Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Runtime Broker is a legitimate Windows process that helps manage permissions and related activity for Microsoft Store-style apps. Its normal executable is C:WindowsSystem32RuntimeBroker.exe. It is generally safe to leave running; investigate it if its CPU or memory use stays high, or if the file is somewhere other than the expected Windows folder.
What Runtime Broker does
Windows shows the process as Runtime Broker in Task Manager; its executable is RuntimeBroker.exe. Microsoft describes it as a Windows process that helps manage permissions for Microsoft Store apps. Those apps may request access to resources such as your camera, microphone, location, files, or notifications.
Runtime Broker participates in the app-permission and runtime infrastructure. It is not necessarily the component that performs every action an app requests, nor does one Runtime Broker entry always correspond to exactly one app. It may start when an app needs it, stop when it is no longer needed, and reappear later. More than one entry can also be normal.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteIt is distinct from other Windows processes with similar-sounding names, including Service Host (svchost.exe), COM Surrogate (dllhost.exe), Desktop Window Manager (dwm.exe), Windows Management Instrumentation (WmiPrvSE.exe), and the Time Broker service (TimeBrokerSvc). In particular, advice about changing the Time Broker service is not automatically advice about the Runtime Broker process.
#1 Best Overall
- CRISP CLARITY: This 23.8″ Philips V line monitor delivers crisp Full HD 1920x1080 visuals. Enjoy movies, shows and videos with remarkable detail
- INCREDIBLE CONTRAST: The VA panel produces brighter whites and deeper blacks. You get true-to-life images and more gradients with 16.7 million colors
- THE PERFECT VIEW: The 178/178 degree extra wide viewing angle prevents the shifting of colors when viewed from an offset angle, so you always get consistent colors
- WORK SEAMLESSLY: This sleek monitor is virtually bezel-free on three sides, so the screen looks even bigger for the viewer. This minimalistic design also allows for seamless multi-monitor setups that enhance your workflow and boost productivity
- A BETTER READING EXPERIENCE: For busy office workers, EasyRead mode provides a more paper-like experience for when viewing lengthy documents
Microsoft’s Runtime Broker support article describes its role and discusses what to do when memory use is unusually high.
Is Runtime Broker safe, or could it be malware?
The name alone does not establish that a file is genuine: malware can use a familiar filename. Check its location and publisher before drawing a conclusion.
- Press Ctrl + Shift + Esc to open Task Manager.
- Find Runtime Broker, right-click it, and select Open file location.
- For the normal Windows process, the file should be
C:WindowsSystem32RuntimeBroker.exe. - Right-click the file, choose Properties, and check the Digital Signatures tab for a Microsoft Corporation signature.
- If the location or signature is unexpected, run a scan with Windows Security. Do not delete the file manually or download a replacement from an unfamiliar site.
A copy in a temporary folder, Downloads, a user-writable directory, or an unfamiliar application folder warrants investigation. A valid-looking name by itself is not proof that the file is safe, and a security alert should be assessed using its reported location and scan results.
Recommended Free Tools
Should Runtime Broker use CPU or memory?
A brief increase when opening, using, or closing a Windows app is not automatically a problem. There is no reliable universal percentage that separates normal from abnormal use: the reading depends on installed memory, app activity, Windows build, and how long the load lasts.
Rank #2
- CRISP CLARITY: This 22 inch class (21.5″ viewable) Philips V line monitor delivers crisp Full HD 1920x1080 visuals. Enjoy movies, shows and videos with remarkable detail
- 100HZ FAST REFRESH RATE: 100Hz brings your favorite movies and video games to life. Stream, binge, and play effortlessly
- SMOOTH ACTION WITH ADAPTIVE-SYNC: Adaptive-Sync technology ensures fluid action sequences and rapid response time. Every frame will be rendered smoothly with crystal clarity and without stutter
- INCREDIBLE CONTRAST: The VA panel produces brighter whites and deeper blacks. You get true-to-life images and more gradients with 16.7 million colors
- THE PERFECT VIEW: The 178/178 degree extra wide viewing angle prevents the shifting of colors when viewed from an offset angle, so you always get consistent colors
- Usually no action needed: a short-lived spike that settles as app activity ends.
