CTF Loader (32 bit) (ctfmon.exe) What is this? Is it a virus or malware? (Windows 8.1)

There is a process I found in my Task Manager named CTF Loader (32 bit) (ctfmon.exe) and I have just noticed it now, although in the properties of the file it says it was created last year. It's size is 10.5kb and size on disc is 12.0kb. The file is located in C:\Windows\SysWOW64. Is this supposed to be on my computer or is it a virus or some sort of malware? It says in properties that it was created on the same date and around the same time as a lot of other files in C:\Windows\SysWOW64. It's product name is Microsoft Windows Operating System. File Version: 6.3.9600.16384. Original finename: CTFMON.EXE. I have run scans with both Malwarebytes Anti-Malware and AVG AntiVirus Free Edition 2014 and both said it was safe with no threat found.

I am running Windows 8.1 on my PC.

I might add the icon for the process is a pen with a pad.

If this is a legitimate process what does it do?

Sorry if most of that information was not needed but I'm just trying to give as much information as possible. Also if anymore information is needed in order for you to help me just comment and tell me what you need!

Should I be worried about this process?

Thanks a heap for any help, it is much appreciated! 



It's an Office File and it's in my computer (W7) too.

It's a legitimate file.

Don't worry it about it.


MVP Consumer Security 2014-2016
Windows Insider MVP 2016-2018

757 people found this reply helpful


Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.


Question Info

Last updated March 2, 2021 Views 746,195 Applies to: