±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 32923
New Yesterday: 6 Visitors: 222

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

TFAT & gpspara.bin files

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

TFAT & gpspara.bin files

Post Posted: Wed Oct 11, 2017 8:18 am

I have a AZ+ sat nav with recent destinations that can be viewed from the GUI and a .bin file created from both the memory card & main unit. The memory card contains application files only but the main unit (running CE 6.0) have 4 gpspara.bin files within a TFAT partition and a number of gpspara.bin files in unallocated space.

Forensic software cannot do anything with these and I've manually looked at these files and they look scrambled!! Has anyone seen anything like this?

Regards,  

nsbuck
Senior Member
 
 
  

Re: TFAT & gpspara.bin files

Post Posted: Wed Oct 11, 2017 9:40 am

AFAICT/AFAICR gpspara0.bin, gpspara1.bin. gpspara2.bin, gpspara3.bin are 70 kb files that are in root of the TFAT on a number of navigators and represent a sort of cache of the GPS satellite settings in firmware, *like* :
www.nwcom.info/Soft/GP...sh/?sort=s

If you delete them, they should be recreated, and most probably they are recreated new at any reboot after a firmware upgrade or device reset.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: TFAT & gpspara.bin files

Post Posted: Wed Oct 11, 2017 9:51 am

jaclaz,

I believe that the files are created when a GPS fix is asked for/ obtained which is why I was thinking that the files actually contain useful information and as I have never seen this before I just wanted to confirm if this is indeed the case.

Regards,  

nsbuck
Senior Member
 
 
  

Re: TFAT & gpspara.bin files

Post Posted: Thu Oct 12, 2017 3:46 am

Is there any way to share the dumps?
_________________
Visual Nand Reconstructor. A small revolution in chip-off data recovery 

Sasha
Member
 
 

Page 1 of 1