CredentialUIBroker.exe

  • File Path: C:\Windows\SysWOW64\CredentialUIBroker.exe
  • Description: Credential Manager UI Host

Hashes

Type Hash
MD5 A41AFE0F19EC1DC7C6960340BDB1E575
SHA1 B29A3C672C30530B603F6512AD5512EB81B5AC72
SHA256 88C29A13B03BB5BD2BDE59750FEE657A9B10CD8C2F19DB031900099F24DB5D33
SHA384 CEBEBFA782712BAEE00B42F6E025FF3619A6C3C90C2426A83D78B2BDA1ACC43E207397A2B29EF0579B40E5CA38A348AF
SHA512 23CFB7DA06101DABF44DBAF380277E4A227422A0ECC2C2433B6F3D9F0F493D8B67236E7661065AF66D68DC1EDC74B080222E852E5A46164593A1287C1FD60634
SSDEEP 3072:J7UdmiOKKm5R04WRWBAHw7r717QEKrq5tj:5qEwAHQrJ8BYh
IMP 7892C039093F24D042274218024F00F3
PESHA1 57A98DEDD8865C37B28E701C8041C6992EEFC7EF
PE256 614B917FB4793C5302FBB82A6D3F019F2085702E148E6FC17D2127AE81905DF3

Runtime Data

Open Handles:

Path Type
(RW-) C:\Users\user File
(RW-) C:\Windows File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\CredentialUIBroker.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: CredentialUIBroker.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.746 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.746
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/88c29a13b03bb5bd2bde59750fee657a9b10cd8c2f19db031900099f24db5d33/detection

MIT License. Copyright (c) 2020-2021 Strontic.