The mystery behind the ghost story at the waterfalls is solved and it can be called a beautiful masterpiece of Adobe Photoshop. All thanks to BP Bajgain daju of http://haalkhabar.net, he finally came up with the result that the photograph was morphed with the help of Computer forensics. Ever since the day the photograph came into highlight we were in close contact about this matter and we wanted to come up with a conclusion.
According to his article published on his website Haalkhabar, Photoshop IRB was detected. Computer forensics is a branch of forensic science pertaining to legal evidence found in computers and digital storage media.
from Haalkhabar.net
A photo boy with Ban Jhankri Falls Ghost debunked
Gangtok, June 25: Everybody in Gangtok is confused about a ghostly image near the boy, the image was consecutively passed from one mobile to another via Bluetooth for a few days. This is known as the Jhakri Falls Lyam-lyame Ghost named ‘Invisible’ and was taken somewhere not known but rumour floated that the photo was taken at Ban Jhakri Falls of Gangtok.
The boy in the picture is not detected yet but as per the chitchat story behind the photograph the boy in the picture died after visiting Ban Jhakri falls the same night. According to one blog, http://sikhim.blogspot.com operated by Shital Pradhan of Singtam, East Sikkim, the photographs do not belong to the famed tourist spot Ban Jhakri Falls but could be nearby ones.
The image has also caused a stir in the Capital of Sikkim, appearing in local media Thursday, and now thanks to modern technology it has been officially labelled as a hoax by the http://haalkhabar.net expert team. Haalkhabar office termed it as “Ghost Captured”. The details of the computer Forensics performed on JPEGsnoop 1.3.0 by Calvin Hass reveal that the image is processed/edited.
Computer forensics is a branch of forensic science pertaining to legal evidence found in computers and digital storage media. The details of the forensics test are as follows:
Filename: [C:\Documents and Settings\Indra\Desktop\Invisible.jpg]
Filesize: [976575] Bytes
Start Offset: 0×00000000
*** Marker: SOI (xFFD8) ***
OFFSET: 0×00000000
*** Marker: APP0 (xFFE0) ***
OFFSET: 0×00000002
length = 16
identifier = [JFIF]
version = [1.2]
density = 300 x 300 DPI (dots per inch)
thumbnail = 0 x 0
*** Marker: APP1 (xFFE1) ***
OFFSET: 0×00000014
length = 7862
Identifier = [Exif]
Identifier TIFF = x[49 49 2A 00 08 00 00 00 ]
Endian = Intel (little)
TAG Mark x002A = x[002A]
EXIF IFD0 @ Absolute x[00000026]
Dir Length = x[000A]
[Make ] = Nokia
[Model ] = N72
[Orientation ] = 1
[XResolution ] = 3000000/10000
[YResolution ] = 3000000/10000
[ResolutionUnit ] = 2
[Software ] = Adobe Photoshop CS3 Windows
[DateTime ] = 2009:06:06 21:01:26
[YCbCrPositioning ] = 1
[ExifOffset ] = x00CC
Offset to Next IFD = [00000234]
EXIF IFD1 @ Absolute x[00000252]
Dir Length = x[0006]
[Compression ] = 6
[XResolution ] = 72/1
[YResolution ] = 72/1
[ResolutionUnit ] = 2
[JpegIFOffset ] = 658
[JpegIFByteCount ] = 7196
Offset to Next IFD = [00000000]
EXIF SubIFD @ Absolute x[000000EA]
Dir Length = x[0016]
[ExposureTime ] = 59213/1000000
[FNumber ] = 32/10
[ISOSpeedRatings ] = 64
