Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Child process
Related files
PE file structure |
Show functions |
Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW
kernel32.dll
GetFileAttributesExW, GetProcAddress, GetModuleHandleW, VerifyVersionInfoW, VerSetConditionMask, FreeLibrary, LoadLibraryW, GetModuleFileNameW, GetCommandLineA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, Sleep, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetLastError, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapCreate, HeapFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, LeaveCriticalSection, EnterCriticalSection, LoadLibraryA, InitializeCriticalSectionAndSpinCount, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, HeapAlloc, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, GetLocaleInfoA, LCMapStringA, MultiByteToWideChar, LCMapStringW, GetStringTypeA, GetStringTypeW, VirtualFree, HeapSetInformation, GetStartupInfoW, IsProcessorFeaturePresent, DecodePointer, EncodePointer
shlwapi.dll
PathAppendW, PathRemoveFileSpecW
user32.dll
wsprintfW, MessageBoxW
iTunesHelper.exe
iTunes by Apple Inc. (Signed)
Version: | 11.1.1.11 |
MD5: | 9f96f98409b89c5806f4380867dd48e0 |
SHA1: | b8bcdea73cde5bf9e953f1c41bdc6e6e49846397 |
SHA256: | a6a0fc6b013549bb28fd834fce6ac0db685aa5b42162f5ad090819b7d212caa6 |
What is iTunesHelper.exe?
Apple software includes iTunesHelper or iTunes Helper, is a program from Apple that runs in the background and monitors for the connection of any iPod or iPhone to the computer, if an iPod or iPhone is detected it will automatically launch the iTunes application. The functionality is the same on both Mac OS X and Windows PC’s.
About iTunesHelper.exe (from Apple Inc.)
“iTunes is a free application for your Mac or PC. It lets you organize and play digital music and video on your computer. It can automatically download new music, app, and book purchases across all y”
Details
File name: | iTunesHelper.exe |
Publisher: | Apple Inc. |
Product name: | iTunes |
Description: | iTunesHelper |
Typical file path: | C:\Program Files\itunes\ituneshelper.exe |
File version: | 11.1.1.11 |
Size: | 148.82 KB (152,392 bytes) |
Build date: | 10/1/2013 8:51 AM |
Certificate |
Issued to: | Apple Inc. |
Authority (CA): | VeriSign |
Expiration date: | Tuesday, June 25, 2013 |
Digital DNA |
PE subsystem: | Windows GUI |
File packed: | No |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad. iTunes is an application that allows the user to purchase and manage audio and video on a personal computer, acting as a front end for Apple's QuickTime media player. Officially, using iTunes is required in order to manage the audio of an ...
“Enabling VoiceOver for iPod allows you to hear the names of songs, artists, and playlists spoken when listening to content on your iPod. If you have the Apple Earphones with Remote and Mic or the In-Ear Headphones with Remote and Mic, you can also use VoiceOver to navigate playlists.”
QuickTime is an extensible multimedia framework capable of handling various formats of digital video, picture, sound, panoramic images, and interactivity. QuickTime for Microsoft Windows has always been downloadable as a standalone installation, as well as being bundled with Apple's iTunes. QuickTime Player is limited to only basic playback operations unless a QuickTime Pro license key is purchased.
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include potentially unwanted programs in the form of the Conduit Engine, which installs a toolbar, and makes homepage and default search engine changes to a user's web browser.
“Cobian Backup is a multi-threaded program that can be used to schedule and backup your files and directories from their original location to other directories/drives in the same computer or other computer in your network. FTP backup is also supported in both directions (download and upload).
Cobian Backup exists in two different versions: application and service. The program uses very few resources and can be running on the backgroun...”
“The Microsoft Application Compatibility Toolkit (ACT) 5.6 helps customers understand their application compatibility situation by identifying which applications are compatible with the Windows 7® and Windows Vista® operating system and which require further testing. ACT helps customers lower their costs for application compatibility testing, prioritize their applications, and deploy Windows more quickly. ”
“NaturalReader is a text-to-speech software with natural sounding voices. This easy-to-use software can read to you any text such as Microsoft Word files, webpages, PDF files, and E-mails. NaturalReader can also convert any written text into audio files such as MP3 or WAV. NaturalReader has many other functions, such as audio editor and OCR. With audio editor, you can be your own sound editor by recording, merging and editing audio files...”
Recuva is a data recovery program and is able to recover files that have been "permanently" deleted and marked by the operating system as free space. As with other file recovery programs Recuva works by looking for unreferenced data, but if the operating system has written new data over a deleted file then recovery will often not be possible.
“Remote control any computer or Mac over the internet within seconds or use TeamViewer for online meetings. Open multiple remote sessions in tabs, just like in your browser. For an optimal overview, you can also open all the monitors belonging to a remote computer in separate tabs. You won't miss a thing because opened tabs will always flash when new activity occurs on the remote computer, e.g. a new chat message from a customer.”
