: The device does not preserve the original camera filename (e.g., DCIM_001.jpg ) and instead standardizes it to this "WA" format upon download. WhatsApp media file naming convention - Forensic Focus
is a standard file name generated by WhatsApp Messenger when an image is saved to a device's storage. The structure follows a specific logic that encodes the date and the source of the file. Decoding the Filename
: Represents the date the file was saved or received, formatted as Year-Month-Day (October 9, 2022). WA : Identifies the application source as WhatsApp . Download IMG 20221009 WA0007 jpg
: A sequence number assigned to distinguish between multiple media files received on that same day.
: The application often strips EXIF data , such as the original time the photo was taken, GPS coordinates, and camera settings. : The device does not preserve the original
The alphanumeric string provides several key pieces of information about the image: : Indicates the file contains an image.
: WhatsApp significantly reduces the file size to save bandwidth, which often results in lower resolution or "grainy" quality compared to the original. Decoding the Filename : Represents the date the
: The file extension for JPEG , a common compressed image format. Characteristics of WhatsApp Images