Notifications
Clear all

Picture Source

4 Posts
3 Users
0 Likes
1,601 Views
(@prisonphones)
Posts: 7
Active Member
Topic starter
 

I have extracted a Samsung Galaxy S5 using Cellebrite and found a picture of interest in the Images section. However I cannot determine whether this picture was taken by the phone's camera or if it was received another way. How do I identify the source of this picture? The following information is attached to the picture. Thank you for the help.

Name imgcache.0_22_1478704049
Type Images
Size (bytes) 43561
Path userdata (ExtX)/Root/media/0/Android/data/com.sec.android.gallery3d/cache/imgcache.0/imgcache.0_22_1478704049
Created 11/9/2016 100729 AM (UTC-5)
Extraction Physical
MD5 392f07c6f784fb5f7cf505efd1100dc4
Source file imgcache.0 0xBFF91

 
Posted : 28/12/2016 8:17 pm
(@tom_w)
Posts: 8
Active Member
 

Hi, Camera Ballistics by MOBILedit Compelson will determine if a photo was taken by a device, or, if the photo was simply received and saved to the phone. You will need the camera/device to make the determination because Camera Ballistics creates a fingerprint of the sensor with test photos, then matches the photos in question to the sensor fingerprint.

www.mobiledit.com/camera-ballistics

-Tom

 
Posted : 28/12/2016 8:33 pm
 RonS
(@rons)
Posts: 358
Reputable Member
 

Is there any meta data to that image?
In specific capture time?

If the capture time is similar to the file created time, this can be a good indication it was taken by that phone.

Ron

 
Posted : 29/12/2016 2:36 pm
(@prisonphones)
Posts: 7
Active Member
Topic starter
 

Is there any meta data to that image?
In specific capture time?

If the capture time is similar to the file created time, this can be a good indication it was taken by that phone.

Ron

Where could I find this information in the Physical Analyzer? Sorry still learning the ropes.

 
Posted : 29/12/2016 6:04 pm
Share: