What is the "CredentialUIBroker.exe" process on windows 8? Is the "CredentialUIBroker.exe" process a virus? Can I terminate the "CredentialUIBroker.exe" process?

"CredentialUIBroker.exe" process represents "Credential Manager UI Host" program.

"CredentialUIBroker.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   CredentialUIBroker

On the Processes tab of "Task Manager", "CredentialUIBroker.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
CredentialUIBroker.e     31,504 K   Credential Manager UI Host

Additional information about "CredentialUIBroker.exe" process:

Command line:
   C:\Windows\System32\CredentialUIBroker.exe -Embedding

Programe file information:
   Name: CredentialUIBroker.exe
   Location: C:\Windows\System32\CredentialUIBroker.exe
   Description: Credential Manager UI Host
   Version: 6.2.9200.16384 (win8_rtm.120725-1247)
   Size: 36648 bytes
   Last modified: 7/26/2012 12:49:13 AM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32
C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef
C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef
C:\Windows\System32\en-US\Windows.UI.Immersive.dll.mui
C:\Windows\System32
C:\Windows\System32\en-US\cngcredui.dll.mui
C:\Windows\Fonts\StaticCache.dat
C:\Windows\Fonts\seguisym.ttf
C:\Windows\Fonts\segoeuisl.ttf
C:\Windows\Fonts\seguisb.ttf

Some registry keys used:
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SOFTWARE\MICROSOFT\WindowsRuntime\CLSID
HKCR\ActivatableClasses\CLSID
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids
HKLM\SOFTWARE\MICROSOFT\WindowsRuntime\ActivatableClassId

Some DLL libraries used:
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\KERNEL32.DLL
C:\Windows\system32\KERNELBASE.dll
C:\Windows\system32\ADVAPI32.dll
C:\Windows\system32\USER32.dll
C:\Windows\system32\msvcrt.dll
C:\Windows\SYSTEM32\combase.dll
C:\Windows\system32\SHLWAPI.dll
C:\Windows\system32\OLEAUT32.dll
C:\Windows\SYSTEM32\sechost.dll

"CredentialUIBroker.exe" process is not a virus. You should not terminate "CredentialUIBroker.exe" process. It is used by the "Mail" app.

 

⇒ "Map.exe" Process on Windows 8

⇐ "FlashUtil_ActiveX.exe" Process on Windows 8

⇑ Application Program Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials