS releases does it run on? |
| Windows 7 Professional |
31.43% |
|
| Windows 8.1 Pro |
17.14% |
|
| Windows 7 Enterprise |
17.14% |
|
| Windows 7 Home Premium |
11.43% |
|
| Windows 8 |
5.71% |
|
| Windows 7 Ultimate |
5.71% |
|
Geography
80.85% of installs come from the United States
Which countries install it?
| United States |
80.85% |
| Mexico |
4.26% |
| Netherlands |
2.13% |
| Australia |
2.13% |
| Russia |
2.13% |
| Iran |
2.13% |
| United Kingdom |
2.13% |
| India |
2.13% |
| Saudi Arabia |
2.13% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Dell |
36.36% |
|
| Hewlett-Packard |
21.21% |
|
| Lenovo |
21.21% |
|
| GIGABYTE |
6.06% |
|
| Acer |
3.03% |
|
| Samsung |
3.03% |
|
| ASUS |
3.03% |
|
| Intel |
3.03% |
|
| MSI |
3.03% |
|
Common models |
| Dell Latitude E6420 |
5.88% |
|
| HP EliteBook 840 G1 |
5.88% |
|
| LENOVO 20BS00BHUS |
5.88% |
|
| LENOVO 42405BG |
2.94% |
|
| HP EliteBook 8560p |
2.94% |
|
| Gigabyte EX58-UD3R |
2.94% |
|
About Cisco Systems
Cisco designs, manufactures, & sells networking equipment whose portfolio of products & services is focused on market segments, Enterprise & Service Provider, Small Business & the Home.
Publisher URL: www.cisco.com