Images formed by WeChat are widely used as a type of evidence in courts. The research on their image characteristics is of great significance to forensic science application. In this paper, we study the characteristics of the WeChat formed images and videos. Their file attributes, metadata, and digital data change features are systematically studied under the different operating system environments, different program versions, different formation methods, different transmission methods, etc. The forensic examination on the WeChat formed images is further discussed, involving image formation time identification, image source identification, image authenticity identification, and so on. Our results show that the images and videos formed by the WeChat program have their own unique image characteristics, which can be effectively applied for forensic examination of the WeChat formed images.
|