home

iTunes.exe

iTunes

Apple Inc.

It runs as a scheduled task under the Windows Task Scheduler. This is installed with iTunes.
Publisher:
Apple Inc.  (signed and verified)

Product:
iTunes

Version:
11.1.5.5

MD5:
b1d252e989dc2701b264f493850d9999

SHA-1:
6e539924d012ccc6eee892fb795ee1ab5e26f591

SHA-256:
2b00899e83e71ca8b7a5038aedf157005755c642034a2d86f5de04476c3bfc6c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 4:56:53 AM UTC  (today)

File size:
9.3 MB (9,789,256 bytes)

Product version:
11.1.5.5

Copyright:
© 2003-2014 Apple Inc. All rights reserved.

Original file name:
iTunes.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\itunes\itunes.exe

Digital Signature
Signed by:
Apple Inc.

Authority:
VeriSign, Inc.

Valid from:
5/24/2013 1:00:00 AM

Valid to:
7/24/2015 12:59:59 AM

Subject:
CN=Apple Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Apple Inc., L=Cupertino, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
47DE2F9FBF7A1D4191F45773FA113E1D

File PE Metadata
Compilation timestamp:
2/21/2014 11:50:02 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:pWcfeyJKLcfeyJKgynV2bJ3g40Ff570P06ubGri/5oa:wQeyJKLQeyJKFhH

Entry address:
0x19CD

Entry point:
E8, 8D, 21, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, 9C, 40, 00, 89, 0D, 74, 9C, 40, 00, 89, 15, 70, 9C, 40, 00, 89, 1D, 6C, 9C, 40, 00, 89, 35, 68, 9C, 40, 00, 89, 3D, 64, 9C, 40, 00, 66, 8C, 15, 90, 9C, 40, 00, 66, 8C, 0D, 84, 9C, 40, 00, 66, 8C, 1D, 60, 9C, 40, 00, 66, 8C, 05, 5C, 9C, 40, 00, 66, 8C, 25, 58, 9C, 40, 00, 66, 8C, 2D, 54, 9C, 40, 00, 9C, 8F, 05, 88, 9C, 40, 00, 8B, 45, 00, A3, 7C, 9C, 40, 00, 8B, 45, 04, A3, 80, 9C, 40, 00, 8D, 45, 08, A3, 8C, 9C, 40...
 
[+]

Entropy:
4.5680

Code size:
20 KB (20,480 bytes)

4 Autoplay Handlers
Display name:
iTunesBurnCDOnArrival

CLSID name:
Notes Link

Display name:
iTunesImportSongsOnArrival

CLSID name:
Notes Link

Display name:
iTunesPlaySongsOnArrival

CLSID name:
Notes Link

Display name:
iTunesShowSongsOnArrival

CLSID name:
Notes Link


Scheduled Task
Task name:
{0969B644-6382-4B62-AF51-1EFEA1D6B5BD}

Trigger:
Registration (Runs on registration)


User Start Menu Item
Name:
itunes.exe


10 Windows Firewall Allowed Programs
Name:
C:\Program Files\iTunes\iTunes.exe

Name:
C:\Programme\iTunes\iTunes.exe

Name:
D:\Program Files\iTunes\iTunes.exe

Name:
C:\Archivos de programa\iTunes\iTunes.exe

Name:
J:\Programme\iTunes\iTunes.exe

Name:
C:\Arquivos de programas\iTunes\iTunes.exe


The file iTunes.exe has been discovered within the following programs.

iPhone Configuration Utility  by Apple Inc.
Publisher's description - “iPhone Configuration Utility lets you easily create, maintain, encrypt, and install configuration profiles, track and install provisioning profiles and authorized applications, and capture device information including console logs.”
www.apple.com
12% remove it
iTunes  by Apple Inc.
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad.
www.apple.com/itunes
9% remove it
QuickTime 7  by Apple Inc.
Publisher's description - “QuickTime Player 7 supports older media formats, such as QTVR, interactive QuickTime movies, and MIDI files on Snow Leopard and OS X Lion. It also accepts QuickTime 7 Pro registration codes, which turn on QuickTime Pro functions.”
10% remove it
VoiceOver Kit  by Apple Inc.
Publisher's description - “Enabling VoiceOver for iPod allows you to hear the names of songs, artists, and playlists spoken when listening to content on your iPod.”
10% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.