CTF Loader (32 bit) (ctfmon.exe) What is this? Is it a virus or malware? (Windows 8.1)

There is a process I found in my Task Manager named CTF Loader (32 bit) (ctfmon.exe) and I have just noticed it now, although in the properties of the file it says it was created last year. It's size is 10.5kb and size on disc is 12.0kb. The file is located in C:\Windows\SysWOW64. Is this supposed to be on my computer or is it a virus or some sort of malware? It says in properties that it was created on the same date and around the same time as a lot of other files in C:\Windows\SysWOW64. It's product name is Microsoft Windows Operating System. File Version: 6.3.9600.16384. Original finename: CTFMON.EXE. I have run scans with both Malwarebytes Anti-Malware and AVG AntiVirus Free Edition 2014 and both said it was safe with no threat found.

I am running Windows 8.1 on my PC.

I might add the icon for the process is a pen with a pad.

If this is a legitimate process what does it do?

Sorry if most of that information was not needed but I'm just trying to give as much information as possible. Also if anymore information is needed in order for you to help me just comment and tell me what you need!

Should I be worried about this process?

Thanks a heap for any help, it is much appreciated! 



It's an Office File and it's in my computer (W7) too.

It's a legitimate file.

Don't worry it about it.


MVP Consumer Security 2014-2016
Windows Insider MVP 2016-2018

726 people were helped by this reply


Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.


Question Info

Last updated October 22, 2020 Views 704,874 Applies to: