iPhone image locati...
 
Notifications
Clear all

iPhone image location

4 Posts
3 Users
0 Likes
8,530 Views
maskrider
(@maskrider)
Posts: 21
Eminent Member
Topic starter
 

Hello,

Currently im dealing with a iPhone iOS 9.3.2 case where i found four (4) identical image in different location. Can someone explain what is the process that happen in the iphone so that the same image is stored in different location with different size? Location path as below

1) iPhone/var/mobile/Media/PhotoData/Thumbnails/V2/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX.JPG/XXXX.JPG (47000 bytes)

2) iPhone/var/mobile/Media/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX.JPG (50000 bytes)

3) iPhone/var/mobile/Media/PhotoData/Metadata/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX.medium.JPG (56000 bytes)

4) iPhone/var/mobile/Media/PhotoData/Metadata/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX_sRGB.JPG (61000bytes)

Questions
1) which is the original image?
2) why there is different size stored?
3) what is CPLAssets folders?

 
Posted : 16/12/2016 2:26 pm
maskrider
(@maskrider)
Posts: 21
Eminent Member
Topic starter
 

Found this article in internet but does not understand fully.

https://www.blackbagtech.com/blog/2015/05/06/changes-examiners-face-with-ios-8-3/

 
Posted : 16/12/2016 7:21 pm
(@baywolf88)
Posts: 3
New Member
 

The CPLAssets directory indicates that these photos originated from iCloud. (may have been backed up to this device)

The variation you are seeing is likely from the different file size options to save the photo. (thumbnail,small, medium, actual size)

As it says in the excellent BlackBag blog, photos originating from the device's camera will reside in DCIM directory.

On a new device we see the images auto indexed with filename IMG_0001.JPG increasing by 1 with each photo taken.

In Magnet Axiom I see variations in the 'Original Date/Time' category and Created Date/Time when examining photos that have been transferred to the device. Helps differentiate if a photo may have come from a different mobile device.

-J

 
Posted : 27/03/2017 9:15 pm
(@bntrotter)
Posts: 63
Trusted Member
 

Agreed

 
Posted : 30/03/2017 2:22 am
Share: