Quick question,
I was wondering if you really need to know what Microsoft program was used to create the Cover Page file ?
I never had to go that far for a case
I'll use the exif to associate image to a specific camera but never had to map the jpg file in detail
there are several things one can do.
What are the possible applications?
What applications cannot be of the generator?
Are there any specifics within the image that any of the applications on the "possible" list cannot produce?
Are there any specifics within the image that only one or only few of the applications on the "possible" list can produce?
You will need to understand how JFIF looks inside and out. Did you look at the color space, quantization table, Huffman table? For example some apps do nested single block tables, others do multiple block, single table. Both are valid. Restart blocks - some apps never insert them, some do with zeal. And . . . so . . . on . . .
@ jhup
During your investigation or analysis
Did you had to demonstrate which application was use to produce the picture ?
If so, can you give me some details ?
And what was the result of your finding ?
Thanks,