Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent processes
Child processes
Related files
PE file structure |
Show functions |
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW
kernel32.dll
GetFileAttributesExW, GetLastError, GetCommandLineW, LocalFree, GetModuleHandleW, GetProcAddress, VerSetConditionMask, VerifyVersionInfoW, LoadLibraryW, FreeLibrary, QueryPerformanceCounter, GetModuleFileNameW, GetCommandLineA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, Sleep, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, HeapCreate, VirtualFree, HeapFree, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, LCMapStringA, MultiByteToWideChar, LCMapStringW, GetStringTypeA, GetStringTypeW, LeaveCriticalSection, EnterCriticalSection, GetLocaleInfoA, LoadLibraryA, InitializeCriticalSectionAndSpinCount, HeapAlloc, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, HeapSetInformation, GetStartupInfoW, EncodePointer, DecodePointer, IsProcessorFeaturePresent
shell32.dll
CommandLineToArgvW
shlwapi.dll
PathAppendW, PathRemoveFileSpecW
user32.dll
wsprintfW, MessageBoxW
iTunes.exe
iTunes by Apple Inc. (Signed)
Version: | 11.2.2.3 |
MD5: | ab2bd92efc10c12b12e7d1033bc0034b |
SHA1: | cf030deec1080b87d3d8c895208e3873d85b1851 |
What is iTunes.exe?
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad. iTunes is an application that allows the user to purchase and manage audio and video on a personal computer, acting as a front end for Apple's QuickTime media player. Officially, using iTunes is required in order to manage the audio of an Apple iPod portable audio player.
About iTunes.exe (from Apple Inc.)
“iTunes is a free application for your Mac or PC. It lets you organize and play digital music and video on your computer. It can automatically download new music, app, and book purchases across all y”
Details
File name: | itunes.exe |
Publisher: | Apple Inc. |
Product name: | iTunes |
Typical file path: | C:\Program Files\itunes\itunes.exe |
File version: | 11.2.2.3 |
Size: | 9.34 MB (9,789,256 bytes) |
Build date: | 5/26/2014 7:06 PM |
Certificate |
Issued to: | Apple Inc. |
Authority (CA): | VeriSign |
Expiration date: | Tuesday, June 25, 2013 |
Digital DNA |
File packed: | No |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad. iTunes is an application that allows the user to purchase and manage audio and video on a personal computer, acting as a front end for Apple's QuickTime media player. Officially, using iTunes is required in order to manage the audio of an ...
“Enabling VoiceOver for iPod allows you to hear the names of songs, artists, and playlists spoken when listening to content on your iPod. If you have the Apple Earphones with Remote and Mic or the In-Ear Headphones with Remote and Mic, you can also use VoiceOver to navigate playlists.”
“QuickTime Player 7 supports older media formats, such as QTVR, interactive QuickTime movies, and MIDI files on Snow Leopard and OS X Lion. It also accepts QuickTime 7 Pro registration codes, which turn on QuickTime Pro functions. QuickTime Player 7 will be installed in the Utilities folder in the Applications folder.”
|
IDM Computer Solutions, Inc. |
|
“Text editor, HEX editor, HTML editor, PHP editor. Suitable for general text editing, programmer's, web designers, binary editing, email, and all your editing needs. Key Features include: Disk based editing for files even greater than 4GB! 100,000 word spell checker, with foreign language support - supports spell check as you type. Syntax Highlighting/Coloring for many languages including C/C++, HTML, VB, Java, Perl, ASP and more. Nested...”
Mozilla Thunderbird is a free, open source, cross-platform email, news, and chat client developed by the Mozilla Foundation.
“TeamSpeak 3 continues the legacy of the original TeamSpeak communication system previously offered in TeamSpeak Classic (1.5) and TeamSpeak 2. TeamSpeak 3 is not merely an extension of its predecessors but rather a complete rewrite in C++ of its proprietary protocol and core technology. With over nine years of experience and leadership in the VoIP sector, our engineers have created a flexible, powerful, and scalable solution granting yo...”
WinRAR is a file archiver and data compression utility that supports RAR, and ZIP and can unpack ARJ, LZH, TAR, GZ, ACE, UUE, BZ2, JAR, ISO, EXE and 7z compressed archives. Version 5 uses the RAR5 archive format that cannot be managed by old versions of WinRAR. This format features a maximum 1GB dictionary (only in 64bit version), better multicore support, it removes multimedia, text and itanium binaries special compression algorithms.
“YouSendIt is the most popular and secure online file sharing software that allows you to easily send large files and email attachments. YouSendIt Express allows users to send large and important files without a browser while providing faster uploads and handling files up to 2GB in size. With Express, you can right click and send, drag and drop, zip files and folders, set password protection, request return receipt- track when your files...”
