cttunesvr.exe
- File Path:
C:\Windows\SysWOW64\cttunesvr.exe
- Description: ClearType Tuner
Hashes
| Type |
Hash |
| MD5 |
BD8F6EFE07338BD1D86D3E2CC64BF0A8 |
| SHA1 |
541EA7B96BD85FE1EC9095AACAF0201C8E14FE26 |
| SHA256 |
5E62C9E73D27A6B45D7DC43990F2C5CE23B7FE94A6E24FAB78C411AC71CD7D43 |
| SHA384 |
0A910D9FCFF8642AD5B4D02C19C70ABB29BDFAF0A8E77870414BC11DFFB8D3CA5CAEEE00BD34CB9FACFF876BE97A7B02 |
| SHA512 |
F5C8B593893B763EE91A105857B77726E69CAA84E8A263EBBAEFE20F3CB3370B3662992C03470EBC7B4172FDA6565F5963392FA4DEB4B2B637622F94416720ED |
| SSDEEP |
768:CxWDIQ5oDhUL9jsspsuwqJk1vjsi2+7KiShTaydg:CxbQ5oDisspsuwqJk1vjznSday+ |
| IMP |
C888235856577B905938185E0F1CDC12 |
| PESHA1 |
A4C6ABE9E59071BDC061D40EBB48EDC3A782DE2B |
| PE256 |
D19A38FA5F5D426A9B45E011DD0B9FBE45405976686C251E8EBEBB63C699F77A |
Runtime Data
Open Handles:
| Path |
Type |
| (R-D) C:\Windows\System32\en-US\cttunesvr.exe.mui |
File |
| (RW-) C:\Users\user |
File |
| (RW-) C:\Windows |
File |
| \BaseNamedObjects__ComCatalogCache__ |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
Loaded Modules:
| Path |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
| C:\Windows\SysWOW64\cttunesvr.exe |
Signature
- Status: Signature verified.
- Serial:
33000002EC6579AD1E670890130000000002EC
- Thumbprint:
F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: CTTUNESVR.EXE
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.746 (WinBuild.160101.0800)
- Product Version: 10.0.19041.746
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/74
- VirusTotal Link: https://www.virustotal.com/gui/file/5e62c9e73d27a6b45d7dc43990f2c5ce23b7fe94a6e24fab78c411ac71cd7d43/detection
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.