CTFMON.exe
CTF Loader by Microsoft
| Version: | 5.1.2600.5512 (xpsp.080413-2105) |
| MD5: | b5e8782d4af1b3756f38e11e7c157bbe |
| SHA1: | 5a294662d1e3751427aeacedf272743205832062 |
| SHA256: | e1e11638ca6670c45287101da8fe5be9dbb258e19e7397493ffcc750e02a09d1 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is CTFMON.exe?
CTF Loader, a Microsoft Windows process relating to the ctfmon.exe file, which monitors active windows and provides text support for speech and handwriting recognition, keyboard, translation, and other technologies.
Overview
ctfmon.exe executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This version is installed on Windows XP. Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).
Details
| File name: | ctfmon.exe |
| Publisher: | Microsoft Corporation |
| Product name: | CTF Loader |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\ctfmon.exe |
| File version: | 5.1.2600.5512 (xpsp.080413-2105) |
| Product version: | 5.1.2600.5512 |
| Size: | 24.5 KB (25,088 bytes) |
| Digital DNA |
| PE subsystem: | Windows GUI |
| Entropy: | 6.118468 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'ctfmon.exe' → C:\WINDOWS\system32\ctfmon.exe
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\WINDOWS\system32\ctfmon.exe'
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
97.00% |
|
| Windows 7 Home Premium |
1.00% |
|
| Windows Vista Home Premium |
1.00% |
|
| Windows 7 Home Basic |
0.50% |
|
| Windows 8 Pro with Media Center |
0.50% |
|
Distribution by country
United States installs about 29.23% of CTF Loader.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
30.33% |
|
| Intel |
12.30% |
|
| Toshiba |
10.66% |
|
| American Megatrends |
9.84% |
|
| Hewlett-Packard |
6.97% |
|
| GIGABYTE |
6.56% |
|
| Compaq |
6.56% |
|
| ASUS |
4.92% |
|
| Sahara |
3.69% |
|
| Lenovo |
3.28% |
|
| Gateway |
2.46% |
|
| Acer |
1.64% |
|
| Sony |
0.82% |
|
