Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Child processes
Related files
 PE file structure
|
Show functions |
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW
kernel32.dll
GetFileAttributesExW, GetLastError, GetCommandLineW, LocalFree, GetModuleHandleW, GetProcAddress, VerSetConditionMask, VerifyVersionInfoW, LoadLibraryW, FreeLibrary, QueryPerformanceCounter, GetModuleFileNameW, GetCommandLineA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, Sleep, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, HeapCreate, VirtualFree, HeapFree, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, LCMapStringA, MultiByteToWideChar, LCMapStringW, GetStringTypeA, GetStringTypeW, LeaveCriticalSection, EnterCriticalSection, GetLocaleInfoA, LoadLibraryA, InitializeCriticalSectionAndSpinCount, HeapAlloc, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, HeapSetInformation, GetStartupInfoW, EncodePointer, DecodePointer, IsProcessorFeaturePresent
shell32.dll
CommandLineToArgvW
shlwapi.dll
PathAppendW, PathRemoveFileSpecW
user32.dll
wsprintfW, MessageBoxW
iTunes.exe
iTunes by Apple Inc. (Signed)
| Version: | 11.0.1.12 |
| MD5: | dc8dfa6d71daf85d3f23d49a4b4b0bd2 |
| SHA1: | 71ab91ddecfce9a38a919fde2989d67dcad0bfd4 |
| SHA256: | 8ef6b110c19a5a10faaf9527ff30182c99853cff4d99667c26d7713159a81627 |
What is iTunes.exe?
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad. iTunes is an application that allows the user to purchase and manage audio and video on a personal computer, acting as a front end for Apple's QuickTime media player. Officially, using iTunes is required in order to manage the audio of an Apple iPod portable audio player.
About iTunes.exe (from Apple Inc.)
“iTunes is a free application for your Mac or PC. It lets you organize and play digital music and video on your computer. It can automatically download new music, app, and book purchases across all y”
Details
| File name: | itunes.exe |
| Publisher: | Apple Inc. |
| Product name: | iTunes |
| Typical file path: | C:\Program Files\itunes\itunes.exe |
| File version: | 11.0.1.12 |
| Size: | 9.34 MB (9,789,408 bytes) |
| Certificate |
| Issued to: | Apple Inc. |
| Authority (CA): | VeriSign |
| Expiration date: | Tuesday, June 25, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“With adsl TV , you can watch live free live TV without TV tuner , full screen or in a corner of the screen of your PC, watch web TV online , listen to live radio on the internet , freeze emissions current with time shifting, photographing the images you want, save your favorite radio or TV programs, schedule recordings from the TV program guide integrated display a second TV channel in PIP over the first .. . and many other things, a si...”
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad. iTunes is an application that allows the user to purchase and manage audio and video on a personal computer, acting as a front end for Apple's QuickTime media player. Officially, using iTunes is required in order to manage the audio of an ...
“Enabling VoiceOver for iPod allows you to hear the names of songs, artists, and playlists spoken when listening to content on your iPod. If you have the Apple Earphones with Remote and Mic or the In-Ear Headphones with Remote and Mic, you can also use VoiceOver to navigate playlists.”
QuickTime is an extensible multimedia framework capable of handling various formats of digital video, picture, sound, panoramic images, and interactivity. QuickTime for Microsoft Windows has always been downloadable as a standalone installation, as well as being bundled with Apple's iTunes. QuickTime Player is limited to only basic playback operations unless a QuickTime Pro license key is purchased.
Safari is a web browser developed by Apple Inc. It is based on the WebKit engine, which is a fork of KDE's KHTML engine. Safari has a number of features. Some are specific to certain operating systems or platforms.
“QuickTime Player 7 supports older media formats, such as QTVR, interactive QuickTime movies, and MIDI files on Snow Leopard and OS X Lion. It also accepts QuickTime 7 Pro registration codes, which turn on QuickTime Pro functions. QuickTime Player 7 will be installed in the Utilities folder in the Applications folder.”
