Since Runtime Broker is an important Windows process, it might be one of the main targets for malicious agents. They can attack the real process and replace it with a malicious file.

To ensure that the legitimate Runtime Broker process is running on your computer, right-click the process in the Task Manager and choose Open file location. It should open the C:Windows/System32 ...