Thu Nov 28 07:58:46 2024 Command line: TestDisk TestDisk 7.2, Data Recovery Utility, February 2024 Christophe GRENIER https://www.cgsecurity.org OS: Darwin, kernel 23.6.0 (Darwin Kernel Version 23.6.0: Thu Sep 12 23:34:49 PDT 2024; root:xnu-10063.141.1.701.1~1/RELEASE_X86_64) x86_64 Compiler: GCC 4.2 ext2fs lib: none, ntfs lib: none, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.0 Hard disk list Disk /dev/disk0 - 2000 GB / 1863 GiB - 3907029168 sectors (RO), sector size=512 Disk /dev/disk5 - 255 GB / 238 GiB - 499744768 sectors, sector size=512 Disk /dev/disk6 - 159 MB / 151 MiB - 310761 sectors (RO), sector size=512 Disk /dev/rdisk0 - 2000 GB / 1863 GiB - 3907029168 sectors (RO), sector size=512 Disk /dev/rdisk3 - 2000 GB / 1862 GiB - 488327436 sectors (RO), sector size=4096 Disk /dev/rdisk5 - 255 GB / 238 GiB - 499744768 sectors, sector size=512 Disk /dev/rdisk6 - 159 MB / 151 MiB - 310761 sectors (RO), sector size=512 Partition table type (auto): Intel Disk /dev/rdisk5 - 255 GB / 238 GiB Partition table type: EFI GPT Analyse Disk /dev/rdisk5 - 255 GB / 238 GiB - 499744768 sectors Bad GPT partition, invalid signature. Trying alternate GPT Bad GPT partition, invalid signature. Current partition structure: Bad GPT partition, invalid signature. Trying alternate GPT Bad GPT partition, invalid signature. search_part() Disk /dev/rdisk5 - 255 GB / 238 GiB - 499744768 sectors MS Data 65536 499744767 499679232 exFAT found using backup sector, blocksize=262144, 255 GB / 238 GiB Results P MS Data 65536 499744767 499679232 exFAT found using backup sector, blocksize=262144, 255 GB / 238 GiB interface_write() 1 P MS Data 65536 499744767 499679232 simulate write! Partition table type (auto): Intel Disk /dev/rdisk5 - 255 GB / 238 GiB Partition table type: Intel Analyse Disk /dev/rdisk5 - 255 GB / 238 GiB - 499744768 sectors Geometry from i386 MBR: head=255 sector=63 BAD_RS LBA=65536 40 check_part_i386 failed for partition type 07 get_geometry_from_list_part_aux head=1 nbr=2 get_geometry_from_list_part_aux head=8 nbr=2 get_geometry_from_list_part_aux head=16 nbr=2 get_geometry_from_list_part_aux head=32 nbr=2 get_geometry_from_list_part_aux head=64 nbr=2 get_geometry_from_list_part_aux head=128 nbr=2 get_geometry_from_list_part_aux head=255 nbr=1 Current partition structure: Invalid NTFS or exFAT boot 1 P HPFS - NTFS 65536 499744767 499679232 1 P HPFS - NTFS 65536 499744767 499679232 Warning: Bad starting sector (CHS and LBA don't match) No partition is bootable search_part() Disk /dev/rdisk5 - 255 GB / 238 GiB - 499744768 sectors HPFS - NTFS 65536 499744767 499679232 exFAT found using backup sector, blocksize=262144, 255 GB / 238 GiB get_geometry_from_list_part_aux head=1 nbr=2 get_geometry_from_list_part_aux head=8 nbr=2 get_geometry_from_list_part_aux head=16 nbr=2 get_geometry_from_list_part_aux head=32 nbr=2 get_geometry_from_list_part_aux head=64 nbr=2 