[ExifVersion ] = x30323230
[DateTimeOriginal ] = 2008:10:04 12:45:36
[DateTimeDigitized ] = 2008:10:04 12:45:36
[ComponentConfiguration ] = x00030201
[ShutterSpeedValue ] = 4077/1000
[ApertureValue ] = 336/100
[LightSource ] = 0
[Flash ] = 0
[FocalLength ] = 45/10
[FlashPixVersion ] = x30303130
[ColorSpace ] = 1
[ExifImageWidth ] = 1600
[ExifImageHeight ] = 1200
[CustomRendered ] = 0
[ExposureMode ] = 0
[WhiteBalance ] = 0
[DigitalZoomRatio ] = 100/100
[SceneCaptureType ] = 0
[GainControl ] = 1
*** Marker: APP13 (xFFED) ***
OFFSET: 0×00001ECC
length = 8710
Identifier = [Photoshop 3.0]
8BIM: [0x0404] Name(0)=[] Len=[0x0007]
IPTC [0x1C02:000] Record Version = [0x0000]
8BIM: [0x0425] Name(0)=[] Len=[0x0010]
8BIM: [0x03ED] Name(0)=[] Len=[0x0010]
8BIM: [0x0426] Name(0)=[] Len=[0x000E]
8BIM: [0x040D] Name(0)=[] Len=[0x0004]
8BIM: [0x0419] Name(0)=[] Len=[0x0004]
8BIM: [0x03F3] Name(0)=[] Len=[0x0009]
8BIM: [0x040A] Name(0)=[] Len=[0x0001]
8BIM: [0x2710] Name(0)=[] Len=[0x000A]
8BIM: [0x03F5] Name(0)=[] Len=[0x0048]
8BIM: [0x03F8] Name(0)=[] Len=[0x0070]
8BIM: [0x0408] Name(0)=[] Len=[0x0010]
8BIM: [0x041E] Name(0)=[] Len=[0x0004]
8BIM: [0x041A] Name(0)=[] Len=[0x034B]
8BIM: [0x0428] Name(0)=[] Len=[0x000C]
8BIM: [0x0414] Name(0)=[] Len=[0x0004]
8BIM: [0x040C] Name(0)=[] Len=[0x1C38]
8BIM: [0x0421] Name(0)=[] Len=[0x0055]
8BIM: [0x0406] Name(0)=[] Len=[0x0007]
Photoshop Save As Quality = [12]
Photoshop Save Format = [Optimized]
*** Marker: APP1 (xFFE1) ***
OFFSET: 0×000040D4
length = 4623
Identifier = [http://ns.adobe.com]
Not EXIF. Skipping remainder.
*** Marker: APP2 (xFFE2) ***
OFFSET: 0×000052E5
length = 3160
Identifier = [ICC_PROFILE]
Not Flashpix. Skipping remainder.
*** Marker: APP14 (xFFEE) ***
OFFSET: 0×00005F3F
length = 14
*** Marker: DQT (xFFDB) ***
Define a Quantization Table.
OFFSET: 0×00005F4F
Table length = 132
—-
Precision=8 bits
Destination (Luminance)
DQT, Row #0: 1 1 1 1 1 1 1 2
DQT, Row #1: 1 1 1 1 1 1 1 2
DQT, Row #2: 1 1 1 1 1 1 2 2
DQT, Row #3: 1 1 1 1 1 2 2 3
DQT, Row #4: 1 1 1 1 2 2 3 3
DQT, Row #5: 1 1 1 2 2 3 3 3
DQT, Row #6: 1 1 2 2 3 3 3 3
DQT, Row #7: 2 2 2 3 3 3 3 3
Approx quality factor = 98.11 (scaling=3.79 variance=4.10)
—-
Precision=8 bits
Destination (Chrominance)
DQT, Row #0: 1 1 1 2 3 3 3 3
DQT, Row #1: 1 1 1 2 3 3 3 3
DQT, Row #2: 1 1 2 3 3 3 3 3
DQT, Row #3: 2 2 3 3 3 3 3 3
DQT, Row #4: 3 3 3 3 3 3 3 3
DQT, Row #5: 3 3 3 3 3 3 3 3
DQT, Row #6: 3 3 3 3 3 3 3 3
DQT, Row #7: 3 3 3 3 3 3 3 3
Approx quality factor = 98.36 (scaling=3.29 variance=0.42)
*** Marker: SOF0 (Baseline DCT) (xFFC0) ***
OFFSET: 0×00005FD5
Frame header length = 17
Precision = 8
Number of Lines = 1200
Samples per Line = 1600
Image Size = 1600 x 1200
Raw Image Orientation = Landscape
Number of Img components = 3
Component[1]:, Samp Fac=0×11 (Subsamp 1 x 1), Quant Tbl Sel=0×00 (Lum: Y)
Component[2]:, Samp Fac=0×11 (Subsamp 1 x 1), Quant Tbl Sel=0×01 (Chrom: Cb)
Component[3]:, Samp Fac=0×11 (Subsamp 1 x 1), Quant Tbl Sel=0×01 (Chrom: Cr)
*** Marker: DRI (Restart Interval) (xFFDD) ***
OFFSET: 0×00005FE8
length = 4
interval = 200
*** Marker: DHT (Define Huffman Table) (xFFC4) ***
OFFSET: 0×00005FEE
Huffman table length = 259
—-
