Should I block it?

No, this file is 100% safe to run.

Additional versions

11.2.2.3	5.35%
11.2.0.115	0.34%
11.2.0.114	0.02%
11.1.5.5	2.84%
11.1.4.62	0.50%
11.1.3.8	3.42%
11.1.2.32	2.86%
11.1.2.31	0.94%
11.1.1.11	2.96%
11.1.0.126	2.68%
11.0.5.5	2.72%
11.0.4.4	10.27%
11.0.3.42	2.34%
11.0.2.26	13.80%
11.0.2.25	2.04%
11.0.1.12	18.80%
11.0.0.163	5.97%
10.7.0.21	12.05%
10.6.3.25	4.81%
10.6.1.7	2.00%
10.6.0.40	0.50%
10.5.3.3	0.28%
10.5.2.11	0.68%
10.5.1.42	0.68%
10.5.0.142	0.44%
View more
10.3.1.55	0.10%
10.2.2.12	0.10%
10.2.1.1	0.18%
10.2.0.34	0.02%
10.1.1.4	0.18%
10.1.0.54	0.02%
10.0.1.22	0.02%
9.0.3.15	0.02%
8.2.0.23	0.10%

Relationships

Parent process

iTunesHelper.exe (iTunes by Apple Inc.)

Child process

applemobiledevicehelper.exe (by Apple)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExW, RegOpenKeyExW

kernel32.dll

GetFileAttributesExW, GetLastError, GetCommandLineW, LocalFree, GetModuleHandleW, GetProcAddress, VerSetConditionMask, VerifyVersionInfoW, LoadLibraryW, FreeLibrary, QueryPerformanceCounter, GetModuleFileNameW, GetCommandLineA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, Sleep, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, HeapCreate, VirtualFree, HeapFree, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, LCMapStringA, MultiByteToWideChar, LCMapStringW, GetStringTypeA, GetStringTypeW, LeaveCriticalSection, EnterCriticalSection, GetLocaleInfoA, LoadLibraryA, InitializeCriticalSectionAndSpinCount, HeapAlloc, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, HeapSetInformation, GetStartupInfoW, EncodePointer, DecodePointer, IsProcessorFeaturePresent

shell32.dll

CommandLineToArgvW

shlwapi.dll

PathAppendW, PathRemoveFileSpecW

user32.dll

wsprintfW, MessageBoxW

iTunes.exe

iTunes by Apple Inc. (Signed)

Remove iTunes.exe

Version:	11.1.0.126
MD5:	ea4f2d7f6c01b5e581f4baffdfaa45c7
SHA1:	9975c841b67e0d6e690f677c105d5bb579257814
SHA256:	0a41a0388c5e30d1e31c42696359e7abdc9da28b0c4c1bcdbc73a1066722bb1c

What is iTunes.exe?

Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad. iTunes is an application that allows the user to purchase and manage audio and video on a personal computer, acting as a front end for Apple's QuickTime media player. Officially, using iTunes is required in order to manage the audio of an Apple iPod portable audio player.

About iTunes.exe (from Apple Inc.)

“iTunes is a free application for your Mac or PC. It lets you organize and play digital music and video on your computer. It can automatically download new music, app, and book purchases across all y”

Details

File name:	itunes.exe
Publisher:	Apple Inc.
Product name:	iTunes
Typical file path:	C:\Program Files\itunes\itunes.exe
File version:	11.1.0.126
Size:	9.34 MB (9,789,256 bytes)
Build date:	9/18/2013 2:41 PM
Certificate
Issued to:	Apple Inc.
Authority (CA):	VeriSign
Expiration date:	Tuesday, June 25, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

iTunes

Apple Inc.

9% remove

VoiceOver Kit

Apple Inc.

10% remove

“Enabling VoiceOver for iPod allows you to hear the names of songs, artists, and playlists spoken when listening to content on your iPod. If you have the Apple Earphones with Remote and Mic or the In-Ear Headphones with Remote and Mic, you can also use VoiceOver to navigate playlists.”

