It's unlikely that any of the images you have is the original if you do not have access to the device that they came from. Apple devices typically resize images when sharing. If you need the original, contact the owner of the device that created them.
Deciding which image is "closer" to original is a judgement call that requires you to examine the image contents, but the third file is probably "closer" because:
- It has a higher resolution than the other two files.
- It came from an email, presumably from someone who does have access to the original. Apple devices often resize images when sharing.
Between the first two images, the second is likely "closer" to the original because:
- Software rarely automatically names files according to faces recognized within the image. The second file has the typical prefix-date naming scheme.
- Display P3 vs sRGB. The first file has gone through at least one conversion pass to change colorspace.
- Modified timestamp of first file is ~8 min after the second one.
The filename of the third image looks typical of a hash (string of numbers and letters A-F). This is typical of images that have passed through an online service, like Facebook.