cgsecurity.org

Hi, I'm new on this forum; sadly I have got a problem (I think it's related to motherboard age considering that laptop have 16 years) and while I was copying files from my new notebook to old notebook on a usb pendrive of 512 GB with realvnc, the notebook (or the realvnc) crashes, I don't know how but usb pendrive cannot be read and windows suggest me to repair with check disk. This was not enough, so before to use testdisk I have exctracted files with Tenorshare 4DDiG. Now some files are exctract correctly, other not. So the first question is:
1. it's possible add a feature both to photorec that qphotorec that, reading all that is possible on NTFS or exfat file table, can list all the files with path and near to filename show the sector ranges that contains the file and exctract that to a file txt ? In this case, if a file is stored in contiguos sectors (so one sector range), I can be sure that isn't damaged.
The second question is the following: if I have made a previous backup of some files, it's possible make a table with sha512 code of all sectors of pendrive and, give in input to testdisk files that I'm sure that integrity check is true, split the file in part of size of file table cluster, made a check of contiguos sector (verified by contiguos sha512 codes) with sha512 codes calculated from file? In such case, with canvas recovery, it's useful to exclude sector from scan that are knowed contains data that are already recovered and reduce the probability of recover damaged files (moreover exclude sector that contain file more smaller of their size, exclude sectors that can be read from ntfs/exfat table).

Hope that I have explained clearly my idea

Dioxide wrote: Yesterday, 17:00 Hi, I'm new on this forum; sadly I have got a problem (I think it's related to motherboard age considering that laptop have 16 years) and while I was copying files from my new notebook to old notebook on a usb pendrive of 512 GB with realvnc, the notebook (or the realvnc) crashes, I don't know how but usb pendrive cannot be read and windows suggest me to repair with check disk. This was not enough, so before to use testdisk I have exctracted files with Tenorshare 4DDiG. Now some files are exctract correctly, other not. So the first question is:
1. it's possible add a feature both to photorec that qphotorec that, reading all that is possible on NTFS or exfat file table, can list all the files with path and near to filename show the sector ranges that contains the file and exctract that to a file txt ? In this case, if a file is stored in contiguos sectors (so one sector range), I can be sure that isn't damaged.

PhotoRec is the last line of defense. It is to be used when metadata is lost or dammaged. Therefore metadata like file name, folder paths are not available. PhotoRec is useless in your scenario. If metadata exists you can use TestDisk to browse the partition and select files and folders to be recovered.

The second question is the following: if I have made a previous backup of some files, it's possible make a table with sha512 code of all sectors of pendrive and, give in input to testdisk files that I'm sure that integrity check is true, split the file in part of size of file table cluster, made a check of contiguos sector (verified by contiguos sha512 codes) with sha512 codes calculated from file? In such case, with canvas recovery, it's useful to exclude sector from scan that are knowed contains data that are already recovered and reduce the probability of recover damaged files (moreover exclude sector that contain file more smaller of their size, exclude sectors that can be read from ntfs/exfat table).

Hope that I have explained clearly my idea

Unfortunately no. Typically if I don't understand a question upon the first time I read it, chances are big that rereading the text a couple of times does not provide more insight. This applies to your second question. Think about formatting your text in sections and avoid run-on sentences.

I have a vague idea what you mean here:

it's useful to exclude sector from scan that are knowed contains data that are already recovered

There is no double assignment of clusters to recovered files.

PhotoRec does not only recover files. It provides you with file location information. Please read:

https://www.cgsecurity.org/testdisk_doc/photorec.html

Photorec generates a file named "report.xml". That contains a wealth of information you are probably looking for.
In subsection 11.12 there is a description how to read it.