AuthManSvr.exe
Summary
Authentication Manager Server - manages authentication tokens/sessions.
AuthManSvr.exe is the 1274th most commonly executed Windows program in EchoTrail's dataset, observed 1,109 times across enterprise environments. It typically runs from C:\Program Files (x86)\Citrix\ICA Client\AuthManager and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Citrix\ICA Client\AuthManager80.43%
- C:\Program Files (x86)\Citrix\AuthManager15.96%
- C:\Users\...3.61%
Top Hashes (SHA256)
- 1a918ad5c65d93a1c1878fdd8c83e28f911687284df7ddf01ee5283c0a32c3e224.89%
- 55f8d170ecade934face471e388ede2df0c0d1484fd1ab585b9d6cf2a9f2661620.29%
- 565efa900d48ced42dfce7aba72aea825d730c86074d207ba8d5befc8fa83b9414.25%
- 2f23258723f26668c4702eb980dd0af5163e398190e71399fa0a1d2864aa968912.44%
- b5987649265ceb59f1c466deee1a73e97325ea9d06b9d544c10191b76e40cb5f11.63%
- ad07bd912b3c5a4a18fcbca2f6758006456a11646ba117293073631cefef99db3.97%
- afbc0505fc9b4aea9763821c7d945eb66f3e09829abf9bd890fbd609c4adb9363.61%
- 15c5dfc06e40699f74a52b6f525de3fb399ac750b09b1329564aeace7b17b5da3.34%
- 6fc01656738069372f30677cc24de5080fdd412ef0d545fb775ab65e23cdbf952.98%
- 43e035ff735139784473ec8050b66615bcabc8de8fd84d2b4462d73dae2391cf1.62%
Process Ancestry
Top Grandparents
- services.exe69.69%
- ssoncom.exe30.31%
Top Parents
- svchost.exe84.67%
- ssonsvr.exe15.33%
Top Children
- Receiver.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about AuthManSvr.exe
Rocky answers questions about AuthManSvr.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.