AppleMobileDeviceService.exe
MobileDeviceService file version info
Program on Windows 2 known copies with hashes
Is it the real AppleMobileDeviceService.exe?
Installed in
C:\Program Files\Common Files\Apple\Mobile Device Support\Signed byApple Inc.
DescriptionMobileDeviceService
2 known copies
486.0.2.16 · C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe · signed by Apple Inc.
fa129358138998c7055bac7fd045f5e52b6670ebf92faf82d3c26f73fe86a17b474.120.1.13 · C:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe · signed by Apple Inc.
be54049721d28ab2d1a41f3268245ee51f247c6f8e32e9c285360172be4b4abbFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.