CmdID

CmdID / Files

atmgr.exe

Cisco Webex Service file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real atmgr.exe?

file version info and known copies
Original nameATMGR.DLL in the file’s header: a renamed copy still carries it
Installed inC:\ProgramData\WebEx\WebEx\T33_TC\
C:\ProgramData\WebEx\WebEx\T33_UMC\
Signed byCisco WebEx LLC
ProductAtMgr Module, Cisco Webex LLC
DescriptionCisco Webex Service

2 known copies

3303.0000.1807.1900 · C:\ProgramData\WebEx\WebEx\T33_UMC\atmgr.exe · signed by Cisco WebEx LLC

8acf023a48e2a9a0948acb9f62efb9bd0f7eca47fffea59db32e2d02d88daf33

3303.0,1806.700 · C:\ProgramData\WebEx\WebEx\T33_TC\atmgr.exe · signed by Cisco WebEx LLC

4f99c44163048107596dc1f64d1a706e04bd9d26e2418c9a263d15f8aeecccad

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.