Behaviors
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'iTunesShowSongsOnArrival'
- Handler name 'iTunesPlaySongsOnArrival'
- Handler name 'iTunesImportSongsOnArrival'
- Handler name 'iTunesBurnCDOnArrival'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
- Firewall exception for '%ProgramFiles%\iTunes\iTunes.exe'
- Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
- Firewall exception for 'C:\Programas\iTunes\iTunes.exe'
- Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
Scheduled tasks
- The job '{F3AEADC8-A434-4F58-A614-F9EB83BFD2DD}' runs on registration in the path '\{F3AEADC8-A434-4F58-A614-F9EB83BFD2DD}'
- The task '{E14816D8-4565-4C1E-91D8-D35D77F7D086}' runs on registration in the path '\{E14816D8-4565-4C1E-91D8-D35D77F7D086}'
- The job '{BA35671A-E164-4CDB-8AFA-4BA20610576F}' runs on registration in the path '\{BA35671A-E164-4CDB-8AFA-4BA20610576F}'
- The task '{DF37C906-1A36-4CE3-BA8B-29279920361D}' runs on registration in the path '\{DF37C906-1A36-4CE3-BA8B-29279920361D}'
- The job '{A04CC4AC-8D64-423A-BC97-5374A4A28E27}' runs on registration in the path '\{A04CC4AC-8D64-423A-BC97-5374A4A28E27}'
- The job '{20CCCF81-3B96-4E6C-8D04-3781A4E79128}' runs on registration in the path '\{20CCCF81-3B96-4E6C-8D04-3781A4E79128}'
- The task '{C91F56F9-9128-42DC-B10F-F0E703F06055}' runs on registration in the path '\{C91F56F9-9128-42DC-B10F-F0E703F06055}'
- The task '{0FE53980-F953-454D-A549-45C6B3125142}' runs on registration in the path '\{0FE53980-F953-454D-A549-45C6B3125142}'
- The job '{BF90DF6D-E8A7-4A04-86DC-E01F8A10155D}' runs on registration in the path '\{BF90DF6D-E8A7-4A04-86DC-E01F8A10155D}'
- The task '{531C370D-DB09-455C-97D3-A57FE0F3716C}' runs on registration in the path '\{531C370D-DB09-455C-97D3-A57FE0F3716C}'
- Entry path '\{C821BC49-A2D3-40A2-A928-A60E052A2DF4}'
- Entry path '\{7D2D0C75-B15D-423E-B5B5-E25F65DC3E89}'
- Entry path '\{600C4C28-CB4A-4C49-9C10-C92AC50A8522}'
- Entry path '\{3233DD4D-0830-43D4-809C-AFCBE678EF2A}'
- Entry path '\{2019E0F0-94E9-4334-AF28-93FFC7C2B98C}'
- Entry path '\{C1FC636C-55A1-421F-B276-BD2F24EA833B}'
- Entry path '\{4C7C9802-FE50-4149-8C74-E4543C22BE54}'
- Entry path '\{1AA93A73-D1F8-4462-821C-EAC330E87478}'
- Entry path '\{FE7CE905-5B61-4D56-BBEF-AE727E346491}'
- Entry path '\{FD930DC4-9B48-4F96-8697-90B81271603E}'
- Entry path '\{F4789F39-CA20-44B8-B42F-61D2FCDA5865}'
- Entry path '\{DAA44757-E18B-40B9-BD2F-B19EA8094447}'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 57444
[UDP] listens on port 50368
[UDP] listens on port 51705
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00848784% | |
Kernel CPU: | 0.00540672% | |
User CPU: | 0.00308112% | |
Kernel CPU time: | 60,045 ms/min | |
CPU cycles: | 7,634,950/sec | |
Memory |
Private memory: | 71.8 MB | |
Private (maximum): | 91.9 MB | |
Private (minimum): | 39.29 MB | |
Non-paged memory: | 71.8 MB | |
Virtual memory: | 466.26 MB | |
Virtual memory (peak): | 503.06 MB | |
Working set: | 75.92 MB | |
Working set (peak): | 101.17 MB | |
Page faults: | 234,439/min | |
I/O |
I/O read transfer: | 1.18 MB/sec | |
I/O read operations: | 48/sec | |
I/O write transfer: | 846.17 KB/sec | |
I/O write operations: | 6/sec | |
I/O other transfer: | 51.65 KB/sec | |
I/O other operations: | 158/sec | |
Resource allocations |
Threads: | 34 | |
Handles: | 1179 | |
GUI GDI count: | 253 | |
GUI GDI peak: | 276 | |
GUI USER count: | 100 | |
GUI USER peak: | 114 | |
Process properties
Integrety level: | Medium |
Platform: | 64-bit |
Command line: | "C:\Program Files\itunes\itunes.exe" |
Owner: | User |
Parent processes: |
|
Threads
Averages
iTunes.exe (main module) |
Total CPU: | 0.04929108% | |
Kernel CPU: | 0.01049436% | |
User CPU: | 0.03879673% | |
CPU cycles: | 2,733,351/sec | |
Context switches: | 1/sec | |
Memory: | 9.34 MB | |
wow64win.dll |
Total CPU: | 0.00050059% | |
Kernel CPU: | 0.00019719% | |
User CPU: | 0.00030340% | |
CPU cycles: | 63,892/sec | |
Context switches: | 1/sec | |
Memory: | 416 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
55.50% |
|
Windows 8.1 Pro |
16.00% |
|
Windows 7 Ultimate |
12.00% |
|
Windows 8 |
8.50% |
|
Windows 8.1 N |
4.00% |
|
Windows Seven Black Edition |
4.00% |
|
Distribution by country
United States installs about 63.50% of iTunes.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Hewlett-Packard |
40.00% |
|
Toshiba |
24.00% |
|
ASUS |
16.00% |
|
Acer |
12.00% |
|
Alienware |
4.00% |
|
Samsung |
4.00% |
|