Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
PE file structure |
Show functions |
Import table
advapi32.dll
RegCloseKey, RegCreateKeyW, RegOpenKeyExW, RegQueryValueExW
kernel32.dll
GetLastError, GetModuleFileNameW, GetEnvironmentVariableW, SetDllDirectoryW, GetFileAttributesW, WideCharToMultiByte, Process32Next, Process32First, FreeEnvironmentStringsW, CloseHandle, GetEnvironmentStringsW, GetCommandLineW, GetCurrentThreadId, GetCurrentProcessId, LoadLibraryW, DebugBreak, GetProcAddress, SetUnhandledExceptionFilter, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, lstrlenW, OutputDebugStringA, LoadLibraryA, FreeLibrary, LocalAlloc, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, RaiseException
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shlwapi.dll
PathRemoveFileSpecW, PathFindExtensionW, PathFindFileNameW
ATH.exe
By Apple Inc. (Signed)
Version: | 17.351.0.5 |
MD5: | 08fc5ed8a003a8302e9f9d3e225f9a8a |
SHA1: | 6f66d56ba5a3cac9f8f34c5e5f7414bbe77fc7ab |
SHA256: | 9e98787e30996a5ebc66e7a8caee93bcbd911d38a7750899e30d74604a68651a |
What is ATH.exe?
Part of the Apple iTunes (AirTrafficHost) to iPhone/iPad wired/wireless synching application. ATH.exe is loaded when itunes.exe (iTunes by Apple) is launched and will remain running during the lifetime of iTunes. AirTrafficHost.framework allows Apple iOS mobile devices to comunicate over the wireless network.
Overview
ath.exe executes as a process with the local user's privileges typically within the context of its parent
itunes.exe (iTunes by Apple Inc.). It is installed with a couple of know programs including Apple Mobile Device Support published by Apple Inc., Systemsteuerung "MobileMe" from Apple Inc. and Systemsteuerung "MobileMe" by Apple Inc.. The file is digitally signed by Apple Inc. which was issued by the VeriSign certificate authority (CA).
Details
File name: | ath.exe |
Publisher: | Apple Inc. |
Description: | ATH.exe |
Typical file path: | C:\Program Files\common files\apple\mobile device support\ath.exe |
File version: | 17.351.0.5 |
Size: | 54.32 KB (55,624 bytes) |
Build date: | 5/18/2012 1:06 PM |
Certificate |
Issued to: | Apple Inc. |
Authority (CA): | VeriSign |
Expiration date: | Tuesday, June 25, 2013 |
Digital DNA |
PE subsystem: | Windows Console |
File packed: | No |
Code language: | Microsoft Visual C++ 8.0 |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Apple Mobile Device Support is required and used for the synchronisation between an Apple mobile iOS devices (iPod, iPhone or iPad) and a PC through iTunes. If uninstalled, your iPhone, iPad, or iPod touch may not appear under Devices in iTunes after you connect it to your Windows PC. Apple Mobile Device Service runs as a Windows service (Apple Mobile Device Service (AMDS)) regardless if the user is running a connected Apple application...
MobileMe (replaced by iCloud) was a subscription-based collection of online services. MobileMe allowed users to track the location of their iOS devices via the web portal at me.com. MobileMe had two different plans. The Individual plan included 20 GB of email and file storage and 200 GB of monthly data transfer. MobileMe maintained a synchronized address book and calendar feature using Push functions. When a user made a change to a con...
Users who wished to sync their MobileMe data with a PC had to download and install Apple's MobileMe Control Panel. To install, the user first had to download and install the latest version of iTunes, and then install MobileMe Control Panel. After installation, the user signed into the control panel using their username and password, and could control sync settings for contacts, calendars, bookmarks, and iDisk settings such as public fol...
MobileMe (replaced by iCloud) was a subscription-based collection of online services. MobileMe allowed users to track the location of their iOS devices via the web portal at me.com. MobileMe had two different plans. The Individual plan included 20 GB of email and file storage and 200 GB of monthly data transfer. MobileMe maintained a synchronized address book and calendar feature using Push functions. When a user made a change to a con...
“QuickTime Player 7 supports older media formats, such as QTVR, interactive QuickTime movies, and MIDI files on Snow Leopard and OS X Lion. It also accepts QuickTime 7 Pro registration codes, which turn on QuickTime Pro functions. QuickTime Player 7 will be installed in the Utilities folder in the Applications folder.”
Network connections
[UDP] listens on port 1872
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00877378% | |
Kernel CPU: | 0.00107913% | |
User CPU: | 0.00769465% | |
Kernel CPU time: | 63 ms/min | |
Memory |
Private memory: | 13.95 MB | |
Private (maximum): | 17.79 MB | |
Private (minimum): | 17.76 MB | |
Non-paged memory: | 13.95 MB | |
Virtual memory: | 73.91 MB | |
Virtual memory (peak): | 82.08 MB | |
Working set: | 17.76 MB | |
Working set (peak): | 17.84 MB | |
Resource allocations |
Threads: | 6 | |
Handles: | 258 | |
GUI GDI count: | 5 | |
GUI USER count: | 2 | |
Process properties
Integrety level: | Undefined |
Platform: | 32-bit |
Command line: | "C:\Program Files\common files\apple\mobile device support\ath.exe" --pipe \\.\pipe\30328859-97749559411108r \\.\pipe\30328859-97749559411108w --target b7e37b6cc53993cfcdc83444136de9fdc30d6ab2 --library d5be45c0f994d425 |
Owner: | User |
Parent process: | itunes.exe (iTunes by Apple Inc.) |
Threads
Averages
ATH.exe (main module) |
Total CPU: | 0.00766709% | |
Kernel CPU: | 0.00109530% | |
User CPU: | 0.00657179% | |
Memory: | 48 KB | |
MSVCR80.dll |
Total CPU: | 0.00036521% | |
Kernel CPU: | 0.00000000% | |
User CPU: | 0.00036521% | |
Memory: | 620 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 8 |
21.43% |
|
Windows 7 Ultimate |
21.43% |
|
Windows 7 Home Premium |
14.29% |
|
Windows 7 Professional |
14.29% |
|
Windows 8.1 Single Language |
7.14% |
|
Microsoft Windows XP |
7.14% |
|
Windows Vista Home Premium |
7.14% |
|
Windows 8 Pro |
7.14% |
|
Distribution by country
United States installs about 46.15% of ath.exe.
Distribution by PC manufacturer
PC Manufacturer | distribution |
ASUS |
40.00% |
|
Acer |
20.00% |
|
GIGABYTE |
20.00% |
|
Dell |
20.00% |
|