iPhone image locati...
 
Notifications
Clear all

iPhone image location

4 Posts
3 Users
0 Reactions
10 K Views
maskrider
(@maskrider)
Eminent Member
Joined: 10 years ago
Posts: 21
Topic starter  

Hello,

Currently im dealing with a iPhone iOS 9.3.2 case where i found four (4) identical image in different location. Can someone explain what is the process that happen in the iphone so that the same image is stored in different location with different size? Location path as below

1) iPhone/var/mobile/Media/PhotoData/Thumbnails/V2/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX.JPG/XXXX.JPG (47000 bytes)

2) iPhone/var/mobile/Media/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX.JPG (50000 bytes)

3) iPhone/var/mobile/Media/PhotoData/Metadata/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX.medium.JPG (56000 bytes)

4) iPhone/var/mobile/Media/PhotoData/Metadata/PhotoData/CPLAssets/group490/XXXX-XXXX-XXXX-XXXX-XXXX_sRGB.JPG (61000bytes)

Questions
1) which is the original image?
2) why there is different size stored?
3) what is CPLAssets folders?


   
Quote
maskrider
(@maskrider)
Eminent Member
Joined: 10 years ago
Posts: 21
Topic starter  

Found this article in internet but does not understand fully.

https://www.blackbagtech.com/blog/2015/05/06/changes-examiners-face-with-ios-8-3/


   
ReplyQuote
(@baywolf88)
New Member
Joined: 9 years ago
Posts: 3
 

The CPLAssets directory indicates that these photos originated from iCloud. (may have been backed up to this device)

The variation you are seeing is likely from the different file size options to save the photo. (thumbnail,small, medium, actual size)

As it says in the excellent BlackBag blog, photos originating from the device's camera will reside in DCIM directory.

On a new device we see the images auto indexed with filename IMG_0001.JPG increasing by 1 with each photo taken.

In Magnet Axiom I see variations in the 'Original Date/Time' category and Created Date/Time when examining photos that have been transferred to the device. Helps differentiate if a photo may have come from a different mobile device.

-J


   
ReplyQuote
(@bntrotter)
Trusted Member
Joined: 12 years ago
Posts: 63
 

Agreed


   
ReplyQuote
Share: