The file media.db may only be found on Samsung devices running Android 11. The file is located at /data/data/com.samsung.android.providers.media/databases/media.db.
Tables of Interest:
files
location
location_datetime_idx
tag_view – contains location data pertaining to the EXIF
The column “File Path” will have artifacts also being stored in Samsung Secure Folder. You may find additional tables of interest, so it’s worth examining all of them that contain information.
SQLite Query:
select
files._id,
files.media_id
as "Media ID",
scene.parent_name
as "Scene Parent Name",
scene.scene_name
as "Scene Name",
files._data
as "File Path",
files._size
as "File Size (bytes)",
--File
size is recorded in bytes and converts to Mebibytes to most accurately reflect
the file size displayed on the device.
datetime(files.datetaken,'unixepoch','localtime')
as "Date Taken",
datetime(files.date_added,'unixepoch','localtime')
as "Date Added",
datetime(files.date_modified,'unixepoch','localtime')
as "Date Modified",
files.mime_type
as "MIME Type",
files._display_name
as "Display Name",
files.bucket_display_name
as "Bucket Display Name",
files.duration/1000.0
as "Duration (secs)",
CASE
when
files.is_trashed = 0 then "No"
when
files.is_trashed = 1 then "Yes"
end as
"Is Trashed",
files.volume_name
as "Volume Name",
files.latitude
as "Latitude",
files.longitude
as "Longitude",
location.country_code
as "Country Code",
location.country_name
as "Country Name",
location.admin_area
as "Admin Area",
location.locality
as "Locality",
location.addr
as "Address",
location.street_name
as "Street Name",
location.street_number
as "Street Number",
location.postal_code
as "Postal Code",
files.video_codec_info
as "Video Codec",
files.audio_codec_info
as "Audio Codec",
CASE
when
files.is_cloud = 1 then "Yes"
when
files.is_cloud = 0 then "No"
end as
"Is Cloud",
scene.scene_score
as "Scene Score"
from files
left join
scene on scene.sec_media_id=files._id
left join
location on location.latitude=files.latitude