How to remove RuntimeBroker.exe

RuntimeBroker.exe

The module RuntimeBroker.exe has been detected as Trojan.Agent

RuntimeBroker.exe
Remove RuntimeBroker.exe

File Details

Product Name:

System
Company Name:

System
MD5: ba0caa8d9e774179efb2fe7166483f49
Size: 4 MB
First Published: 2017-08-05 19:01:50 (6 years ago)
Latest Published: 2017-08-05 19:01:50 (6 years ago)
Status: Trojan.Agent (on last analysis)
Analysis Date: 2017-08-05 19:01:50 (6 years ago)

Common Places:

%appdata%\runtimebroker saved files

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x006f3ce0

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 5058560 7ad1cf602c4bfbb963022ffbf2653e71
.rsrc 47616 c01cfef359258fe3ded79503c79d6b59

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for RuntimeBroker.exe
copyright for information about RuntimeBroker.exe