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include potentially unwanted programs in the form of the Conduit Engine, which installs a toolbar, and makes homepage and default search engine changes to a user's web browser.
|
Encyclopaedia Britannica, Inc. |
|
Evernote is a suite of software and services designed for notetaking and archiving. A "note" can be a piece of formatted text, a full webpage or webpage excerpt, a photograph, a voice memo, or a handwritten "ink" note. Notes can also have file attachments. Web clipping support is installed by default on the Internet Explorer and Safari browsers when the Evernote software is installed under Windows. The Evernote email-clipper is automat...
Microsoft Flight is an aviation game from Microsoft Studios created as a successor to the discontinued Microsoft Flight Simulator series. light features new aircraft, scenery and terrain, a revamped weather engine, and new gameplay elements for users of all skill levels.
SmartFTP is an FTP/FTPS/SFTP/WebDAV/Amazon S3/Rapidshare client for Windows, developed by SmartSoft Ltd. Features include SSL/TLS, IPv6 and FXP support, a backup tool, a transfer queue, proxy and firewall support, multiple connections, chmod features, Drag-and-drop and localization for over 20 languages. SmartFTP is available in three editions, Home, Professional and Ultimate.
WinZip 15 implemented new performance architecture for high-speed zipping, interface improvements with refined menu designs and more intuitive icons, new desktop ZIP/UNZIP gadget with drag-and-drop functionality. WinZip is a proprietary file archiver and compressor that creates archives in the ZIP file format but also has various levels of support for other archive formats.
Behaviors
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'iTunesShowSongsOnArrival'
- Handler name 'iTunesPlaySongsOnArrival'
- Handler name 'iTunesImportSongsOnArrival'
- Handler name 'iTunesBurnCDOnArrival'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
- Firewall exception for '%ProgramFiles%\iTunes\iTunes.exe'
- Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
- Firewall exception for 'C:\Programas\iTunes\iTunes.exe'
- Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
Scheduled tasks
- The job '{F3AEADC8-A434-4F58-A614-F9EB83BFD2DD}' runs on registration in the path '\{F3AEADC8-A434-4F58-A614-F9EB83BFD2DD}'
- The task '{E14816D8-4565-4C1E-91D8-D35D77F7D086}' runs on registration in the path '\{E14816D8-4565-4C1E-91D8-D35D77F7D086}'
- The job '{BA35671A-E164-4CDB-8AFA-4BA20610576F}' runs on registration in the path '\{BA35671A-E164-4CDB-8AFA-4BA20610576F}'
- The task '{DF37C906-1A36-4CE3-BA8B-29279920361D}' runs on registration in the path '\{DF37C906-1A36-4CE3-BA8B-29279920361D}'
- The job '{A04CC4AC-8D64-423A-BC97-5374A4A28E27}' runs on registration in the path '\{A04CC4AC-8D64-423A-BC97-5374A4A28E27}'
- The job '{20CCCF81-3B96-4E6C-8D04-3781A4E79128}' runs on registration in the path '\{20CCCF81-3B96-4E6C-8D04-3781A4E79128}'
- The task '{C91F56F9-9128-42DC-B10F-F0E703F06055}' runs on registration in the path '\{C91F56F9-9128-42DC-B10F-F0E703F06055}'
- The task '{0FE53980-F953-454D-A549-45C6B3125142}' runs on registration in the path '\{0FE53980-F953-454D-A549-45C6B3125142}'