Behaviors

Autoplay handlers

Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'

Handler name 'iTunesShowSongsOnArrival'
Handler name 'iTunesPlaySongsOnArrival'
Handler name 'iTunesImportSongsOnArrival'
Handler name 'iTunesBurnCDOnArrival'

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
Firewall exception for '%ProgramFiles%\iTunes\iTunes.exe'
Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'
Firewall exception for 'C:\Programas\iTunes\iTunes.exe'
Firewall exception for 'C:\Program Files\iTunes\iTunes.exe'

Scheduled tasks

The job '{F3AEADC8-A434-4F58-A614-F9EB83BFD2DD}' runs on registration in the path '\{F3AEADC8-A434-4F58-A614-F9EB83BFD2DD}'
The task '{E14816D8-4565-4C1E-91D8-D35D77F7D086}' runs on registration in the path '\{E14816D8-4565-4C1E-91D8-D35D77F7D086}'
The job '{BA35671A-E164-4CDB-8AFA-4BA20610576F}' runs on registration in the path '\{BA35671A-E164-4CDB-8AFA-4BA20610576F}'
The task '{DF37C906-1A36-4CE3-BA8B-29279920361D}' runs on registration in the path '\{DF37C906-1A36-4CE3-BA8B-29279920361D}'
The job '{A04CC4AC-8D64-423A-BC97-5374A4A28E27}' runs on registration in the path '\{A04CC4AC-8D64-423A-BC97-5374A4A28E27}'
The job '{20CCCF81-3B96-4E6C-8D04-3781A4E79128}' runs on registration in the path '\{20CCCF81-3B96-4E6C-8D04-3781A4E79128}'
The task '{C91F56F9-9128-42DC-B10F-F0E703F06055}' runs on registration in the path '\{C91F56F9-9128-42DC-B10F-F0E703F06055}'
The task '{0FE53980-F953-454D-A549-45C6B3125142}' runs on registration in the path '\{0FE53980-F953-454D-A549-45C6B3125142}'
The job '{BF90DF6D-E8A7-4A04-86DC-E01F8A10155D}' runs on registration in the path '\{BF90DF6D-E8A7-4A04-86DC-E01F8A10155D}'
The task '{531C370D-DB09-455C-97D3-A57FE0F3716C}' runs on registration in the path '\{531C370D-DB09-455C-97D3-A57FE0F3716C}'
Entry path '\{C821BC49-A2D3-40A2-A928-A60E052A2DF4}'
Entry path '\{7D2D0C75-B15D-423E-B5B5-E25F65DC3E89}'
Entry path '\{600C4C28-CB4A-4C49-9C10-C92AC50A8522}'
Entry path '\{3233DD4D-0830-43D4-809C-AFCBE678EF2A}'
Entry path '\{2019E0F0-94E9-4334-AF28-93FFC7C2B98C}'
Entry path '\{C1FC636C-55A1-421F-B276-BD2F24EA833B}'
Entry path '\{4C7C9802-FE50-4149-8C74-E4543C22BE54}'
Entry path '\{1AA93A73-D1F8-4462-821C-EAC330E87478}'
Entry path '\{FE7CE905-5B61-4D56-BBEF-AE727E346491}'
Entry path '\{FD930DC4-9B48-4F96-8697-90B81271603E}'
Entry path '\{F4789F39-CA20-44B8-B42F-61D2FCDA5865}'
Entry path '\{DAA44757-E18B-40B9-BD2F-B19EA8094447}'

Network connections

Access through an approved Windows firewall exception

[UDP] listens on port 58787

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00327621%	0.028634%
Kernel CPU:	0.00173367%	0.013761%
User CPU:	0.00154254%	0.014873%
Kernel CPU time:	63,960 ms/min	100,923,805ms/min
Memory
Private memory:	402.95 MB	21.59 MB
Private (maximum):	341.3 MB
Private (minimum):	31.45 MB
Non-paged memory:	402.95 MB	21.59 MB
Virtual memory:	888.62 MB	140.96 MB
Virtual memory (peak):	896.61 MB	169.69 MB
Working set:	339.82 MB	18.61 MB
Working set (peak):	344.97 MB	37.95 MB
Resource allocations
Threads:	42	12
Handles:	1591	600
GUI GDI count:	446	103
GUI GDI peak:	464	142
GUI USER count:	121	49
GUI USER peak:	126	71

Process properties

Integrety level:	High
Platform:	64-bit
Command line:	"C:\Program Files\itunes\itunes.exe"
Owner:	User
Parent process:	iTunesHelper.exe (iTunes by Apple Inc.)

Threads