Not every photo tells the truth. A forensic JPEG analyzer that parses binary structure, extracts metadata, detects anomalies, compares files, and exports detailed reports — all running locally on your machine.
Markers, quantization tables (DQT), Huffman tables (DHT), frame/scan headers (SOF/SOS), and trailing data after EOI.
EXIF (IFD0, SubIFD, GPS, thumbnail), IPTC, XMP, and ICC color profiles — all parsed from the binary stream.
OpenStreetMap tile rendering with reverse geocoding via Nominatim for embedded GPS coordinates.
20+ forensic checks across 8 categories — DQT/DHT consistency, date/time anomalies, GPS mismatches, software traces, and more.
DCT-based pHash for thumbnail-vs-main-image consistency verification with Hamming distance.
JPEG quality factor estimation via Median Inverse Mapping against IJG Annex K reference tables.
Compression ratio, bits per pixel, and estimated quality for complete compression analysis.
Side-by-side metadata diff of two JPEG files with match, differ, only-left, and only-right status.
Self-contained HTML reports with watermark, severity badges, and SHA-256 integrity verification. Plain text export also available.
Built-in image preview with zoom and pan. Embedded EXIF thumbnail extraction and display.
No pixel decoding needed — binary-level parsing provides instant results for any JPEG file size.
Full theme support with native dark mode via .NET 10 WPF theming.
Structure & metadata analysis, GPS visualization, image preview, and plain text report export.
Unlock professional forensic features with a single in-app purchase.
| Ctrl + O | Open file |
| Ctrl + E | Export text report |
| Ctrl + W | Close current file |
Analyzes quantization tables to detect recompression artifacts and social media processing signatures. Compares against known DQT profiles from common image editors and platforms.
Compares Huffman coding tables against ITU-T.81 Annex K standard tables. Uses weighted similarity (40% code-length histogram, 60% symbol values) to identify non-standard encoders.
DCT-based pHash comparison between the embedded EXIF thumbnail and the main image to detect thumbnail-main inconsistencies that may indicate tampering.
Cross-format verification of timestamps — XMP vs. EXIF, IPTC vs. EXIF. Detects inconsistencies that suggest metadata manipulation.
Compares GPS coordinates with timezone data and creation timestamps to detect location spoofing or metadata editing.
Identifies editing software signatures in metadata — Photoshop, Lightroom, GIMP, and other common image editors.
Detects structural anomalies in the JPEG binary stream — truncated files, missing markers, and non-standard byte sequences.
Analyzes data after the EOI marker. Detects embedded files (JPEG, PNG, ZIP, PDF, PE executables) that may indicate steganography or file concatenation.
| Platform | Windows |
|---|---|
| Minimum OS | Windows 10 build 19041.0 or higher |
| Framework | .NET 10.0 |
| Architecture | x64 |