Now, the next few things I'm going to show you
took a lot of testing on my part because it's drastically
confusing.
How was the backup created?
So was it created with iTunes?
Was it created with the Microsoft version of iTunes?
Was it created with a commercial tool?
Was it created with a backup tool?
When we look at the data, the path
is going to tell you the truth on where this exists.
So if we go out and we see C Users,
hmaha, Apple, MobileSync, Backup.
We have a backup there.
If we look at C, Users, hmaha, AppData, Roaming, Apple
Computer, MobileSync, Backup--
we have other backups.
The AppData Roaming is native iTunes.
The Microsoft application will store it in Users, username,
Apple, MobileSync, Backup.
But notice that both have that same MobileSync directory,
so you can get this.
Now, where you have to be careful--
the time stamps according to Windows are not to be trusted.
So the reason I'm telling you this
is, when I look at this file here,
that is actually when I created that backup.
I did not recreate that backup on 9/22.
These time stamps are just Windows
going through and doing things.
Do not trust the Windows-reported time stamp.
We are going to look inside those plist files
to see what we can trust.
So Windows time stamps-- no good.