Mobile Screenshots ...
 
Notifications
Clear all

Mobile Screenshots images naming conventions

nnegoita
(@nnegoita)
New Member

Hi,

I am working on a case in which some images have been provided.

The provider has implied the pictures have been produced by screenshots, most of them have in metadata Apple as Device Manufacturer.

Anyone recognise this naming convention?
04C4AA5D-9A5C-4555-9A4C-15C75721C4C9.png 
 
I  have mixture of .jpeg & .png files. Tried a few hex conversions, no joy. All the files have the same format 8-4-4-4-12 hex. Trying to identify the app used to save them. Ta!

The width of the screen make me believe iit might be an iPhone 6/7/8  (see here a post for this iPhone 6 Screen Size and Mobile Design Tips - Updated for iPhone 8 & X! (kylejlarson.com)

 
I am just boggled as to what kind of app would rename the photo as this 8-4-4-4-12 hex, at the same time keeping the metadata?
 
Thank you for your help.
 
 
Quote
Topic starter Posted : 10/09/2021 2:06 pm
twjolson
(@twjolson)
Active Member

Do you know for sure they came from the device directly -  like text or email.  That doesnt seem to be the case here at any rate.  Or did they come from an extraction -  a backup, a forensic tool?

I've seen similar GUID names within Cellebrite, usually from an app's data.

ReplyQuote
Posted : 10/09/2021 7:45 pm
nnegoita
(@nnegoita)
New Member

Thank you for your reply @twjolson.

 

They came to us via email via an intermediary ( a solicitor).

I realised in the end they are GUID names,  I just don't know what kind of app would export them like that. The person claims they have produced them via screenshot - but I have not identified yet any apps that would work as default with screenshots on iOS by renaming them using GUID - also couldn't identify any apps that would share the files by adding GUID naming but keeping the metadata almost intact?

 

 

ReplyQuote
Topic starter Posted : 11/09/2021 10:50 am
Share: