Should I block it?

No, this file is 100% safe to run.

Additional versions

f6e89	5.26%
adc55	57.89%
85e6c	5.26%
c0077	5.26%
e4b7d	21.05%
b8c93	5.26%

(Note, Amazon Services LLC publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

ConvertSidToStringSidW, CopySid, GetLengthSid, GetTokenInformation, OpenProcessToken, CryptDecrypt, CryptCreateHash, CryptSetHashParam, CryptSignHashA, CryptDestroyHash, CryptDestroyKey, CryptReleaseContext, RegisterEventSourceA, ReportEventA, DeregisterEventSource, GetUserNameA, LookupAccountNameW, FreeSid, RegOpenKeyExA, RegQueryValueExA, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, RegDeleteValueW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumValueW, RegEnumKeyExW, RegSetValueExW, RegQueryValueExW, RegFlushKey, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW

crypt32.dll

CertFreeCertificateContext

kernel32.dll

DllMain

ole32.dll

CoSetProxyBlanket, CoInitializeEx, CoInitializeSecurity, CoCreateInstance, CoInitialize, CoUninitialize

user32.dll

CharNextExA, CallNextHookEx, PostMessageW, PeekMessageW, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, SetTimer, EnumWindows, PostThreadMessageW, GetWindowThreadProcessId, MsgWaitForMultipleObjectsEx, TranslateMessage, DispatchMessageW, SetWindowsHookExW, UnhookWindowsHookEx, DestroyWindow, UnregisterClassW, RegisterClassW, CreateWindowExW, SetWindowLongW, GetWindowLongW, DefWindowProcW, GetQueueStatus, KillTimer

ws2_32.dll

WSARecvFrom, WSASend, WSASendTo, WSAConnect, WSAHtons, WSAHtonl, WSANtohs, WSANtohl, WSARecv, WSAAccept, WSASocketW, WSAIoctl

amazon music helper.exe

By Amazon Services LLC (Signed)

Remove amazon music helper.exe

MD5:	adc55133e9d66939cff779715e33b15e
SHA1:	82499ee7139e5632c703df394ce85d5af377dbbf

Overview

amazon music helper.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It is installed with a couple of know programs including Amazon Cloud Player published by Amazon Services LLC, Amazon Cloud Player from Amazon Services LLC and Amazon Cloud Player by Amazon Services LLC. The file is digitally signed by Amazon Services LLC which was issued by the VeriSign certificate authority (CA).

Details

File name:	amazon music helper.exe
Typical file path:	C:\users\user\appdata\local\amazon cloud player\amazon music helper.exe
Size:	2.97 MB (3,109,376 bytes)
Build date:	9/10/2013 5:51 PM
Certificate
Issued to:	Amazon Services LLC
Authority (CA):	VeriSign
Expiration date:	Friday, March 21, 2014
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Amazon Cloud Player

Amazon Services LLC

5% remove

The Amazon Cloud Player is integrated with the MP3 store and allows users to store and play their music from any supported web browser. Cloud Player is available on the website and within the Amazon MP3 Android and iOS application. Amazon Cloud Player comes with Amazon MP3 Uploader which is an Adobe AIR application that allows a user to upload their iTunes library or Windows Media Player library to Amazon Cloud Drive. Amazon Cloud Playe...

Behaviors

Scheduled tasks

The task 'Amazon Music Helper' runs on logon in the path '\Amazon Music Helper'

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Amazon Cloud Player' → C:\users\user\appdata\Local\Amazon Cloud Player\Amazon Music Helper.exe

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00014075%	0.028634%
Kernel CPU:	0.00007826%	0.013761%
User CPU:	0.00006249%	0.014873%
Kernel CPU time:	1,338 ms/min	100,923,805ms/min
CPU cycles:	21,826/sec	17,470,203/sec
Memory
Private memory:	4.51 MB	21.59 MB
Private (maximum):	8.06 MB
Private (minimum):	1.83 MB
Non-paged memory:	4.51 MB	21.59 MB
Virtual memory:	153.88 MB	140.96 MB
Virtual memory (peak):	200.21 MB	169.69 MB
Working set:	3.01 MB	18.61 MB
Working set (peak):	9.26 MB	37.95 MB
Page faults:	48,954/min	2,039/min
I/O
I/O read transfer:	15 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	16 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	119 Bytes/sec	448.09 KB/min
I/O other operations:	3/sec	1,671/min
Resource allocations
Threads:	8	12
Handles:	466	600
GUI GDI count:	10	103
GUI GDI peak:	12	142
GUI USER count:	15	49
GUI USER peak:	17	71

Process properties

Integrety level:	High
Platform:	64-bit
Command line:	"C:\users\user\appdata\local\amazon cloud player\amazon music helper.exe"
Owner:	User
Parent processes:	taskeng.exe (Task Scheduler Engine by Microsoft) explorer.exe (Windows Explorer by Microsoft Corporation)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	89.47%
Windows 8.1	5.26%
Windows 7 Professional	5.26%

Distribution by country

United States installs about 94.74% of amazon music helper.exe.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	46.67%
Hewlett-Packard	23.33%
Dell	13.33%
Sony	6.67%
Apple	6.67%
Samsung	3.33%

Remove Adware and Spyware Programs, FREE Download!