- The job '{BF90DF6D-E8A7-4A04-86DC-E01F8A10155D}' runs on registration in the path '\{BF90DF6D-E8A7-4A04-86DC-E01F8A10155D}'
- The task '{531C370D-DB09-455C-97D3-A57FE0F3716C}' runs on registration in the path '\{531C370D-DB09-455C-97D3-A57FE0F3716C}'
- Entry path '\{C821BC49-A2D3-40A2-A928-A60E052A2DF4}'
- Entry path '\{7D2D0C75-B15D-423E-B5B5-E25F65DC3E89}'
- Entry path '\{600C4C28-CB4A-4C49-9C10-C92AC50A8522}'
- Entry path '\{3233DD4D-0830-43D4-809C-AFCBE678EF2A}'
- Entry path '\{2019E0F0-94E9-4334-AF28-93FFC7C2B98C}'
- Entry path '\{C1FC636C-55A1-421F-B276-BD2F24EA833B}'
- Entry path '\{4C7C9802-FE50-4149-8C74-E4543C22BE54}'
- Entry path '\{1AA93A73-D1F8-4462-821C-EAC330E87478}'
- Entry path '\{FE7CE905-5B61-4D56-BBEF-AE727E346491}'
- Entry path '\{FD930DC4-9B48-4F96-8697-90B81271603E}'
- Entry path '\{F4789F39-CA20-44B8-B42F-61D2FCDA5865}'
- Entry path '\{DAA44757-E18B-40B9-BD2F-B19EA8094447}'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 58803
[UDP] listens on port 52008
[UDP] listens on port 57646
[UDP] listens on port 58788
[UDP] listens on port 56332
[UDP] listens on port 56837
[UDP] listens on port 51684
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00103921% | |
| Kernel CPU: | 0.00048793% | |
| User CPU: | 0.00055128% | |
| Kernel CPU time: | 76,672,380 ms/min | |
| CPU cycles: | 475,917/sec | |
| Memory |
| Private memory: | 69 MB | |
| Private (maximum): | 89.8 MB | |
| Private (minimum): | 58.99 MB | |
| Non-paged memory: | 69 MB | |
| Virtual memory: | 433.24 MB | |
| Virtual memory (peak): | 461.89 MB | |
| Working set: | 73.02 MB | |
| Working set (peak): | 98.76 MB | |
| Page faults: | 622,021/min | |
| I/O |
| I/O read transfer: | 922.66 KB/sec | |
| I/O read operations: | 87/sec | |
| I/O write transfer: | 28.34 KB/sec | |
| I/O write operations: | 5/sec | |
| I/O other transfer: | 6.3 KB/sec | |
| I/O other operations: | 174/sec | |
| Resource allocations |
| Threads: | 37 | |
| Handles: | 1060 | |
| GUI GDI count: | 304 | |
| GUI GDI peak: | 344 | |
| GUI USER count: | 91 | |
| GUI USER peak: | 102 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\itunes\itunes.exe"
- "C:\itunes\itunes.exe"
|
| Owner: | User |
| Parent processes: |
|
Threads
Averages
| iTunes.exe (main module) |
| Total CPU: | 0.01604129% | |
| Kernel CPU: | 0.00546658% | |
| User CPU: | 0.01057471% | |
| CPU cycles: | 577,146/sec | |
| Context switches: | 2/sec | |
| Memory: | 9.34 MB | |
| wow64win.dll |
| Total CPU: | 0.00126976% | |
| Kernel CPU: | 0.00063488% | |
| User CPU: | 0.00063488% | |
| CPU cycles: | 2,223/sec | |
| Memory: | 360 KB | |
| wow64.dll |
| Total CPU: | 0.00005655% | |
| Kernel CPU: | 0.00005655% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,003/sec | |
| Memory: | 252 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
55.50% |
|
| Windows 8.1 Pro |
16.00% |
|
| Windows 7 Ultimate |
12.00% |
|
| Windows 8 |
8.50% |
|
| Windows 8.1 N |
4.00% |
|
| Windows Seven Black Edition |
4.00% |
|
Distribution by country
United States installs about 63.50% of iTunes.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
40.00% |
|
| Toshiba |
24.00% |
|
| ASUS |
16.00% |
|
| Acer |
12.00% |
|
| Alienware |
4.00% |
|
| Samsung |
4.00% |
|
