Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	19.59%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.29%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.58%
6.2.9200.16384 (win8_rtm.120725-1247)	9.94%
6.2.9200.16384 (win8_rtm.120725-1247)	68.42%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.58%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.58%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 7 versions of runtimebroker.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). runtimebroker.exe is run as a standard windows process with the logged in user's account privileges. The average file size is about 31.19 KB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. During the process's lifecycle, the typical CPU resource utilization is about 0.0050% including both foreground and background operations, the average private memory consumption is about 11.63 MB with the maximum memory reaching around 23.95 MB. Addionally, typically read and write I/O disk operations is about 3.92 KB per minute for reads and 679 Bytes per minute for writes.

Windows Runtime Broker, part of Windows 8 is a separate process that handles the security permission of separated processes like sensors or cameras. Access to Windows APIs is monitored at runtime by the Runtime Broker, which prevents programs from violating core security of Windows.