home

iTunes.exe

iTunes

Apple Inc.

It runs as a scheduled task under the Windows Task Scheduler. This is installed with iTunes.
Publisher:
Apple Inc.  (signed and verified)

Product:
iTunes

Version:
11.1.3.8

MD5:
598545adf55264b2967c1c8763f00a23

SHA-1:
6b97ce260bba263e4ec4e1c642d0c8d6ea96acda

SHA-256:
eca8bb41e4abc815a0c43511f78f38e87a224626485b2676a35d7aea0540acc2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:39:49 AM UTC  (today)

File size:
9.3 MB (9,789,256 bytes)

Product version:
11.1.3.8

Copyright:
© 2003-2013 Apple Inc. All rights reserved.

Original file name:
iTunes.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\itunes\itunes.exe

Digital Signature
Signed by:
Apple Inc.

Authority:
VeriSign, Inc.

Valid from:
5/23/2013 8:00:00 PM

Valid to:
7/23/2015 7:59:59 PM

Subject:
CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
47DE2F9FBF7A1D4191F45773FA113E1D

File PE Metadata
Compilation timestamp:
11/2/2013 3:23:41 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:6EcfeyJKLcfeyJKgynV2bJ3g40Ff570P06ubGri/5ou:NQeyJKLQeyJKFhf

Entry address:
0x19CD

Entry point:
E8, 8D, 21, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, 9C, 40, 00, 89, 0D, 74, 9C, 40, 00, 89, 15, 70, 9C, 40, 00, 89, 1D, 6C, 9C, 40, 00, 89, 35, 68, 9C, 40, 00, 89, 3D, 64, 9C, 40, 00, 66, 8C, 15, 90, 9C, 40, 00, 66, 8C, 0D, 84, 9C, 40, 00, 66, 8C, 1D, 60, 9C, 40, 00, 66, 8C, 05, 5C, 9C, 40, 00, 66, 8C, 25, 58, 9C, 40, 00, 66, 8C, 2D, 54, 9C, 40, 00, 9C, 8F, 05, 88, 9C, 40, 00, 8B, 45, 00, A3, 7C, 9C, 40, 00, 8B, 45, 04, A3, 80, 9C, 40, 00, 8D, 45, 08, A3, 8C, 9C, 40...
 
[+]

Entropy:
4.5680

Code size:
20 KB (20,480 bytes)

4 Autoplay Handlers
Display name:
iTunesBurnCDOnArrival

CLSID name:
{EBEB87A4-E151-4054-AB45-A6E094C5334B}

Display name:
iTunesImportSongsOnArrival

CLSID name:
{EBEB87A4-E151-4054-AB45-A6E094C5334B}

Display name:
iTunesPlaySongsOnArrival

CLSID name:
{EBEB87A4-E151-4054-AB45-A6E094C5334B}

Display name:
iTunesShowSongsOnArrival

CLSID name:
{EBEB87A4-E151-4054-AB45-A6E094C5334B}


Scheduled Task
Task name:
{4F880950-1D04-4745-8D21-F9D789A46FCC}

Trigger:
Registration (Runs on registration)


9 Windows Firewall Allowed Programs
Name:
C:\Program Files\iTunes\iTunes.exe

Name:
C:\Archivos de programa\iTunes\iTunes.exe

Name:
C:\Programmi\iTunes\iTunes.exe

Name:
C:\Programme\iTunes\iTunes.exe

Name:
D:\IPHONE\iTunes.exe

Name:
F:\Program Files\iTunes\iTunes.exe


The file iTunes.exe has been discovered within the following programs.

iTunes  by Apple Inc.
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad.
www.apple.com/itunes
9% remove it
Safari  by Apple Inc.
Safari is a web browser developed by Apple Inc. It is based on the WebKit engine, which is a fork of KDE's KHTML engine. Safari has a number of features. Some are specific to certain operating systems or platforms.
www.apple.com/safari
11% remove it
VoiceOver Kit  by Apple Inc.
Publisher's description - “Enabling VoiceOver for iPod allows you to hear the names of songs, artists, and playlists spoken when listening to content on your iPod.”
www.apple.com
10% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.