Smartphone
Medium confidence
VOG-L09
Release
2020
Observed span
2020 – 2024
All patterns are aggregated and anonymous — no originals retained. Privacy details →
GPS Metadata RateThe proportion of files where this device embedded GPS coordinates — from an on-board receiver or a paired smartphone.
Percentage of files from this device that contained GPS location data.
MakerNote PresenceA proprietary manufacturer block inside EXIF whose format is largely undocumented. Contains settings not in standard EXIF — focus mode, scene detection, lens data, processing flags.
Rate at which this device embeds a MakerNote block (proprietary manufacturer metadata).
SOF Compression TypeStart of Frame marker — identifies the JPEG compression algorithm. SOF0 = baseline DCT (most common); SOF2 = progressive DCT (multiple passes, common in web-optimised images).
JPEG compression markers (SOF0 = baseline, SOF2 = progressive).
| Observed value | |
|---|---|
| SOF0 |
DQT Quantisation Table FingerprintsThe 64-value matrix that controls JPEG lossy compression. Baked into firmware — consistent across units of the same model — and distinctive enough to act as a camera fingerprint.
JPEG quantisation table fingerprints. Identical patterns across devices indicate shared hardware or firmware lineage.
1
distinct fingerprint accumulated
JPEG Segment InventoryThe set of JPEG markers consistently present in output from this device. Marker presence and order are firmware-determined and can help distinguish camera lineages.
APP and SOF segments consistently present in output from this device.
| Observed value | |
|---|---|
| APP0JFIF application marker — identifies the file as JFIF format and may carry thumbnail and pixel density info. | |
| APP1Primary metadata container — holds EXIF camera data (make, model, GPS, settings) and optionally XMP. | |
| DHTDefine Huffman Table — the compression lookup table baked in by the encoder. | |
| DQTDefine Quantization Table — the 64-value lossy compression matrix. Consistent per firmware; useful as a fingerprint. | |
| SOF0Start of Frame, Baseline DCT — the most common JPEG compression type. | |
| SOSStart of Scan — marks the beginning of the compressed image data stream. | |
| SOIStart of Image — the 2-byte marker that opens every valid JPEG file. | |
| APP2ICC colour profile or FlashPix extension data. | |
| EOIEnd of Image — the 2-byte marker that closes every valid JPEG file. |
Metadata Block TypesThe metadata container formats found in files from this device — EXIF, IPTC, XMP, JFIF, and others. Different devices and software pipelines embed different combinations.
| Observed value | |
|---|---|
| Exif | |
| JFIFJPEG File Interchange Format — a baseline format header. Often absent from camera-original files; common in scanned or web-converted images. | |
| ICC_PROFILE |
Your photos carry this device fingerprint.
Vaultify strips device metadata before sharing — and can hide a private message inside your photo, invisible to forensic scanners like these.
