RuntimeBroker.exe
Runtime Broker by Microsoft Corporation (Signed)
| Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| MD5: | 30454c0337f045e79c2906e9dc039cc5 |
| SHA1: | 30ef2ce943c49c254f9096a646fac32810658a7b |
| SHA256: | 385bb49db6fbe96d8cb84ee73d336966ce552ddf8248593566ef5228b197e18e |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is RuntimeBroker.exe?
Windows Runtime Broker, part of Windows 8 is a separate process that handles the security permission of separated processes like sensors or cameras. Access to Windows APIs is monitored at runtime by the Runtime Broker, which prevents programs from violating core security of Windows.
About RuntimeBroker.exe (from Microsoft Corporation)
“Windows Runtime, or WinRT, is a cross-platform application architecture on the Windows 8 operating system. WinRT supports development in C++/CX (Component Extensions, a language based on C++) and the ”
Details
| File name: | runtimebroker.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Runtime Broker |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\runtimebroker.exe |
| File version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Product version: | 6.2.9200.16384 |
| Size: | 32.72 KB (33,504 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Tuesday, July 9, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00387962% | |
| Kernel CPU: | 0.00190529% | |
| User CPU: | 0.00197433% | |
| Kernel CPU time: | 2,361,367 ms/min | |
| CPU cycles: | 244,075/sec | |
| Context switches: | 17/sec | |
| Memory |
| Private memory: | 12.98 MB | |
| Private (maximum): | 40.96 MB | |
| Private (minimum): | 10.02 MB | |
| Non-paged memory: | 12.98 MB | |
| Virtual memory: | 133.4 MB | |
| Virtual memory (peak): | 155.71 MB | |
| Working set: | 18.71 MB | |
| Working set (peak): | 48.24 MB | |
| Page faults: | 196,086/min | |
| I/O |
| I/O read transfer: | 3.09 KB/sec | |
| I/O read operations: | 2/sec | |
| I/O write transfer: | 505 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 9.56 KB/sec | |
| I/O other operations: | 149/sec | |
| Resource allocations |
| Threads: | 7 | |
| Handles: | 1015 | |
| GUI GDI count: | 21 | |
| GUI GDI peak: | 24 | |
| GUI USER count: | 8 | |
| GUI USER peak: | 25 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command line: | C:\Windows\System32\runtimebroker.exe -embedding |
| Owner: | User |
| Parent process: | svchost.exe (by Microsoft) |
Threads
Averages
| shell32.dll (by Microsoft) |
| Total CPU: | 1.01815580% | |
| Kernel CPU: | 0.16135549% | |
| User CPU: | 0.85680032% | |
| CPU cycles: | 23,986,190/sec | |
| Context switches: | 16/sec | |
| Memory: | 18.91 MB | |
| twinui.dll |
| Total CPU: | 0.57189053% | |
| Kernel CPU: | 0.38126035% | |
| User CPU: | 0.19063018% | |
| CPU cycles: | 6,805,668/sec | |
| Memory: | 9.66 MB | |
| ntdll.dll |
| Total CPU: | 0.04125893% | |
| Kernel CPU: | 0.01883343% | |
| User CPU: | 0.02242549% | |
| CPU cycles: | 688,934/sec | |
| Context switches: | 3/sec | |
| Memory: | 1.74 MB | |
| combase.dll |
| Total CPU: | 0.00080021% | |
| Kernel CPU: | 0.00038738% | |
| User CPU: | 0.00041284% | |
| CPU cycles: | 16,883/sec | |
| Memory: | 1.69 MB | |
| RuntimeBroker.exe (main module) |
| Total CPU: | 0.00027837% | |
| Kernel CPU: | 0.00020416% | |
| User CPU: | 0.00007420% | |
| CPU cycles: | 6,960/sec | |
| Memory: | 48 KB | |
| shcore.dll |
| Total CPU: | 0.00018682% | |
| Kernel CPU: | 0.00009341% | |
| User CPU: | 0.00009341% | |
| CPU cycles: | 2,730/sec | |
| Memory: | 596 KB | |
| MsSpellCheckingFacility.dll |
| Total CPU: | 0.00011355% | |
| Kernel CPU: | 0.00011355% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 336/sec | |
| Memory: | 1 MB | |
| ole32.dll |
| Total CPU: | 0.00010117% | |
| Kernel CPU: | 0.00003784% | |
| User CPU: | 0.00006333% | |
| CPU cycles: | 2,714/sec | |
| Memory: | 1.49 MB | |
| npggNT64.des |
| Total CPU: | 0.00007243% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00007243% | |
| CPU cycles: | 44,265/sec | |
| Memory: | 296 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 8 |
30.00% |
|
| Windows 8 Pro |
20.00% |
|
| Windows 8.1 |
18.50% |
|
| Windows 8.1 Pro |
9.00% |
|
| Windows 8 Pro with Media Center |
7.00% |
|
| Windows 8 Single Language |
6.00% |
|
| Windows 8.1 Pro with Media Center |
2.50% |
|
| Windows 8.1 Single Language |
2.50% |
|
| Windows 8 Enterprise |
1.00% |
|
| Windows 8 Enterprise N |
0.50% |
|
| Windows 8.1 Enterprise Evaluation |
0.50% |
|
| Windows 8.1 Enterprise |
0.50% |
|
| Windows 8 Enterprise Evaluation |
0.50% |
|
| Windows 8.1 Pro Preview |
0.50% |
|
| Windows 8.1 Pro Preview with Media Center |
0.50% |
|
| Windows 8 Pro N |
0.50% |
|
Distribution by country
United States installs about 45.69% of Runtime Broker.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
19.84% |
|
| ASUS |
15.56% |
|
| Toshiba |
15.56% |
|
| Acer |
12.06% |
|
| Dell |
10.89% |
|
| Lenovo |
10.89% |
|
| Sony |
7.78% |
|
| Intel |
3.11% |
|
| Samsung |
1.17% |
|
| Alienware |
0.78% |
|
| Medion |
0.78% |
|
| GIGABYTE |
0.78% |
|
| American Megatrends |
0.39% |
|
| Packard Bell |
0.39% |
|
