Getting an error: File is not a database

[aidenmitchell]

Procesing started. Please wait. This may take a few minutes...
--------------------------------------------------------------------------------------
iLEAPP v1.16.9: iLEAPP Logs, Events, and Properties Parser
Objective: Triage iOS Full System Extractions.
By: Alexis Brignoni | @AlexisBrignoni | abrignoni.com
By: Yogesh Khatri | @SwiftForensics | swiftforensics.com
Building files listing...
Error opening Manifest.db from C:/Users/aiden.admin/AppData/Roaming/Apple Computer/MobileSync/Backup/00008030-000239A23691802E, file is not a database
Had an exception in Seeker - see details below. Terminating Program!
Traceback (most recent call last): File "ileapp.py", line 104, in crunch_artifacts File "scripts\search_files.py", line 56, in __init__ File "scripts\search_files.py", line 83, in build_files_list File "scripts\search_files.py", line 64, in build_files_list sqlite3.DatabaseError: file is not a database

I attempted to run iLEAPP on an iTunes backup, but it failed almost immediately. Not sure what the issue is, Manifest.db is a database.

[abrignoni]

Is it encrypted? I bet it is.

…

On Mon, Jan 3, 2022 at 2:36 PM Aiden Mitchell ***@***.***> wrote: Procesing started. Please wait. This may take a few minutes... -------------------------------------------------------------------------------------- iLEAPP v1.16.9: iLEAPP Logs, Events, and Properties Parser Objective: Triage iOS Full System Extractions. By: Alexis Brignoni | @AlexisBrignoni | abrignoni.com By: Yogesh Khatri | @SwiftForensics | swiftforensics.com Building files listing... Error opening Manifest.db from C:/Users/aiden.admin/AppData/Roaming/Apple Computer/MobileSync/Backup/00008030-000239A23691802E, file is not a database Had an exception in Seeker - see details below. Terminating Program! Traceback (most recent call last): File "ileapp.py", line 104, in crunch_artifacts File "scripts\search_files.py", line 56, in __init__ File "scripts\search_files.py", line 83, in build_files_list File "scripts\search_files.py", line 64, in build_files_list sqlite3.DatabaseError: file is not a database I attempted to run iLEAPP on an iTunes backup, but it failed almost immediately. Not sure what the issue is, Manifest.db is a database. — Reply to this email directly, view it on GitHub <#263>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AG3DPC5CKOS4NXQ4VIZMARDUUH3DTANCNFSM5LF3RT3Q> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[abrignoni]

Here is a video on how to parse itunes backups with iLEAPP and what to do if you have an encrypted backup.
https://youtu.be/l6z9UrjAR9c

[aidenmitchell]

Great, thank you. The backup is encrypted, I'll try decrypting it with https://github.com/jfarley248/iTunes_Backup_Reader.