About
JPEGsnoop is a free, open-source Windows desktop application developed by Calvin Hass under the ImpulseAdventure brand. It is a JPEG image analysis and forensics tool that decodes the internal structure of JPEG files, displaying all markers, headers, quantization tables, and compressed data segments in detail. It is widely used to determine whether an image has been edited, re-compressed, or tampered with. The tool analyzes JPEG quantization table signatures and cross-references them against a community-sourced database to identify the originating device or software (e.g., specific camera models, Photoshop versions). It also reads and displays embedded EXIF metadata such as camera model, GPS coordinates, timestamps, and lens information. A batch scanning mode allows users to process entire folders of images at once. JPEGsnoop is primarily targeted at digital forensics investigators, legal professionals verifying image authenticity, photographers interested in JPEG internals, and researchers studying image compression. The source code is available on GitHub, and the tool is distributed as a free Windows executable with no paid tiers or subscriptions.
Key Features
- JPEG Internal Structure Decoding: Parses and displays all JPEG markers and segments (SOI, DQT, DHT, SOS, etc.), giving a complete low-level view of the file's internal composition.
- Image Authenticity Detection: Identifies signs of double-compression or re-saving, helping forensics investigators determine whether an image has been altered or manipulated.
- Quantization Table Fingerprinting: Matches a JPEG's quantization tables against a community-sourced database of camera and software signatures to identify the originating device or application.
- EXIF Metadata Viewer: Reads and displays all embedded EXIF data including camera model, GPS location, capture timestamps, and lens details.
- Batch Directory Scanning: Supports scanning entire folders of JPEG images in one pass, making it practical for bulk forensic analysis workflows.
Pros
- Completely Free & Open Source: JPEGsnoop is free to download with no feature restrictions, and the source code is publicly available on GitHub for review or modification.
- Deep Technical Inspection: Provides one of the most thorough JPEG decoding outputs available, making it invaluable for developers, researchers, and forensics professionals.
- Community Signature Database: A crowd-sourced database of quantization table signatures enables accurate identification of the source camera or editing software for a wide range of devices.
- No Installation Required: Distributed as a standalone Windows executable that can be run without a formal installation process.
Cons
- Windows Only: The pre-built application targets Windows exclusively; macOS and Linux users must compile from source, which adds friction for non-developers.
- Dated User Interface: The UI is utilitarian and text-heavy, which may be off-putting for non-technical users who are not familiar with JPEG internals.
- JPEG Format Only: Analysis is limited to JPEG files; other common image formats such as PNG, HEIC, or WebP are not supported.
