I have extracted a Samsung Galaxy S5 using Cellebrite and found a picture of interest in the Images section. However I cannot determine whether this picture was taken by the phone's camera or if it was received another way. How do I identify the source of this picture? The following information is attached to the picture. Thank you for the help.
Name imgcache.0_22_1478704049
Type Images
Size (bytes) 43561
Path userdata (ExtX)/Root/media/0/Android/data/com.sec.android.gallery3d/cache/imgcache.0/imgcache.0_22_1478704049
Created 11/9/2016 100729 AM (UTC-5)
Extraction Physical
MD5 392f07c6f784fb5f7cf505efd1100dc4
Source file imgcache.0 0xBFF91
Hi, Camera Ballistics by MOBILedit Compelson will determine if a photo was taken by a device, or, if the photo was simply received and saved to the phone. You will need the camera/device to make the determination because Camera Ballistics creates a fingerprint of the sensor with test photos, then matches the photos in question to the sensor fingerprint.
-Tom
Is there any meta data to that image?
In specific capture time?
If the capture time is similar to the file created time, this can be a good indication it was taken by that phone.
Ron
Is there any meta data to that image?
In specific capture time?If the capture time is similar to the file created time, this can be a good indication it was taken by that phone.
Ron
Where could I find this information in the Physical Analyzer? Sorry still learning the ropes.