TokenBrokerCookies.exe

File Path: C:\Windows\SysWOW64\TokenBrokerCookies.exe
Description: Token Broker Cookie Helper

Hashes

Type	Hash
MD5	`D07720770FFC91988FB335BE59183652`
SHA1	`BC25270D6617DFA1CB78086EEDD49497BFA3CA2E`
SHA256	`1F9D63A75DB722254C7F9C29AEB66DE6B3F71F9783439C7F34E7551570FD649F`
SHA384	`593A1C1B2EAD0828173A57A1378C223BF7B9FA2E86596B5E170DCCE6038A96701D83CF8182FB264E64F3B35068D017BB`
SHA512	`79D8FE4A9DA3E011E0D29EF0B2B348EFCFDB0FCD5033A59C8312905EA02A8A1F0D976C47FDF91694A5629CC70753B61BE89B877C90087AE039A4264147CAF426`
SSDEEP	`768:wRPQHwuEHJ7XlQY5Ws/7nOa5YmWLed4B7/7SZxeZ:wRPQqprl3FbVxSed4IxeZ`
IMP	`8AAEFF7072FBD0A5749AED594A7BB56E`
PESHA1	`25D6FDEB4FAD177458432A0366F78CD900AD2232`
PE256	`53507D45D156C078A6B5F41D50DF886691B8304872D05FE400F35478D17592F4`

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\TokenBrokerCookies.exe

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: TokenBrokerCookies.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1266 (WinBuild.160101.0800)
Product Version: 10.0.19041.1266
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/74
VirusTotal Link: https://www.virustotal.com/gui/file/1f9d63a75db722254c7f9c29aeb66de6b3f71f9783439c7f34e7551570fd649f/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\SysWOW64\TokenBrokerCookies.exe	88
C:\Windows\SysWOW64\TokenBrokerCookies.exe	86

MIT License. Copyright (c) 2020-2021 Strontic.