RuntimeBroker file reports

RuntimeBroker

RuntimeBroker appears as a company name in ThreatInfo file metadata. The table below lists the latest 3 files connected with this company value, their current detection status, product metadata, and last seen date.

Company metadata is useful for investigation, but it should not be trusted alone. Attackers can copy or forge version information, so compare the file hash, signature status, product name, and detection result before making a decision.

RuntimeBroker.exe 0fc62547073894774f9934a7fb45285f Trojan.Kryptik RuntimeBroker 2022-05-07 23:35:09
RuntimeBroker.exe 862f539bcd21b621f869b762009bb305 Trojan.Kryptik RuntimeBroker 2022-05-17 23:52:27
RuntimeBroker.exe eeaa5bf2843fa4e5ce31d27c5bee4278 General Threat RuntimeBroker 2022-05-31 23:07:27