I have a case in which pictures of interest were found in the com.sec.android.gallery3d folder (imgcache.0 and imgcacheMicro.0 files)

Does anyone have whitepapers or advice on how to get more information about these pictures? All I have thus far is what Cellebrite will go on.

There are also picasa subfolders - does anyone have more information about those?

Terry  

Terry,

I just saw your post even though it is several months old. Did you get any satisfactory reply? I haven't seen any white papers and haven't tried Cellebrite, but I have had good success using Magnet Forensics Internet Evidence Finder to parse the imgcache.0 files. You can export the Pictures category of artifacts as a PDF or HTML with all the metadata intact.

Randy  

I didn't receive any responses.

However, my question wasn't about what tools to use. I was asking for deeper knowledge. The layout of the file, what other metadata may be stored in the files, and so on.

Terry  

Terry,

Just curious to know which phone it is? I have an HTC EVO 3D Android that I have done test images on in the past so when I get a chance I will see if it has those particular items.

Regards,

Chris Currier  

This was ages ago, so I don't remember the original phone. However, I have encountered imgcache images in every Android I've done. For instance, my current case is a Motorola XT 926 and it has imgcache files in com.motorola.MotGallery2.  

While waiting for my images to load I found this for you not sure the validity of it, but thought I would pass it along to you.

www.android.net/forum/...-file.html

Regards,

Chris  

Hi,

I just posted some research on this topic here:

cheeky4n6monkey.blogsp...-into.html

Thanks to twjolson for his assistance.

Cheers,

Cheeky