- Investigate: high use that persists while the PC is idle, memory that keeps climbing, repeated process restarts, fan noise, sluggishness, or app crashes.
Look at duration and real-world impact rather than one Task Manager snapshot. Also distinguish Runtime Broker’s own use from high overall system memory: if total memory is high but Runtime Broker’s use is low, another process is more likely to be responsible. A temporary rise is not the same as a memory leak, which is suggested by usage that continues to grow over time without settling.
Why might its usage stay high?
Often Runtime Broker is a clue to activity elsewhere, not the underlying fault. Possible triggers include a Windows app repeatedly requesting a permission, a hung or malfunctioning Store app, background activity or notifications, a Windows feature such as tips or suggestions, a damaged app package or Store cache, outdated software, or broader Windows system-file problems. Malware impersonation is another possibility if the executable is in an unexpected location.
These are troubleshooting possibilities, not a diagnosis based on the process name alone. Microsoft’s general high-CPU guidance recommends identifying sustained usage and tracing it to the process or application involved.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How to troubleshoot high Runtime Broker usage
Work from low-risk checks toward more involved ones. The goal is to identify the app or Windows activity that triggers the load, rather than repeatedly stopping a broker process.
Rank #3
- Clear visuals. Fluid motion: A 144Hz refresh rate and 1ms MPRT deliver smooth, tear‑free motion across work, gaming, and streaming for clearer, more fluid viewing.
- Eye comfort: TÜV Rheinland 3‑star* certification reduces harmful blue light while preserving stunning color quality without compromise. *TÜV Rheinland 3-star eye comfort certification.
- Wide viewing angle: Get consistent views across a wide 178° /178° viewing angle.
- In-Plane Switching (IPS): See excellent color accuracy and consistency across wide viewing angles with In-plane Switching (IPS) technology.
- Ultra-thin bezels: Maximize your viewing experience with thin bezels.
1. See whether a specific app triggers it
Open Task Manager and sort the Processes list by CPU or Memory. Note when Runtime Broker rises: for example, after opening a particular Windows app, receiving notifications, or signing in. Where available, check Task Manager’s App history tab. Close recently used Store or Windows apps one at a time and watch whether the usage settles.
For a closer look, press Win + R, enter resmon.exe, and press Enter. Resource Monitor’s CPU and Memory tabs can help you observe whether the behavior is sustained. If it occurs repeatedly, note the time and the app or action that preceded it before making system-wide changes.
2. Restart the app or Windows
Close and reopen the app that appears to trigger the spike. If the issue continues or the trigger is unclear, restart the PC. A restart can clear a transient app or shell glitch, but if the same pattern returns, continue investigating rather than treating the restart as a permanent fix.
3. End Runtime Broker temporarily, if necessary
If it is consuming resources and the PC is sluggish, you can use Task Manager to end it: press Ctrl + Shift + Esc, open Processes, select Runtime Broker, and choose End task. Windows may start it again when an app or component needs it. That restart is expected. Ending the task is a temporary diagnostic or recovery step; it does not fix the app or permission activity that caused the load.
Rank #4
- CURVED FOR ENHANCED ENGAGEMENT: An immersive viewing experience with a curved monitor that wraps more closely around your field of vision; It creates a wider view, enhancing depth perception and minimizing peripheral distraction
- SMOOTH PERFORMANCE FOR SEAMLESS CONTENT: Stay in the action when playing games, watching videos, or working on creative projects; The 100Hz refresh rate reduces lag and motion blur so you don't miss a thing in fast-paced moments¹
- MORE GAMING POWER: Gain the edge with optimizable game settings; Color and image contrast can be adjusted to see scenes more vividly and spot enemies hiding in the dark; Game Mode adjusts any game to fill the screen so you can view every detail²
- KEEP IT EASY ON THE EYES: Care for your eyes and stay comfortable, even during long sessions; Advanced eye comfort technology certified by TÜV reduces eye strain by minimizing blue light and reducing irritating screen flicker²
- INCREASED VERSATILITY: Connect to more; Plug devices straight into your monitor for increased flexibility, making your computing environment even more convenient
4. Update Windows and the app
Install available Windows updates and update the suspected app through Microsoft Store when applicable. Menu names and update availability can vary by Windows version and build. If the problem began after an update, note that timing as part of your diagnosis.
