AppleMobileBackup.exe
- File Path:
C:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileBackup.exe
- Description: MobileBackup
Hashes
Type | Hash |
---|---|
MD5 | 7387EECC874D1526742670009BC0167C |
SHA1 | DD692E941E95389B342965280A766B6B4AC63671 |
SHA256 | 3F1D470E4A7CEAEDA9DFC7CBA5E29122C930CC47F72CC814AF7F9FAD6FF9A8BB |
SHA384 | EA5AF0F9CC634128CBEFE7CCE1E588EA4FCF3F80FDC34BAB87622D27584B766BA9D2ABC8C3E9FD28A413082477E3A9BB |
SHA512 | 77A7E8EBC64327B301AFEF4983966E73FA3A34CC3E65E3532AE115208F7D7383CE85B6D37CAB07023EF38A16E130B72E0C8B07040234BBEF1F448C2960C36D1B |
SSDEEP | 1536:PGfi0CgBOBCofRgb68puZ6Z1Zlft9MrIZxoCzhdQuB+t7IJgta4UaTmuUW3hWf:PGfKDBgbNY+JMrK+0w7IJgaRaTmuUvf |
Runtime Data
Usage (stdout):
Usage: C:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileBackup.exe
Action (one required):
-b, --backup perform a backup
-r, --restore perform a restore
-E, --erase erase target device
-C, --change password change backup password from the given old password
-e, --extract path extracts a relative path to the current directory
-R, --remove path removes a relative path from the backup
-f, --filename path prints the filename in a backup of a relative path
-i, --info display info about a backup
-I, --create-info create a placeholder Info.plist file
-l, --list list the contents of the backup
Options:
-d, --device deviceid device identifier (defaults to lockdown)
-t, --target deviceid target device identifier
-s, --source deviceid source device identifier
-P, --password password optional password when changing password or extracting files
-N, --no-pass-prompt ignore terminal prompt for password
-D, --domain name domain name for --extract (default "HomeDomain")
-q, --root path root backup directory
-o, --output path output file for action (not logging)
-h, --help print this message and exit
Loaded Modules:
Path |
---|
C:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileBackup.exe |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
4EF16586A2FF12D69C556EC4C91BAEE1
- Thumbprint:
634A0D892E72161714861C178015AFE9C1832E14
- Issuer: CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US
- Subject: CN=Apple Inc., O=Apple Inc., L=Cupertino, S=California, C=US
File Metadata
- Original Filename: AppleMobileBackup.exe
- Product Name:
- Company Name: Apple Inc.
- File Version: 1715.3.0.23
- Product Version:
- Language: English (United States)
- Legal Copyright: 2020 Apple Inc. All rights reserved.
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.