CmdID

CmdID / Files

iTunesHelper.exe

iTunesHelper file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real iTunesHelper.exe?

file version info and known copies
Installed inC:\Program Files\iTunes\
Signed byApple Inc.
ProductiTunes, Apple Inc.
DescriptioniTunesHelper

2 known copies

12.10.9.3 · C:\Program Files\iTunes\iTunesHelper.exe · signed by Apple Inc.

2846b21465dc8ddc9f1f3a259ecee300313d8a43c5778802e6bab33a4768272e

12.10.8.5 · C:\program files\iTunes\iTunesHelper.exe · signed by Apple Inc.

30465855e68627488ca1d461d555c729b06db01c860c7e2dfa73050be2201433

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.