Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
PE file structure |
Show functions |
Import table
advapi32.dll
RegCloseKey, RegCreateKeyW, RegOpenKeyExW, RegQueryValueExW
kernel32.dll
GetLastError, GetModuleFileNameW, GetEnvironmentVariableW, SetDllDirectoryW, GetFileAttributesW, WideCharToMultiByte, Process32Next, Process32First, FreeEnvironmentStringsW, CloseHandle, GetEnvironmentStringsW, GetCommandLineW, GetCurrentThreadId, GetCurrentProcessId, LoadLibraryW, DebugBreak, GetProcAddress, SetUnhandledExceptionFilter, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, lstrlenW, OutputDebugStringA, LoadLibraryA, FreeLibrary, LocalAlloc, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, RaiseException
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shlwapi.dll
PathRemoveFileSpecW, PathFindExtensionW, PathFindFileNameW
AppleMobileDeviceService.exe
By Apple Inc. (Signed)
Version: | 17.323.0.9 |
MD5: | 30e3850f303eae5c364782ea78579cc9 |
SHA1: | 113baf5b8ee3e790f1608d7a67e41afb9a3b7be8 |
SHA256: | 8c94e5a9052f6e794685194eeacb31a174a947d60246908b6a0defa081a747a3 |
What is AppleMobileDeviceService.exe?
This is the service portion of the Apple MobileDeviceHelper iTunes sync. AppleMobileDeviceHelper.exe is installed along with the latest version of Apple iTunes and is used to sync your iOS devices such as the iPhone, iPod or iPad with iTunes when you connect your device to your computer.
Overview
AppleMobileDeviceService.exe runs as a service under the name Apple Mobile Device with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Apple Mobile Device Support published by Apple Inc., Apple Mobile Device Support from Apple Inc. and Apple Mobile Device Support by Apple Inc.. The file is digitally signed by Apple Inc. which was issued by the VeriSign certificate authority (CA).
Details
File name: | AppleMobileDeviceService.exe |
Publisher: | Apple Inc. |
Description: | MobileDeviceService |
Typical file path: | C:\Program Files\common files\apple\mobile device support\applemobiledeviceservice.exe |
File version: | 17.323.0.9 |
Product version: | 3.3.0.0 |
Size: | 54.32 KB (55,624 bytes) |
Build date: | 5/18/2012 11:06 AM |
Certificate |
Issued to: | Apple Inc. |
Authority (CA): | VeriSign |
Digital DNA |
PE subsystem: | Windows Console |
File packed: | No |
Code language: | Microsoft Visual C++ 8.0 |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Apple Mobile Device Support is required and used for the synchronisation between an Apple mobile iOS devices (iPod, iPhone or iPad) and a PC through iTunes. If uninstalled, your iPhone, iPad, or iPod touch may not appear under Devices in iTunes after you connect it to your Windows PC. Apple Mobile Device Service runs as a Windows service (Apple Mobile Device Service (AMDS)) regardless if the user is running a connected Apple application...
MobileMe (replaced by iCloud) was a subscription-based collection of online services. MobileMe allowed users to track the location of their iOS devices via the web portal at me.com. MobileMe had two different plans. The Individual plan included 20 GB of email and file storage and 200 GB of monthly data transfer. MobileMe maintained a synchronized address book and calendar feature using Push functions. When a user made a change to a con...
Users who wished to sync their MobileMe data with a PC had to download and install Apple's MobileMe Control Panel. To install, the user first had to download and install the latest version of iTunes, and then install MobileMe Control Panel. After installation, the user signed into the control panel using their username and password, and could control sync settings for contacts, calendars, bookmarks, and iDisk settings such as public fol...
MobileMe (replaced by iCloud) was a subscription-based collection of online services. MobileMe allowed users to track the location of their iOS devices via the web portal at me.com. MobileMe had two different plans. The Individual plan included 20 GB of email and file storage and 200 GB of monthly data transfer. MobileMe maintained a synchronized address book and calendar feature using Push functions. When a user made a change to a con...
