Strange bytes added to end of JPG files on SD card

backupjpegphotossd card

A month ago, my wife upgraded from a Galaxy S5 to S7, and brought along a MicroSD card full of photos taken on the old phone. Recently, in the process of backing up new photos, I noticed that a lot of old photos have been given "new" file modification dates, which I find alarming. Large batches of photos have updated modtimes while the phone is connected to WiFi not doing anything.

I grabbed a sample modified JPG and compared it to the backed-up original. The file is identical up to the length of the original, but has some new bytes tacked onto the end of the file:

Bytes appended to end of JPG image on phone

What is this? I see "BackupRestore_Data", which looks like a signature from some kind of online backup system, but I'm not aware of us opting into such a system. I also see "SEFT" which could be a magic number at the end, but searching for that didn't produce anything that looked relevant.

It doesn't seem to hurt the JPG to have this extra data appended. But generally I'm not a fan of the files being changed at all after the photo was taken. What is this extra data and what does it do?

Best Answer

The data seems to be some kind of hash, that whatever backup software is happening is using it to track which files have already been uploaded, and which ones haven't. Also hashes, if the hash is for the whole file it can be used to determine if the file has been altered since its last upload.

Many picture formats support metadata which is added to the pictures for the users benefit. This includes, but is not limited to EXIF and XMP profiles which allow all kind of information to be embedded that would otherwise be lost.

The most important camera information is embedded. Tags containing the names of people in the pictures can be added afterwards.

Related Question