Destination ID = 0
Class = 0 (DC / Lossless Table)
Codes of length 01 bits (000 total):
Codes of length 02 bits (002 total): 06 07
Codes of length 03 bits (002 total): 05 08
Codes of length 04 bits (003 total): 03 04 09
Codes of length 05 bits (001 total): 00
Codes of length 06 bits (001 total): 01
Codes of length 07 bits (001 total): 0A
Codes of length 08 bits (001 total): 02
Codes of length 09 bits (001 total): 0B
Codes of length 10 bits (000 total):
Codes of length 11 bits (000 total):
Codes of length 12 bits (000 total):
Codes of length 13 bits (000 total):
Codes of length 14 bits (000 total):
Codes of length 15 bits (000 total):
Codes of length 16 bits (000 total):
Total number of codes: 012
—-
Destination ID = 1
Class = 0 (DC / Lossless Table)
Codes of length 01 bits (000 total):
Codes of length 02 bits (002 total): 04 05
Codes of length 03 bits (002 total): 03 06
Codes of length 04 bits (003 total): 00 01 07
Codes of length 05 bits (001 total): 02
Codes of length 06 bits (001 total): 08
Codes of length 07 bits (001 total): 09
Codes of length 08 bits (000 total):
Codes of length 09 bits (000 total):
Codes of length 10 bits (000 total):
Codes of length 11 bits (000 total):
Codes of length 12 bits (000 total):
Codes of length 13 bits (000 total):
Codes of length 14 bits (000 total):
Codes of length 15 bits (000 total):
Codes of length 16 bits (000 total):
Total number of codes: 010
—-
Destination ID = 0
Class = 1 (AC Table)
Codes of length 01 bits (000 total):
Codes of length 02 bits (001 total): 03
Codes of length 03 bits (002 total): 04 05
Codes of length 04 bits (004 total): 00 01 02 06
Codes of length 05 bits (002 total): 11 13
Codes of length 06 bits (006 total): 21 31 41 23 14 07
Codes of length 07 bits (007 total): 51 61 71 12 33 24 15
Codes of length 08 bits (004 total): 81 91 34 08
Codes of length 09 bits (006 total): F0 A1 B1 C1 43 44
Codes of length 10 bits (007 total): D1 E1 22 53 54 25 16
Codes of length 11 bits (003 total): F1 63 64
Codes of length 12 bits (009 total): 32 73 74 84 35 45 55 17 09
Codes of length 13 bits (005 total): 42 94 A4 65 75
Codes of length 14 bits (002 total): 52 83
Codes of length 15 bits (000 total):
Codes of length 16 bits (031 total): B4 C4 26 62 93 D4 85 95 18 72 E4 82 92 A2 F4 A5
B5 B2 A3 B3 F3 C5 36 46 27 0A C3 E3 D5 56 66
Total number of codes: 089
—-
Destination ID = 1
Class = 1 (AC Table)
Codes of length 01 bits (000 total):
Codes of length 02 bits (000 total):
Codes of length 03 bits (005 total): 00 01 02 03 04
Codes of length 04 bits (001 total): 05
Codes of length 05 bits (005 total): F0 11 21 31 13
Codes of length 06 bits (004 total): 41 12 14 06
Codes of length 07 bits (004 total): 51 61 C1 22
Codes of length 08 bits (013 total): 71 81 91 A1 B1 D1 E1 F1 32 42 23 24 15
Codes of length 09 bits (001 total): 33
Codes of length 10 bits (005 total): 52 34 64 25 07
Codes of length 11 bits (004 total): 43 A4 35 16
Codes of length 12 bits (007 total): 44 54 74 84 94 B4 C4
Codes of length 13 bits (005 total): A2 B2 C2 53 D4
Codes of length 14 bits (005 total): 62 63 C3 E4 45
Codes of length 15 bits (000 total):
Codes of length 16 bits (019 total): 72 82 92 D2 E2 F4 17 83 A3 55 73 B3 26 08 F2 65
