CmdID

CmdID / Files

cttunesvr.exe

ClearType Tuner file version info

Program on Windows 14 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real cttunesvr.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionClearType Tuner

14 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\cttunesvr.exe · signed by Microsoft Windows

b20557a373f0d513a8d41bc91877771e517d5e6ce676701d5679908f2983f093

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\cttunesvr.exe · signed by Microsoft Windows

bb2a499db493055b18492425d187add450fbc90020997ab723e576f5c4851c36

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\SysWOW64\cttunesvr.exe · signed by Microsoft Windows

5e62c9e73d27a6b45d7dc43990f2c5ce23b7fe94a6e24fab78c411ac71cd7d43

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\cttunesvr.exe · signed by Microsoft Windows

73ffe2d9f2e0083d61d62479c1292060ff16c584b6a2ee009b99177a163132ce

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\cttunesvr.exe · signed by Microsoft Windows

b01dde530950352d6a1ba81b924f8beea90043acf013041d9b2b5e09b6c1df5b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\cttunesvr.exe · signed by Microsoft Windows

bd23f7baa3ea5d4303fd11bbf58132c9732dfcfd4ec61adc0033ab7556b8b8b9

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\cttunesvr.exe · signed by Microsoft Windows

0652643e430aa00c4cf687e561670b244eb9c4e9c1091837e489853fadfd88a5

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\cttunesvr.exe · signed by Microsoft Windows

a8270866b19fd8c600bf7c82c4cb9af679c1bfa76a23599c1942cb89ab521fa9

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\cttunesvr.exe · signed by Microsoft Windows

06b9311698ee2ef39ba44a48b6da23f678b6f32dffadfc1fdc9b48e18d3d2838

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\cttunesvr.exe · signed by Microsoft Windows

79210132e336dd6b885e3a74fb6b916a5bbdaa75fbe10108e8a6287c2f92459f

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\cttunesvr.exe · signed by Microsoft Windows

69e89baf21d49ceb1aeb9fbf90ca831618f4d1bfdad36ab8960ad56a666d8b6d

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\cttunesvr.exe · signed by Microsoft Windows

99b1a2437959a31d588bf8119a3517f214f15fdcb7ea71b9685fad5456d46e74

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\cttunesvr.exe · not signed

227699fece9be1f2ce70455de491f57e4c7280f0a16017a55c86c2dad4543ac1

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\cttunesvr.exe · not signed

eba3e9be06764779efeca08ba2aaabbbb509f46c7b37534bb67aac9bd9e36a1f

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.