get_geometry_from_list_part_aux head=128 nbr=2 get_geometry_from_list_part_aux head=255 nbr=1 Warning: the current number of heads per cylinder is 1 but the correct value may be 128. Results * HPFS - NTFS 65536 499744767 499679232 exFAT found using backup sector, blocksize=262144, 255 GB / 238 GiB dir_partition inode=0 * HPFS - NTFS 65536 499744767 499679232 exFAT found using backup sector, blocksize=262144, 255 GB / 238 GiB Directory / 11203 drwxr-xr-x 0 0 262144 14-Mar-2024 15:18 .Trashes dir_partition inode=11203 * HPFS - NTFS 65536 499744767 499679232 exFAT found using backup sector, blocksize=262144, 255 GB / 238 GiB Directory /.Trashes 5618 drwxr-xr-x 0 0 262144 19-Jun-2024 18:08 501 26034 -rwxr-xr-x 0 0 4096 19-Jun-2024 18:08 ._501 dir_partition inode=5618 * HPFS - NTFS 65536 499744767 499679232 exFAT found using backup sector, blocksize=262144, 255 GB / 238 GiB Directory /.Trashes/501 X 176 -rwxr-xr-x 0 0 44002415 8-May-2024 12:33 DJI_0836.MOV X 356 -rwxr-xr-x 0 0 857147930 8-May-2024 12:35 DJI_0837.MOV X 177 -rwxr-xr-x 0 0 519008117 8-May-2024 12:51 DJI_0838.MOV X 5617 -rwxr-xr-x 0 0 319054495 8-May-2024 12:52 DJI_0839.MOV X 6841 -rwxr-xr-x 0 0 202506492 8-May-2024 12:53 DJI_0840.MOV X 7624 -rwxr-xr-x 0 0 743513250 8-May-2024 12:54 DJI_0841.MOV X 10475 -rwxr-xr-x 0 0 139051787 8-May-2024 12:55 DJI_0842.MOV X 11013 -rwxr-xr-x 0 0 125509390 8-May-2024 12:55 DJI_0843.MOV X 11506 -rwxr-xr-x 0 0 143002992 8-May-2024 12:55 DJI_0844.MOV X 12058 -rwxr-xr-x 0 0 122085049 8-May-2024 12:56 DJI_0845.MOV X 12536 -rwxr-xr-x 0 0 879509265 8-May-2024 12:57 DJI_0846.MOV X 15902 -rwxr-xr-x 0 0 186509933 8-May-2024 12:58 DJI_0847.MOV X 16620 -rwxr-xr-x 0 0 84829130 8-May-2024 13:00 DJI_0848.MOV X 16950 -rwxr-xr-x 0 0 193281800 8-May-2024 13:00 DJI_0849.MOV X 17694 -rwxr-xr-x 0 0 301736078 8-May-2024 13:01 DJI_0850.MOV X 18852 -rwxr-xr-x 0 0 29926625 8-May-2024 13:01 DJI_0851.MOV X 18973 -rwxr-xr-x 0 0 234455177 8-May-2024 13:02 DJI_0852.MOV X 19874 -rwxr-xr-x 0 0 123353319 8-May-2024 13:02 DJI_0853.MOV X 20351 -rwxr-xr-x 0 0 221408204 8-May-2024 13:03 DJI_0854.MOV X 21202 -rwxr-xr-x 0 0 288012104 8-May-2024 13:04 DJI_0855.MOV X 22319 -rwxr-xr-x 0 0 231542325 8-May-2024 13:06 DJI_0856.MOV X 23209 -rwxr-xr-x 0 0 169904699 8-May-2024 13:06 DJI_0857.MOV X 26035 -rwxr-xr-x 0 0 32401817 9-Jun-2024 10:58 DJI_0862.MOV Directory /.Trashes 5618 drwxr-xr-x 0 0 262144 19-Jun-2024 18:08 501 26034 -rwxr-xr-x 0 0 4096 19-Jun-2024 18:08 ._501 Directory / 11203 drwxr-xr-x 0 0 262144 14-Mar-2024 15:18 .Trashes interface_write() 1 P HPFS - NTFS 65536 499744767 499679232 simulate write! write_mbr_i386: starting... write_all_log_i386: starting... No extended partition Interface Advanced Geometry from i386 MBR: head=255 sector=63 BAD_RS LBA=65536 40 check_part_i386 failed for partition type 07 get_geometry_from_list_part_aux head=1 nbr=2 get_geometry_from_list_part_aux head=8 nbr=2 get_geometry_from_list_part_aux head=16 nbr=2 get_geometry_from_list_part_aux head=32 nbr=2 get_geometry_from_list_part_aux head=64 nbr=2 get_geometry_from_list_part_aux head=128 nbr=2 get_geometry_from_list_part_aux head=255 nbr=1 1 P HPFS - NTFS 65536 499744767 499679232 Not an exFAT boot sector. 