E3 A5 B5
Total number of codes: 078
*** Marker: SOS (Start of Scan) (xFFDA) ***
OFFSET: 0×000060F3
Scan header length = 12
Number of img components = 3
Component[1]: selector=0×01, table=0×00
Component[2]: selector=0×02, table=0×11
Component[3]: selector=0×03, table=0×11
Spectral selection = 0 .. 63
Successive approximation = 0×00
*** Decoding SCAN Data ***
OFFSET: 0×00006101
Scan Decode Mode: No IDCT (DC only)
NOTE: Low-resolution DC component shown. Can decode full-res with [Options->Scan Segment->Full IDCT]
Scan Data encountered marker 0xFFD9 @ 0×000EE6BD.0
Compression stats:
Compression Ratio: 1249.46:1
Bits per pixel: 0.02:1
Huffman code histogram stats:
Huffman Table: (Dest ID: 0, Class: DC)
# codes of length 01 bits: 0 ( 0%)
# codes of length 02 bits: 13826 ( 46%)
# codes of length 03 bits: 9422 ( 31%)
# codes of length 04 bits: 5432 ( 18%)
# codes of length 05 bits: 781 ( 3%)
# codes of length 06 bits: 248 ( 1%)
# codes of length 07 bits: 183 ( 1%)
# codes of length 08 bits: 101 ( 0%)
# codes of length 09 bits: 7 ( 0%)
# codes of length 10 bits: 0 ( 0%)
# codes of length 11 bits: 0 ( 0%)
# codes of length 12 bits: 0 ( 0%)
# codes of length 13 bits: 0 ( 0%)
# codes of length 14 bits: 0 ( 0%)
# codes of length 15 bits: 0 ( 0%)
# codes of length 16 bits: 0 ( 0%)
Huffman Table: (Dest ID: 1, Class: DC)
# codes of length 01 bits: 0 ( 0%)
# codes of length 02 bits: 30871 ( 51%)
# codes of length 03 bits: 15676 ( 26%)
# codes of length 04 bits: 10678 ( 18%)
# codes of length 05 bits: 2396 ( 4%)
# codes of length 06 bits: 330 ( 1%)
# codes of length 07 bits: 49 ( 0%)
# codes of length 08 bits: 0 ( 0%)
# codes of length 09 bits: 0 ( 0%)
# codes of length 10 bits: 0 ( 0%)
# codes of length 11 bits: 0 ( 0%)
# codes of length 12 bits: 0 ( 0%)
# codes of length 13 bits: 0 ( 0%)
# codes of length 14 bits: 0 ( 0%)
# codes of length 15 bits: 0 ( 0%)
# codes of length 16 bits: 0 ( 0%)
Huffman Table: (Dest ID: 0, Class: AC)
# codes of length 01 bits: 0 ( 0%)
# codes of length 02 bits: 103509 ( 19%)
# codes of length 03 bits: 144164 ( 27%)
# codes of length 04 bits: 135646 ( 25%)
# codes of length 05 bits: 42463 ( 8%)
# codes of length 06 bits: 58812 ( 11%)
# codes of length 07 bits: 26932 ( 5%)
# codes of length 08 bits: 8997 ( 2%)
# codes of length 09 bits: 7894 ( 1%)
# codes of length 10 bits: 4692 ( 1%)
# codes of length 11 bits: 1005 ( 0%)
# codes of length 12 bits: 1372 ( 0%)
# codes of length 13 bits: 360 ( 0%)
# codes of length 14 bits: 79 ( 0%)
# codes of length 15 bits: 0 ( 0%)
# codes of length 16 bits: 305 ( 0%)
Huffman Table: (Dest ID: 1, Class: AC)
# codes of length 01 bits: 0 ( 0%)
# codes of length 02 bits: 0 ( 0%)
# codes of length 03 bits: 323561 ( 64%)
# codes of length 04 bits: 35940 ( 7%)
# codes of length 05 bits: 72091 ( 14%)
# codes of length 06 bits: 28828 ( 6%)
# codes of length 07 bits: 14708 ( 3%)
# codes of length 08 bits: 23173 ( 5%)
# codes of length 09 bits: 822 ( 0%)
# codes of length 10 bits: 2183 ( 0%)
# codes of length 11 bits: 1010 ( 0%)
# codes of length 12 bits: 798 ( 0%)
# codes of length 13 bits: 250 ( 0%)
# codes of length 14 bits: 132 ( 0%)
# codes of length 15 bits: 0 ( 0%)
# codes of length 16 bits: 144 ( 0%)
YCC clipping in DC:
