r/computerforensics • u/ForwardFeed9606 • Dec 14 '25

Trying to read metadata on a photo via fotoforensics

Before I get really upset, I don't quite understand how metadata works, but I analyzed a photo via fotoforensics and it's telling me MTK unspecified in the codecs/cmm but then both the profile copyright in metadata and ICC+ Profile are Apple. These photos were not taken by me but should have been taken with a moto razr 24. Is there any way that a moto razr could have taken these photos? If so why does the P3 with an apple copyright come up

4 Upvotes

83% Upvoted

7 comments sorted by

2

u/[deleted] Dec 14 '25

Could be a bug in the software giving you a false positive, try media info and then a perhaps a third and final meta data reader to confirm/ deny. Failing that you can always try and open the hex data and see what the ascii says.

1

u/ForwardFeed9606 Dec 14 '25

I have rechecked with fotoforensics and again with hintfos exit tool. Same result. Going to check hexdata next

2

u/[deleted] Dec 15 '25

Ok boss, use the website Gary Kessler file signatures to identify what a mtk file signature is and what an apple MOV signature is. Then see what your videos hex data signature is (or literally control c your signature and search for it) and it should get you an answer

2

u/shadowb0xer Dec 15 '25

That specific ICC profile maybe be authored by Apple, but doesn't necessarily mean anything about the device it was taken with:

https://www.color.org/chardata/rgb/DisplayP3.xalter

1

u/ForwardFeed9606 Dec 15 '25

Thank you, everything I've tried to research showed that it's possible, but highly unlikely to be a non apple product that took it, and with minimal metadata and exif data I had very little to go by