Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
 PE file structure
|
Show functions |
Import table
advapi32.dll
RegCloseKey, RegCreateKeyW, RegOpenKeyExW, RegQueryValueExW
kernel32.dll
GetLastError, GetModuleFileNameW, GetEnvironmentVariableW, SetDllDirectoryW, GetFileAttributesW, WideCharToMultiByte, Process32Next, Process32First, FreeEnvironmentStringsW, CloseHandle, GetEnvironmentStringsW, GetCommandLineW, GetCurrentThreadId, GetCurrentProcessId, LoadLibraryW, DebugBreak, GetProcAddress, SetUnhandledExceptionFilter, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, lstrlenW, OutputDebugStringA, LoadLibraryA, FreeLibrary, LocalAlloc, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, RaiseException
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shlwapi.dll
PathRemoveFileSpecW, PathFindExtensionW, PathFindFileNameW
ATH.exe
By Apple Inc. (Signed)
| Version: | 17.204.9.12 |
| MD5: | 3cac285e95cab1f0087fb5aaf12a2836 |
| SHA1: | 7fe076c4ebd4d7356c1a5054b9388fa5adba5c8c |
| SHA256: | f3c42b824a0c52e725c05cbe282116cbb3bb1294ce795ff43f8988607985d77b |
What is ATH.exe?
Part of the Apple iTunes (AirTrafficHost) to iPhone/iPad wired/wireless synching application. ATH.exe is loaded when itunes.exe (iTunes by Apple) is launched and will remain running during the lifetime of iTunes. AirTrafficHost.framework allows Apple iOS mobile devices to comunicate over the wireless network.
Overview
ath.exe executes as a process with the local user's privileges typically within the context of its parent
itunes.exe (iTunes by Apple Inc.). It is installed with a couple of know programs including Apple Mobile Device Support published by Apple Inc., MobileMe Control Panel from Apple Inc. and MobileMe Control Panel by Apple Inc.. The file is digitally signed by Apple Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | ath.exe |
| Publisher: | Apple Inc. |
| Description: | ATH.exe |
| Typical file path: | C:\Program Files\common files\apple\mobile device support\ath.exe |
| File version: | 17.204.9.12 |
| Size: | 53.85 KB (55,144 bytes) |
| Certificate |
| Issued to: | Apple Inc. |
| Authority (CA): | VeriSign |
| Expiration date: | Tuesday, June 25, 2013 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Apple Mobile Device Support is required and used for the synchronisation between an Apple mobile iOS devices (iPod, iPhone or iPad) and a PC through iTunes. If uninstalled, your iPhone, iPad, or iPod touch may not appear under Devices in iTunes after you connect it to your Windows PC. Apple Mobile Device Service runs as a Windows service (Apple Mobile Device Service (AMDS)) regardless if the user is running a connected Apple application...
Users who wished to sync their MobileMe data with a PC had to download and install Apple's MobileMe Control Panel. To install, the user first had to download and install the latest version of iTunes, and then install MobileMe Control Panel. After installation, the user signed into the control panel using their username and password, and could control sync settings for contacts, calendars, bookmarks, and iDisk settings such as public fol...
Network connections
[UDP] listens on port 58878
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00025004% | |
| Kernel CPU: | 0.00013485% | |
| User CPU: | 0.00011519% | |
| Kernel CPU time: | 967 ms/min | |
| CPU cycles: | 31,410/sec | |
| Memory |
| Private memory: | 3.93 MB | |
| Private (maximum): | 9.87 MB | |
| Private (minimum): | 9.87 MB | |
| Non-paged memory: | 3.93 MB | |
| Virtual memory: | 91.85 MB | |
| Virtual memory (peak): | 99.25 MB | |
| Working set: | 9.87 MB | |
| Working set (peak): | 10.34 MB | |
| Page faults: | 42,996/min | |
| I/O |
| I/O read transfer: | 73 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 41 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 1.04 KB/sec | |
| I/O other operations: | 7/sec | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 257 | |
| GUI GDI count: | 4 | |
| GUI GDI peak: | 4 | |
| GUI USER count: | 2 | |
| GUI USER peak: | 2 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\common files\apple\mobile device support\ath.exe" --pipe \\.\pipe\30239722-603442374415352r \\.\pipe\30239722-603442374415352w --target a659e95c2076e8b91eb0abc3f5eec6d9607cf81b --library 2593188c2737575b |
| Owner: | User |
| Parent process: | itunes.exe (iTunes by Apple Inc.) |
Threads
Averages
| ATH.exe (main module) |
| Total CPU: | 0.00095701% | |
| Kernel CPU: | 0.00050461% | |
| User CPU: | 0.00045241% | |
| CPU cycles: | 27,388/sec | |
| Memory: | 48 KB | |
| MSVCR80.dll |
| Total CPU: | 0.00000870% | |
| Kernel CPU: | 0.00000580% | |
| User CPU: | 0.00000290% | |
| CPU cycles: | 326/sec | |
| Memory: | 620 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 8 |
21.43% |
|
| Windows 7 Ultimate |
21.43% |
|
| Windows 7 Home Premium |
14.29% |
|
| Windows 7 Professional |
14.29% |
|
| Windows 8.1 Single Language |
7.14% |
|
| Microsoft Windows XP |
7.14% |
|
| Windows Vista Home Premium |
7.14% |
|
| Windows 8 Pro |
7.14% |
|
Distribution by country
United States installs about 46.15% of ath.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
40.00% |
|
| Acer |
20.00% |
|
| GIGABYTE |
20.00% |
|
| Dell |
20.00% |
|