Y component: [<0= 0] [>255= 0]
Cb component: [<0= 0] [>255= 0]
Cr component: [<0= 0] [>255= 0]
RGB clipping in DC:
R component: [<0= 0] [>255= 0]
G component: [<0= 0] [>255= 0]
B component: [<0= 0] [>255= 0]
Brightest Pixel Search:
YCC=[ 1016, 0, 0] RGB=[255,255,255] @ MCU[123, 88]
Finished Decoding SCAN Data
Number of RESTART markers decoded: 149
Next position in scan buffer: Offset 0×000EE6BC.6
*** Marker: EOI (End of Image) (xFFD9) ***
OFFSET: 0×000EE6BD
*** Embedded JPEG Thumbnail ***
Offset: 0×000002B0
Length: 0×00001C1C (7196)
* Embedded Thumb Marker: SOI
* Embedded Thumb Marker: APP0
Length = 16
* Embedded Thumb Marker: APP13
Length = 12
* Embedded Thumb Marker: APP14
Length = 14
* Embedded Thumb Marker: DQT
Length = 132
—-
Precision=0 bits
Destination (Luminance)
DQT, Row #0: 12 8 8 12 17 21 24 17
DQT, Row #1: 8 9 9 11 15 19 12 12
DQT, Row #2: 8 9 10 12 19 12 12 12
DQT, Row #3: 12 11 12 21 12 12 12 12
DQT, Row #4: 17 15 19 12 12 12 12 12
DQT, Row #5: 21 19 12 12 12 12 12 12
DQT, Row #6: 24 12 12 12 12 12 12 12
DQT, Row #7: 17 12 12 12 12 12 12 12
—-
Precision=0 bits
Destination (Chrominance)
DQT, Row #0: 13 11 13 16 20 20 17 17
DQT, Row #1: 11 14 14 14 14 12 12 12
DQT, Row #2: 13 14 14 14 12 12 12 12
DQT, Row #3: 16 14 14 12 12 12 12 12
DQT, Row #4: 20 14 12 12 12 12 12 12
DQT, Row #5: 20 12 12 12 12 12 12 12
DQT, Row #6: 17 12 12 12 12 12 12 12
DQT, Row #7: 17 12 12 12 12 12 12 12
* Embedded Thumb Marker: SOF
Frame header length = 17
Precision = 8
Number of Lines = 120
Samples per Line = 160
Image Size = 160 x 120
* Embedded Thumb Marker: DRI
Length = 4
* Embedded Thumb Marker: DHT
Length = 319
* Embedded Thumb Marker: SOS
Skipping scan data
Skipped 6655 bytes
* Embedded Thumb Marker: EOI
* Embedded Thumb Signature: 01C2DDA29A1B5DCCD5E217CF9C558A62
*** Searching Compression Signatures ***
Signature: 01DADDC4908E9BA57CC067EEAD54E67D
Signature (Rotated): 01DADDC4908E9BA57CC067EEAD54E67D
File Offset: 0 bytes
Chroma subsampling: 1×1
EXIF Make/Model: OK [Nokia] [N72]
EXIF Makernotes: NONE
EXIF Software: OK [Adobe Photoshop CS3 Windows]
Searching Compression Signatures: (3327 built-in, 0 user(*) )
EXIF.Make / Software EXIF.Model Quality Subsamp Match?
————————- ———————————– —————- ————–
SW :[Adobe Photoshop ] [Save As 12 ]
NOTE: Photoshop IRB detected
NOTE: EXIF Software field recognized as from editor
Based on the analysis of compression characteristics and EXIF metadata:
ASSESSMENT: Class 1 – Image is processed / edited.
My personal intervention into this matter is almost nil since there are some corners where technology fails to deliver a exactness.
ReplyDeleteThe digital imaging process or breaking the digital datas through sampling process in the report is not a enogh to explain the behaviour of image and insight credibility.
The only way to find out the fact is visit either to the place and examine by conducting 5-6 trails of photo shoots from different prespective angles.
My probablity counts 50/100 by cross examining the depthness of colour difference, pls don't ask me about the software used in the examination.
- Held Finger Crossed.
Lets forget the issue and come to ground
- Sikkim