How to remove RuntimeBroker.exe

RuntimeBroker.exe

The module RuntimeBroker.exe has been detected as Ransom.Banker

RuntimeBroker.exe
Remove RuntimeBroker.exe

File Details

Product Name:

MicrosoftВ® WindowsВ® Operating System
Company Name:

Microsoft
MD5: 949ba7b89f4ae521a9e9b8eb37b3e634
Size: 313 KB
First Published: 2022-01-04 21:07:36 (4 years ago)
Latest Published: 2022-01-04 21:10:21 (4 years ago)
Status: Ransom.Banker (on last analysis)
Analysis Date: 2022-01-04 21:10:21 (4 years ago)

Common Places:

%temp%
%localappdata%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0003d470

PE Sections:

Name Size of data MD5
.text 255488 0f1b4ebf68d6e44b4b9c65f9f5854a31
.rdata 49664 be5fbcf9ebbd97f851147026d7bf2426
.data 512 f3d44fa7ae6dcf73b256d836dbfb3614
.pdata 11264 db1175ec26c468dc3cfa931bc933b695
.rsrc 1024 2eef54e9c8ad318ff6c8e9dbb23842c7
.reloc 2048 352d6bc7f1df0dd1e96d3877441da69f

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for RuntimeBroker.exe
copyright for information about RuntimeBroker.exe