WinRAR archiver is a shareware file archiver that is able to create RAR archives natively.
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'iTunesHelper' → "C:\Program Files\iTunes\iTunesHelper.exe"
Network connections
[UDP] listens on port 57026
[UDP] listens on port 51611
[UDP] listens on port 49960
[UDP] listens on port 51334
[UDP] listens on port 51187
[UDP] listens on port 62914
[UDP] listens on port 63334
[UDP] listens on port 55455
[UDP] listens on port 65266
[UDP] listens on port 1041
[UDP] listens on port 52225
[UDP] listens on port 54733
[UDP] listens on port 59403
[UDP] listens on port 62312
[UDP] listens on port 1046
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00236600% | |
Kernel CPU: | 0.00137549% | |
User CPU: | 0.00099051% | |
Kernel CPU time: | 125,331 ms/min | |
CPU cycles: | 77,578/sec | |
Context switches: | 2/sec | |
Memory |
Private memory: | 5.7 MB | |
Private (maximum): | 11.28 MB | |
Private (minimum): | 7.51 MB | |
Non-paged memory: | 5.7 MB | |
Virtual memory: | 108.82 MB | |
Virtual memory (peak): | 114.07 MB | |
Working set: | 8.13 MB | |
Working set (peak): | 12.15 MB | |
Page faults: | 13,158/min | |
I/O |
I/O read transfer: | 185 Bytes/sec | |
I/O read operations: | 1/sec | |
I/O write transfer: | 2 Bytes/sec | |
I/O write operations: | 1/sec | |
I/O other transfer: | 33 Bytes/sec | |
I/O other operations: | 7/sec | |
Resource allocations |
Threads: | 10 | |
Handles: | 256 | |
GUI GDI count: | 10 | |
GUI GDI peak: | 12 | |
GUI USER count: | 10 | |
GUI USER peak: | 10 | |
Process properties
Threads
Averages
iTunesHelper.exe (main module) |
Total CPU: | 0.00324320% | |
Kernel CPU: | 0.00204153% | |
User CPU: | 0.00120167% | |
CPU cycles: | 50,492/sec | |
Memory: | 156 KB | |
itunesmobiledevice.dll (iTunesMobileDevice by Apple) |
Total CPU: | 0.00219262% | |
Kernel CPU: | 0.00108158% | |
User CPU: | 0.00111104% | |
CPU cycles: | 32,164/sec | |
Memory: | 1.61 MB | |
ituneshelper.dll (iTunes by Apple) |
Total CPU: | 0.00195795% | |
Kernel CPU: | 0.00150758% | |
User CPU: | 0.00045037% | |
CPU cycles: | 19,903/sec | |
Memory: | 160 KB | |
MSVCR80.dll |
Total CPU: | 0.00088431% | |
Kernel CPU: | 0.00079632% | |
User CPU: | 0.00008799% | |
CPU cycles: | 470/sec | |
Memory: | 620 KB | |
wow64.dll |
Total CPU: | 0.00025150% | |
Kernel CPU: | 0.00008803% | |
User CPU: | 0.00016348% | |
CPU cycles: | 26,318/sec | |
Context switches: | 1/sec | |
Memory: | 252 KB | |
ntdll.dll |
Total CPU: | 0.00001416% | |
Kernel CPU: | 0.00001416% | |
User CPU: | 0.00000000% | |
CPU cycles: | 148/sec | |
Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
44.50% |
|
Windows 8.1 |
15.50% |
|
Windows 7 Ultimate |
13.50% |
|
Windows 8.1 Pro |
5.50% |
|
Windows 8 |
5.50% |
|
Microsoft Windows XP |
4.00% |
|
Windows 7 Professional |
3.50% |
|
Windows 8 Single Language |
2.00% |
|
Windows Vista Home Premium |
2.00% |
|
Windows 8.1 Single Language |
1.50% |
|
Windows Seven Black Edition |
1.00% |
|
Windows 8.1 N |
0.50% |
|
Windows 8 Enterprise |
0.50% |
|
Windows 8.1 Pro with Media Center |
0.50% |
|
Distribution by country
United States installs about 51.50% of iTunes.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Hewlett-Packard |
20.95% |
|
Toshiba |
18.97% |
|
Dell |
17.39% |
|
ASUS |
11.86% |
|
Acer |
9.09% |
|
Lenovo |
8.70% |
|
Sony |
3.95% |
|
GIGABYTE |
1.98% |
|
Samsung |
1.58% |
|
Compaq |
1.58% |
|
NEC |
1.58% |
|
Sahara |
0.79% |
|
Alienware |
0.79% |
|
American Megatrends |
0.79% |
|