5. Repair, reset, or reinstall the suspected app
If one app reliably triggers the usage, use its available repair option first; if that does not help, consider resetting it or uninstalling and reinstalling it. Resetting can remove app data or settings, so check what will be lost before proceeding. Reinstall only from a source you trust, such as Microsoft Store for a Store app.
6. Review permissions and background activity
In Windows 11, look under Settings → Privacy & security for relevant categories such as Location, Camera, Microphone, Notifications, Account info, Contacts, Calendar, Filesystem, or App diagnostics. On Windows 10, the corresponding area is generally Settings → Privacy. The exact categories and labels vary by Windows version, edition, and updates; use Settings search if you cannot find a category.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchReview which apps have access and restrict permissions or background activity you do not need. You can also turn off unnecessary notifications. This may remove one trigger, but revoking a permission will not always reduce Runtime Broker usage if another app or Windows component is responsible.
Best Value
- 【INTEGRATED SPEAKERS】Whether you're at work or in the midst of an intense gaming session, our built-in speakers provide rich and seamless audio, all while keeping your desk clutter-free.
- 【EASY ON THE EYES】 Protect your eyes and enhance your comfort with Blue-Light Shift technology. This feature reduces harmful blue light emissions from your screen, helping to alleviate eye strain during long hours of use and promoting healthier viewing habits.
- 【WIDEN YOUR PERSPECTIVE】Our sleek minimal bezel design ensures undivided attention. The nearly bezel-free display seamlessly connects in a dual monitor arrangement, delivering an unobstructed view that lets you focus on more at once, completely distraction-free.
7. Run a Windows Security scan
If the executable is outside C:WindowsSystem32, its signature is unexpected, or its behavior seems suspicious, scan with Windows Security. Do not rely on third-party “cleaners,” process killers, registry fixes, or a familiar filename as proof of legitimacy.
8. Check Windows files if other problems are present
If you are also seeing broader Windows instability, such as repeated crashes or damaged system components, System File Checker may be appropriate. Open Command Prompt or Windows Terminal as an administrator and run:
sfc /scannowThis checks protected Windows system files; it is not a guaranteed Runtime Broker-specific fix. If you are not comfortable interpreting the result or making further repairs, seek Microsoft support or qualified help.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →9. Gather evidence for persistent problems
If the problem continues, record when it occurs, how long it lasts, the apps open at the time, and Task Manager’s CPU and memory readings. Resource Monitor, Event Viewer, or Performance Monitor can help technically capable users investigate recurring behavior. Microsoft’s guidance covers Windows performance troubleshooting and Performance Monitor tools. Escalate if high use persists after addressing the likely app, Windows Security detects a threat, or the PC has crashes, shutdowns, or failures across multiple apps or user accounts.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Can you disable Runtime Broker?
Generally, no: permanently disabling Runtime Broker is not a recommended fix. It can interfere with app permissions or background behavior, may stop working after Windows updates, and does not repair a misbehaving app. Repeatedly ending the process is not equivalent to disabling the underlying cause.
Be especially cautious with registry instructions that change the TimeBroker service’s startup value. Time Broker is a distinct service, and community answers suggesting registry changes are not a general Microsoft recommendation. Editing the registry incorrectly can cause problems; do not apply such a change as a first-line Runtime Broker fix.
Quick Recap
Quick check
- Path: the expected executable is
C:WindowsSystem32RuntimeBroker.exe; verify its Microsoft signature if in doubt. - Short spike: often normal when apps are active.
- Persistent load or symptoms: find the triggering app or activity and troubleshoot it.
- Multiple entries or an automatic restart: can be normal and do not, by themselves, indicate malware.
- Do not delete or permanently disable it: address the app, permission, or Windows issue instead.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
