Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
PE file structure |
Show functions |
Import table
advapi32.dll
RegCloseKey, RegCreateKeyW, RegOpenKeyExW, RegQueryValueExW
kernel32.dll
GetLastError, GetModuleFileNameW, GetEnvironmentVariableW, SetDllDirectoryW, GetFileAttributesW, WideCharToMultiByte, Process32Next, Process32First, FreeEnvironmentStringsW, CloseHandle, GetEnvironmentStringsW, GetCommandLineW, GetCurrentThreadId, GetCurrentProcessId, LoadLibraryW, DebugBreak, GetProcAddress, SetUnhandledExceptionFilter, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, lstrlenW, OutputDebugStringA, LoadLibraryA, FreeLibrary, LocalAlloc, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, RaiseException
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shlwapi.dll
PathRemoveFileSpecW, PathFindExtensionW, PathFindFileNameW
ATH.exe
By Apple Inc. (Signed)
Version: | 17.282.0.1 |
MD5: | e74fda1e6f7bc90ea184e297a31a7b8a |
SHA1: | bbf257b5a12b81699cae2165fae4334398670597 |
SHA256: | aa844566562ff45496c85653b6280b09a0193ed9e5315e939d2d94d346dda949 |
What is ATH.exe?
Part of the Apple iTunes (AirTrafficHost) to iPhone/iPad wired/wireless synching application. ATH.exe is loaded when itunes.exe (iTunes by Apple) is launched and will remain running during the lifetime of iTunes. AirTrafficHost.framework allows Apple iOS mobile devices to comunicate over the wireless network.
Overview
ath.exe executes as a process with the local user's privileges typically within the context of its parent
itunes.exe (iTunes by Apple Inc.). It is installed with a couple of know programs including Apple Mobile Device Support published by Apple Inc., Apple Mobile Device Support from Apple Inc. and Apple Mobile Device Support by Apple Inc.. The file is digitally signed by Apple Inc. which was issued by the VeriSign certificate authority (CA).
Details
File name: | ath.exe |
Publisher: | Apple Inc. |
Description: | ATH.exe |
Typical file path: | C:\Program Files\common files\apple\mobile device support\ath.exe |
File version: | 17.282.0.1 |
Size: | 53.89 KB (55,184 bytes) |
Certificate |
Issued to: | Apple Inc. |
Authority (CA): | VeriSign |
Expiration date: | Tuesday, June 25, 2013 |
Digital DNA |
PE subsystem: | Windows Console |
File packed: | No |
Code language: | Microsoft Visual C++ 8.0 |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Apple Mobile Device Support is required and used for the synchronisation between an Apple mobile iOS devices (iPod, iPhone or iPad) and a PC through iTunes. If uninstalled, your iPhone, iPad, or iPod touch may not appear under Devices in iTunes after you connect it to your Windows PC. Apple Mobile Device Service runs as a Windows service (Apple Mobile Device Service (AMDS)) regardless if the user is running a connected Apple application...
Users who wished to sync their MobileMe data with a PC had to download and install Apple's MobileMe Control Panel. To install, the user first had to download and install the latest version of iTunes, and then install MobileMe Control Panel. After installation, the user signed into the control panel using their username and password, and could control sync settings for contacts, calendars, bookmarks, and iDisk settings such as public fol...
MobileMe (replaced by iCloud) was a subscription-based collection of online services. MobileMe allowed users to track the location of their iOS devices via the web portal at me.com. MobileMe had two different plans. The Individual plan included 20 GB of email and file storage and 200 GB of monthly data transfer. MobileMe maintained a synchronized address book and calendar feature using Push functions. When a user made a change to a con...
Network connections
[UDP] listens on port 57288
[UDP] listens on port 53499
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.01992166% | |
Kernel CPU: | 0.00468208% | |
User CPU: | 0.01523957% | |
Kernel CPU time: | 140 ms/min | |
CPU cycles: | 98,481/sec | |
Memory |
Private memory: | 3.62 MB | |
Private (maximum): | 10.85 MB | |
Private (minimum): | 10.8 MB | |
Non-paged memory: | 3.62 MB | |
Virtual memory: | 101.32 MB | |
Virtual memory (peak): | 110.82 MB | |
Working set: | 10.8 MB | |
Working set (peak): | 10.9 MB | |
Page faults: | 36,128/min | |
I/O |
I/O read transfer: | 384 Bytes/sec | |
I/O read operations: | 1/sec | |
I/O write transfer: | 60 Bytes/sec | |
I/O write operations: | 1/sec | |
I/O other transfer: | 48 Bytes/sec | |
I/O other operations: | 5/sec | |
Resource allocations |
Threads: | 6 | |
Handles: | 242 | |
GUI GDI count: | 4 | |
GUI GDI peak: | 4 | |
GUI USER count: | 1 | |
GUI USER peak: | 2 | |
Process properties
Integrety level: | Medium |
Platform: | 32-bit |
Command lines: |
- "C:\Program Files\common files\apple\mobile device support\ath.exe" --pipe \\.\pipe\30286513566744062412912r \\.\pipe\30286513566744062412912w --target a3a0adac900704fac9214abdb685b868b385df6c --library b0866c4d973e7341
- "C:\Program Files\common files\apple\mobile device support\ath.exe" --pipe \\.\pipe\30260087-1293658861412228r \\.\pipe\30260087-1293658861412228w --target b3591e0fe8545afdd8607514668617e5a9b6efd2 --library 1c75300557e67acb
|
Owner: | User |
Parent process: | itunes.exe (iTunes by Apple Inc.) |
Distribution by Windows OS
OS version | distribution |
Windows 8 |
21.43% |
|
Windows 7 Ultimate |
21.43% |
|
Windows 7 Home Premium |
14.29% |
|
Windows 7 Professional |
14.29% |
|
Windows 8.1 Single Language |
7.14% |
|
Microsoft Windows XP |
7.14% |
|
Windows Vista Home Premium |
7.14% |
|
Windows 8 Pro |
7.14% |
|
Distribution by country
United States installs about 46.15% of ath.exe.
Distribution by PC manufacturer
PC Manufacturer | distribution |
ASUS |
40.00% |
|
Acer |
20.00% |
|
GIGABYTE |
20.00% |
|
Dell |
20.00% |
|