TokenBrokerCookies.exe

  • File Path: C:\Windows\SysWOW64\TokenBrokerCookies.exe
  • Description: Token Broker Cookie Helper

Hashes

Type Hash
MD5 59FF42C66A71B04570887A727B4986DB
SHA1 7A287E8B0DCCE249A228F724BA70D415EA375438
SHA256 55006AD12E81756CE62630173FFC24CE8865B3AAF2B8497AF1FF6AB2E13FBD67
SHA384 7C49152FC90609BB88CF3C98C42CC572B9C34D08FBBA376A15410C2E828579B869EB1ED8D86A618DA5126BBCB7E9F7F6
SHA512 0E22BF452E96CC8006678F5919A7995BB198B2062FFF5F43685BF41BF59AAC3F8A12240859721BF50918C215470630ED07C5E7C45D38DABE09FAB4CA1B605075
SSDEEP 384:xWAuN/uTUaQcbo69bloEF5hIHQrvGlX6sxEmCVkxmwms8sDdxeGWuKWq:xWAI2nJoERoEF5tOMEEPixmwm5ExR
IMP 745F538A8F041CFDC4FB7F340DBD70A9
PESHA1 14118FF122B9295177938AE1606A3A430115904A
PE256 CC1D68E1C55E37B17EF7319224D03E9427929CE1E43C8BAC102A9F5F79B8D6AA

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\TokenBrokerCookies.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TokenBrokerCookies.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/55006ad12e81756ce62630173ffc24ce8865b3aaf2b8497af1ff6ab2e13fbd67/detection/

MIT License. Copyright (c) 2020-2021 Strontic.