How to remove RuntimeBroker.exe

RuntimeBroker.exe

The module RuntimeBroker.exe has been detected as Trojan.CoinMiner

RuntimeBroker.exe
Remove RuntimeBroker.exe

File Details

Product Name:

RuntimeBroker
MD5: 2a74ac10adf4419a39a80dbb92628abe
Size: 14 KB
First Published: 2021-11-05 21:14:37 (3 years ago)
Latest Published: 2021-11-16 21:17:30 (3 years ago)
Status: Trojan.CoinMiner (on last analysis)
Analysis Date: 2021-11-16 21:17:30 (3 years ago)

Common Places:

%windir%
%windir%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00003ffe

.NET Info:

MVID: 65126b0f-94e9-47ab-a929-ad6627ac3c24
Typelib ID: 46f29736-5f69-40fa-8ad5-a156240ffea8

PE Sections:

Name Size of data MD5
.text 8704 32786cfac29c2a4590aabadd3949a736
.rsrc 4608 cfcb9c4b846628076b4343596991509f
.reloc 512 a0df2971710e9aa8f9e14725aa91e0cf

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for RuntimeBroker.exe
copyright for information about RuntimeBroker.exe