Any #DFIR types seen a spyware app that does screen captures to files named scr_ddmmyyyy_hhmmss.jpg?