Runtime Broker file reports

Runtime Broker

Runtime Broker appears as a company name in ThreatInfo file metadata. The table below lists the latest 3 files connected with this company value, their current detection status, product metadata, and last seen date.

Company metadata is useful for investigation, but it should not be trusted alone. Attackers can copy or forge version information, so compare the file hash, signature status, product name, and detection result before making a decision.

runtimemodule.exe d1132bb68b2a325d82df7beb5f40f651 Possible Threat Windows Runtime Broker Module Agent 2023-06-22 23:22:20
Runtime Broker.exe f97865659deb5ffe8c0efe89123a0ea1 Suspicious Object Runtime Broker 2021-03-03 16:14:25
OneDrive.exe c41284f378e3ed3734bcc8d7b23d7e70 Suspicious Object Runtime Broker 2021-10-12 20:23:57