I would want to rule out the possibility of it being a fake memory chip. This is when a small memory chip is modified to look like a big memory chip - I have come across several such micro SD cards, but typically labelled 64GB - with 4GB or 8GB actual memory.
It is a possibility, but the "around 20 Gb" makes it improbable.
I mean, I can understand making a fake 64 GB out of a 4 (or possibly even 8 ) Gb but making a 32 Gb out of a 20 Gb (a size that AFAIK doesn't exist "in nature") 😯 .
If you are faking it, fake it big. wink
Also, usually issues with fake chips start as soon as the OS attempts to write past the "real" size and it would be uncommon for a microSD card to attempt writing the 12 GB in "one go" (besides possibly being impossible because of the FAT32 4 Gb file size limit)…
jaclaz
Ok, this is all making sense now.
I deal with these alot and have never ever seen the brand name used.
In addition, it's sticker has been applied in a real amateurish way i.e. not in alignment with the
card.
This probably is a fake.
I will keep you guyz updated.
I agree that 20GB OK out of 32GB is not what you expect from a fake memory chip. However, it is not clear if the recovered 20GB files are good files, or just ones that have a valid file name and size. As the FAT is normally at the start of the memory chip, everything looks good until one tries to read the 'saved' data. Files will read without errors, but are then invalid.
With data carving, I have often seen patterns where there are lots of files, but there may also be a repeating pattern in hash values, showing that data is all from the same memory lock.
However, it is not clear if the recovered 20GB files are good files, or just ones that have a valid file name and size. As the FAT is normally at the start of the memory chip, everything looks good until one tries to read the 'saved' data. Files will read without errors, but are then invalid.
I guess it largely depends on the "quality" of the fake 😯 , just like it happens with fake watches, there are the 20-50 € ones that are really fake and show as such but the - say - 200-500 € are so well manufactured that even experts from the "real" watch manufacturing companies have difficulties in recognizing one (or need to carry some more advanced examinations to make sure).
At least when it comes to fake USB sticks, usually the fake is just an altered filesystem (low quality fake) though it is possible I believe to use the controller "MP Tool" to change parameters in the firmware and thums make a "higher quality" fake.
Still the 20 Gb vs 32 Gb sounds improbable and as said the error/issue normally happens as soon as the OS attempts to write beyond a given address, not when the "whole label capacity" is hit. ?
jaclaz
Still the 20 Gb vs 32 Gb sounds improbable and as said the error/issue normally happens as soon as the OS attempts to write beyond a given address, not when the "whole label capacity" is hit. ?
jaclaz
I have seen chips where the 'overrun data' is just written to the final 1MB (or similar). Thus it does not actually overrun to the start after the good area has been used. Reading therefore looks good, unless the content is checked.
However, almost anything can happen and so my comments must be treated as educated speculation rather than facts.
Cameras/ phones can also 'screw' up perfectly good data without any hardware errors.