1 P HPFS - NTFS 65536 499744767 499679232 Can't open filesystem. Filesystem seems damaged. ntfs_boot_sector 1 P HPFS - NTFS 65536 499744767 499679232 filesystem size 0 11041012033564056892 sectors_per_cluster 0 183 mft_lcn 18446744073709551615 11230375373630284457 mftmirr_lcn 18446744073709551615 17808321332587373698 clusters_per_mft_record -1 26 clusters_per_index_record -1 -29 Boot sector Status: Bad Backup boot sector Status: Bad Sectors are not identical. A valid NTFS Boot sector must be present in order to access any data; even if the partition is not bootable. Change partition type: 1 P HPFS - NTFS 65536 499744767 499679232 Change partition type: 1 P exFAT 65536 499744767 499679232 exFAT_boot_sector 1 P HPFS - NTFS 65536 499744767 499679232 Boot sector Bad Backup boot record exFAT OK Sectors are not identical. copy backup superblock over main superblock exFAT_boot_sector 1 P HPFS - NTFS 65536 499744767 499679232 Boot sector exFAT OK Backup boot record exFAT OK Sectors are identical. Analyse Disk /dev/rdisk5 - 255 GB / 238 GiB - 499744768 sectors Geometry from i386 MBR: head=255 sector=63 BAD_RS LBA=65536 40 get_geometry_from_list_part_aux head=1 nbr=2 get_geometry_from_list_part_aux head=8 nbr=2 get_geometry_from_list_part_aux head=16 nbr=2 get_geometry_from_list_part_aux head=32 nbr=2 get_geometry_from_list_part_aux head=64 nbr=2 get_geometry_from_list_part_aux head=128 nbr=2 get_geometry_from_list_part_aux head=255 nbr=1 Current partition structure: 1 P HPFS - NTFS 65536 499744767 499679232 Warning: Bad starting sector (CHS and LBA don't match) No partition is bootable search_part() Disk /dev/rdisk5 - 255 GB / 238 GiB - 499744768 sectors HPFS - NTFS 65536 499744767 499679232 exFAT, blocksize=262144, 255 GB / 238 GiB get_geometry_from_list_part_aux head=1 nbr=2 get_geometry_from_list_part_aux head=8 nbr=2 get_geometry_from_list_part_aux head=16 nbr=2 get_geometry_from_list_part_aux head=32 nbr=2 get_geometry_from_list_part_aux head=64 nbr=2 get_geometry_from_list_part_aux head=128 nbr=2 get_geometry_from_list_part_aux head=255 nbr=1 Warning: the current number of heads per cylinder is 1 but the correct value may be 128. Results * HPFS - NTFS 65536 499744767 499679232 exFAT, blocksize=262144, 255 GB / 238 GiB dir_partition inode=0 * HPFS - NTFS 65536 499744767 499679232 exFAT, blocksize=262144, 255 GB / 238 GiB Directory / 11203 drwxr-xr-x 0 0 262144 14-Mar-2024 15:18 .Trashes interface_write() 1 * HPFS - NTFS 65536 499744767 499679232 simulate write! write_mbr_i386: starting... write_all_log_i386: starting... No extended partition TestDisk exited normally.