Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent processes
Child process
Related files
 PE file structure
|
Show functions |
Import table
advapi32.dll
RegCloseKey, RegCreateKeyW, RegOpenKeyExW, RegQueryValueExW
kernel32.dll
GetLastError, GetModuleFileNameW, GetEnvironmentVariableW, SetDllDirectoryW, GetFileAttributesW, WideCharToMultiByte, Process32Next, Process32First, FreeEnvironmentStringsW, CloseHandle, GetEnvironmentStringsW, GetCommandLineW, GetCurrentThreadId, GetCurrentProcessId, LoadLibraryW, DebugBreak, GetProcAddress, SetUnhandledExceptionFilter, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, lstrlenW, OutputDebugStringA, LoadLibraryA, FreeLibrary, LocalAlloc, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, RaiseException
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shlwapi.dll
PathRemoveFileSpecW, PathFindExtensionW, PathFindFileNameW
ATH.exe
By Apple Inc. (Signed)
| Version: | 17.351.6.52 |
| MD5: | de8e9f45a28df698ecf4362f42abeb6a |
| SHA1: | c732b659f88c65e41384d262c160c0694b3dcf08 |
What is ATH.exe?
Part of the Apple iTunes (AirTrafficHost) to iPhone/iPad wired/wireless synching application. ATH.exe is loaded when itunes.exe (iTunes by Apple) is launched and will remain running during the lifetime of iTunes. AirTrafficHost.framework allows Apple iOS mobile devices to comunicate over the wireless network.
Overview
ath.exe executes as a process with the local user's privileges typically within the context of its parent
ihelper.exe (by Guangzhou Tieren Network Technology Co). It is installed with a couple of know programs including Apple Mobile Device Support published by Apple Inc., Apple Mobile Device Support from Apple Inc. and Apple Mobile Device Support by Apple Inc.. The file is digitally signed by Apple Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | ath.exe |
| Publisher: | Apple Inc. |
| Description: | ATH.exe |
| Typical file path: | C:\Program Files\common files\apple\mobile device support\ath.exe |
| File version: | 17.351.6.52 |
| Size: | 42.32 KB (43,336 bytes) |
| Build date: | 2/11/2014 9:26 PM |
| Certificate |
| Issued to: | Apple Inc. |
| Authority (CA): | VeriSign |
| Expiration date: | Tuesday, June 25, 2013 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Apple Mobile Device Support is required and used for the synchronisation between an Apple mobile iOS devices (iPod, iPhone or iPad) and a PC through iTunes. If uninstalled, your iPhone, iPad, or iPod touch may not appear under Devices in iTunes after you connect it to your Windows PC. Apple Mobile Device Service runs as a Windows service (Apple Mobile Device Service (AMDS)) regardless if the user is running a connected Apple application...
Users who wished to sync their MobileMe data with a PC had to download and install Apple's MobileMe Control Panel. To install, the user first had to download and install the latest version of iTunes, and then install MobileMe Control Panel. After installation, the user signed into the control panel using their username and password, and could control sync settings for contacts, calendars, bookmarks, and iDisk settings such as public fol...
MobileMe (replaced by iCloud) was a subscription-based collection of online services. MobileMe allowed users to track the location of their iOS devices via the web portal at me.com. MobileMe had two different plans. The Individual plan included 20 GB of email and file storage and 200 GB of monthly data transfer. MobileMe maintained a synchronized address book and calendar feature using Push functions. When a user made a change to a con...
Network connections
[UDP] listens on port 54100
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.05427987% | |
| Kernel CPU: | 0.00843552% | |
| User CPU: | 0.04584435% | |
| Kernel CPU time: | 39 ms/min | |
| Context switches: | 66/sec | |
| Memory |
| Private memory: | 3.46 MB | |
| Private (maximum): | 12.23 MB | |
| Private (minimum): | 12.01 MB | |
| Non-paged memory: | 3.46 MB | |
| Virtual memory: | 118.09 MB | |
| Virtual memory (peak): | 135.64 MB | |
| Working set: | 11.99 MB | |
| Working set (peak): | 12.11 MB | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 215 | |
| GUI GDI count: | 4 | |
| GUI GDI peak: | 4 | |
| GUI USER count: | 1 | |
| GUI USER peak: | 2 | |
Process properties
| Integrety level: | High |
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\common files\apple\mobile device support\ath.exe" --pipe \\.\pipe\303782031194352378414912r \\.\pipe\303782031194352378414912w --target c9c484b7be9dcbb93b538219f525b5bd6286e45f --library 01b28c6b719694e5
- "C:\Program Files\common files\apple\mobile device support\ath.exe" --pipe \\.\pipe\303782021249931794416604r \\.\pipe\303782021249931794416604w --target c9c484b7be9dcbb93b538219f525b5bd6286e45f --library 01b28c6b719694e5
|
| Owner: | User |
| Parent processes: |
|
Distribution by Windows OS
| OS version | distribution |
| Windows 8 |
21.43% |
|
| Windows 7 Ultimate |
21.43% |
|
| Windows 7 Home Premium |
14.29% |
|
| Windows 7 Professional |
14.29% |
|
| Windows 8.1 Single Language |
7.14% |
|
| Microsoft Windows XP |
7.14% |
|
| Windows Vista Home Premium |
7.14% |
|
| Windows 8 Pro |
7.14% |
|
Distribution by country
United States installs about 46.15% of ath.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
40.00% |
|
| Acer |
20.00% |
|
| GIGABYTE |
20.00% |
|
| Dell |
20.00% |
|
