Dorado Screenshot Information

While not specifically related to crytography, this clue spawned my interest.

Table of Contents

  1. Reproducing
  2. Byte-For-Byte Comparison
  3. Thanks


With the Tracer Tail, you can visit the video and find it yourself. But this clue is more difficult. Below are two images Blizzard had published on their "Media - Overwatch" webpage. The "corrupted" image first appeared at Tue, 09 Aug 2016 01:55:01 GMT


Last-Modified: Wed, 04 May 2016 19:22:06 GMT


Last-Modified: Tue, 09 Aug 2016 01:55:01 GMT

Please note you cannot upload these images to any hosts that do image compression. It will ruin the byte-for-byte comparison we're going to do.

So immediately you'll notice the new image looks strange, the colors are off and there's bars across the image. You'll also note that it doesn't START like that, only around 1/20th of the image does it start to break. This is an artifact of either a corrupt image, or in our case a clear clue from Blizzard :)

Byte-For-Byte Comparison

So on Linux, there's a command line tool called cmp, which allows you to easily do a byte for byte comparison of files. We're going to use the following command to determine the files differences:

$ cmp -l -b original.jpg new.jpg
 32777  41 !    120 P
 32869  41 !    157 o
 33225  41 !    162 r
 33305  41 !     40
 33581  41 !    161 q
 34007  41 !    165 u
 34362  41 !    145 e
 34380  41 !     40
... (continued in your terminal)

The far left line is the identifier mark, basically a line number, the next two columns are the octal value and binary string value of the original file, the second two columns a re the octal value and binary string value of the new file.

Here's the entire difference.

Final output

Por que estan mirando al cielo? La respuesta no esta sobre sus cabezas, esta detras de ustedes. A veces, necesitan analizar sus logros previos.


This information comes from the GameDetectives Discord and specifically this YouTube Video, revisions made with input from reddit users shuopao and BTYM