CmdID

CmdID / Files

cttune.exe

ClearType Tuner file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real cttune.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionClearType Tuner

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\cttune.exe · signed by Microsoft Windows

1f39acf00f596cf8cfcf786fd8f45540fd2bbba1da22f9c59358d0c0cf3de831

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\cttune.exe · signed by Microsoft Windows

7a4d2eb49106c82c201f4b39f7f279eb900e7d2bbb30f2848d43a89260fbcd9d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\cttune.exe · signed by Microsoft Windows

07985748945405d62508f31f933a671b24caa2d38da08e12dbb7f6060c26446b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\cttune.exe · signed by Microsoft Windows

de2d871afe2c071cf305fc488875563b778e7279e57030ba1a1c9f7e360748da

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\cttune.exe · signed by Microsoft Windows

46ce5990b443624613db27aaf4ef67748daa56fb524a7d828e2bf502cc2a3ca9

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\cttune.exe · signed by Microsoft Windows

ffe66a5bab3868d040d9033bae8d757d351540c69d0e2942a72992404a81e5b0

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\cttune.exe · signed by Microsoft Windows

232783f87c7da0f6fa9bae2fdbdc94095130baaf2125aff974baefd8ee16c69b

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\cttune.exe · signed by Microsoft Windows

4527102d9b5aa52ad008c99e5740fbe4307b19c1bceb1c6fd8606bc23aef344a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\cttune.exe · signed by Microsoft Windows

04f94206060cbaa9825fa7cdcea20aa338caff02743bb3928823a0f4c60a5cd0

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\cttune.exe · signed by Microsoft Windows

a9e7564ff4e42d143a9ad94e8b2d8e416f90fdd40103b25b7e97e6de0b222e51

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\cttune.exe · not signed

9845c284c806a2d7943eefcef8af5313937fcc057e249f78b3990c86e282d423

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\cttune.exe · not signed

e3e64dadd7f56e08452ba6abe602b28a3494053b1c3bfa9c07e296986aabfb5e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.