wincred.exe
by Microsoft
Operating System
Summary
Windows Credential helper - manages credential storage for applications.
wincred.exe is the 566th most commonly executed Windows program in EchoTrail's dataset, observed 8,766 times across enterprise environments. It typically runs from C:\Program Files (x86)\ShoreTel\Connect\endo\bin and it is most often launched by cmd.exe.
566th
most commonly executed Windows program
8,766
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\ShoreTel\Connect\endo\bin54.08%
- C:\Program Files (x86)\Mitel\Connect\endo\bin29.25%
- C:\Program Files (x86)\ShoreTel\Linkup\ShoreTel\endo\bin11.28%
- C:\Program Files (x86)\Mitel\ConnectForMSFT\Mitel\endo\bin5.38%
Top Hashes (SHA256)
- f476734a05f6a9349b5d9f80c3a1eadc585d7cec0fbf6275e67be84b156f5c8c32.65%
- 7fa605deaed701d492785563611ecfee20761a798e7ed7d84c93172fc75a5fc328.15%
- c5d7913b1295fd936a9cf5ca1c69f2c75e60bd802f2ae3963f84b5edab2281a626.9%
- 5295ee78a1311b1ae316036736fff6e6db9e354fd161b9649bbf2a8e4838b3cb3.98%
- 0ba57ae3a3cea575e46e4d09031bae8e4e13bf9ff80f9603f5e2b4dd4e3a74022.56%
- 580ed779e9da613b8377a6f2365f6181fd9a2a9fc76f9eae45e721e145e1ad681.6%
- d385452fe33340d6b1ffbc42e55ffe2c1e85917299778881ba8e4d6be52a74bf1.47%
- 3dd0075abd55c8dd06e03716f938e212de525b80c8b5e9ad2e481bef05f24be21.22%
- 7c16d77b4a56acfa4167bdb8b40799573159ad2a92702d44fed995d8ecff3bb40.94%
- f7be76296382eabf4103a6746b7483920179502b89f0e961d762588bfc96118a0.39%
Process Ancestry
Top Grandparents
- ShoreTel.exe93.2%
- Mitel.exe6.8%
Top Parents
- cmd.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about wincred.exe
Rocky answers questions about wincred.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.