“QuickTime Player 7 supports older media formats, such as QTVR, interactive QuickTime movies, and MIDI files on Snow Leopard and OS X Lion. It also accepts QuickTime 7 Pro registration codes, which turn on QuickTime Pro functions. QuickTime Player 7 will be installed in the Utilities folder in the Applications folder.”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Network connections
[UDP] listens on port 54638
[UDP] listens on port 58654
[UDP] listens on port 64319
[UDP] listens on port 49153
[UDP] listens on port 64141
[UDP] listens on port 59870
[UDP] listens on port 54854
[UDP] listens on port 61862
[UDP] listens on port 65434
[UDP] listens on port 51142
[UDP] listens on port 1029
[UDP] listens on port 64497
[UDP] listens on port 54546
[UDP] listens on port 53097
[UDP] listens on port 60249
[UDP] listens on port 61557
[UDP] listens on port 54381
[UDP] listens on port 55921
[UDP] listens on port 52744
[UDP] listens on port 63232
[UDP] listens on port 52001
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00181628% | |
Kernel CPU: | 0.00095303% | |
User CPU: | 0.00086324% | |
Kernel CPU time: | 28,784,473 ms/min | |
CPU cycles: | 933,028/sec | |
Context switches: | 34/sec | |
Memory |
Private memory: | 4.19 MB | |
Private (maximum): | 11.45 MB | |
Private (minimum): | 7.25 MB | |
Non-paged memory: | 4.19 MB | |
Virtual memory: | 91.26 MB | |
Virtual memory (peak): | 95.01 MB | |
Working set: | 7.85 MB | |
Working set (peak): | 12.09 MB | |
Page faults: | 11,991/min | |
I/O |
I/O read transfer: | 633 Bytes/sec | |
I/O read operations: | 1/sec | |
I/O write transfer: | 7 Bytes/sec | |
I/O write operations: | 1/sec | |
I/O other transfer: | 6.92 KB/sec | |
I/O other operations: | 5/sec | |
Resource allocations |
Threads: | 11 | |
Handles: | 226 | |
GUI GDI count: | 4 | |
GUI USER count: | 2 | |
Process properties
Integrety level: | System |
Platform: | 64-bit |
Command line: | "C:\Program Files\common files\apple\mobile device support\applemobiledeviceservice.exe" |
Owner: | SYSTEM |
Windows Service |
Service name: | Apple Mobile Device |
Description: | “Provides the interface to Apple mobile devices.” |
Type: | Win32OwnProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
AppleMobileDeviceService.exe (main module) |
Total CPU: | 0.00698261% | |
Kernel CPU: | 0.00551643% | |
User CPU: | 0.00146618% | |
CPU cycles: | 241,236/sec | |
Context switches: | 1/sec | |
Memory: | 48 KB | |
applemobiledeviceservice_main.dll (Apple Mobile Device Service by Apple) |
Total CPU: | 0.00512572% | |
Kernel CPU: | 0.00221724% | |
User CPU: | 0.00290847% | |
CPU cycles: | 76,933/sec | |
Context switches: | 1/sec | |
Memory: | 248 KB | |
MSVCR80.dll |
Total CPU: | 0.00259282% | |
Kernel CPU: | 0.00129385% | |
User CPU: | 0.00129897% | |
CPU cycles: | 137,487/sec | |
Context switches: | 1/sec | |
Memory: | 620 KB | |
wow64.dll |
Total CPU: | 0.00148647% | |
Kernel CPU: | 0.00042472% | |
User CPU: | 0.00106174% | |
CPU cycles: | 154,944/sec | |
Context switches: | 1/sec | |
Memory: | 252 KB | |
ntdll.dll |
Total CPU: | 0.00000584% | |
Kernel CPU: | 0.00000584% | |
User CPU: | 0.00000000% | |
CPU cycles: | 203/sec | |
Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
39.50% |
|
Windows 8.1 |
17.50% |
|
Windows 7 Ultimate |
11.00% |
|
Windows 8.1 Pro |
7.50% |
|
Windows 8 |
4.00% |
|
Windows 7 Professional |
4.00% |
|
Windows 8.1 Single Language |
3.00% |
|
Windows Vista Home Premium |
3.00% |
|
Microsoft Windows XP |
3.00% |
|
Windows 8 Single Language |
2.00% |
|
Windows 8.1 N |
1.00% |
|
Windows Seven Black Edition |
1.00% |
|
Windows 8 Pro |
1.00% |
|
Windows 8 Enterprise |
1.00% |
|
Windows 8.1 Pro with Media Center |
1.00% |
|
Windows 7 Home Basic |
0.50% |
|
Distribution by country
United States installs about 53.00% of AppleMobileDeviceService.exe.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Hewlett-Packard |
20.08% |
|
Dell |
19.67% |
|
Toshiba |
17.21% |
|
ASUS |
13.93% |
|
Lenovo |
9.84% |
|
Acer |
8.20% |
|
Sony |
3.28% |
|
GIGABYTE |
2.46% |
|
Alienware |
2.05% |
|
Samsung |
1.64% |
|
Sahara |
0.82% |
|
American Megatrends |
0.82% |
|