SOURCE IDENTIFYING FORENSICS SYSTEM, DEVICE, AND METHOD FOR MULTIMEDIA FILES

A system and method to perform a forensic analysis of a file including: one or more processors; and a memory storing computer-readable instructions that, when executed by the one or more processors, cause the system device to: receive one or more files for analysis; identify a file format for the file; determine whether the file format is a supported multimedia file; parse the file to separate structural elements from the file; generate a profile structural signature for the one or more files; a database including a plurality of profile structural signatures corresponding to known hardware and/or software; determining whether the one or more files matches one of the plurality of profile structural signatures; and providing an indication of an identity of the known hardware and/or software for the one or more files upon a determination that the one or more files matches one of the plurality of profile structural signatures.