Sun May 30 17:46:23 2021
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 5.10.36-2-MANJARO (#1 SMP PREEMPT Tue May 11 19:38:44 UTC 2021) x86_64
Compiler: GCC 10.1
ext2fs lib: 1.46.2, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.5, ewf lib: none, curses lib: ncurses 6.2
/dev/sda: LBA, HPA, LBA48 support
/dev/sda: size       937703088 sectors
/dev/sda: user_max   937703088 sectors
/dev/sda: native_max 937703088 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop4 - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - CT480BX500SSD1, S/N:2006E3E9F373, FW:M6CR022
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - KESU USB 3.0, FW:0209
Disk /dev/sdc - 7776 MB / 7416 MiB - CHS 1020 240 62, sector size=512 - Kingston DataTraveler G3, FW:PMAP
Disk /dev/loop0 - 27 MB / 26 MiB - 53304 sectors (RO), sector size=512
Disk /dev/loop1 - 388 MB / 370 MiB - 758648 sectors (RO), sector size=512
Disk /dev/loop2 - 1662 MB / 1585 MiB - 3247768 sectors (RO), sector size=512
Disk /dev/loop3 - 731 MB / 697 MiB - 1427888 sectors (RO), sector size=512

Partition table type (auto): EFI GPT
Disk /dev/sda - 480 GB / 447 GiB - CT480BX500SSD1
Partition table type: EFI GPT

Analyse Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=937703087 (expected 937703087)
hdr_lba_start=34
hdr_lba_end=937703054
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                  2048     206847     204800 [EFI System Partition]
 2 P MS Data                   239616  466284543  466044928
 3 P MS Data                466284544  695965695  229681152 [DATA]
 4 P MS Data                927066112  927916031     849920 [NO NAME]
 5 P MS Data                927916032  937701375    9785344 [SHARED]

search_part()
Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63
FAT32 at 0/32/33
FAT1 : 32-4111
FAT2 : 4112-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 1
no_of_cluster : 196608 (2 - 196609)
fat_length 4080 calculated 1537

FAT32 at 0/32/33
FAT: Directory entry is marked as free.
FAT: cluster=2(0x2), pos=10240
     EFI System                  2048     206847     204800 [EFI System Partition] [BOOT]
     FAT32, blocksize=512, 104 MB / 100 MiB
NTFS at 14/233/28
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=122683392, part_size=238615003136, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 14/233/28
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
NTFS at 29024/221/62
filesystem size           229681152
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               14355071
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                236603393  466284544  229681152
     NTFS found using backup sector, blocksize=4096, 117 GB / 109 GiB
NTFS at 29024/221/62
filesystem size           229681152
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               14355071
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                466284544  695965695  229681152 [DATA]
     NTFS, blocksize=4096, 117 GB / 109 GiB
NTFS at 43347/156/9
filesystem size           229681152
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               14355071
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                466698240  696379391  229681152
     NTFS found using backup sector, blocksize=4096, 117 GB / 109 GiB
NTFS at 43347/156/9
filesystem size           229681152
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               14355071
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                696379391  926060542  229681152
     NTFS, blocksize=4096, 117 GB / 109 GiB
FAT32 at 57707/50/8
FAT1 : 32-863
FAT2 : 864-1695
start_rootdir : 1696 root cluster : 2
Data : 1696-849919
sectors : 849920
cluster_size : 8
no_of_cluster : 106028 (2 - 106029)
fat_length 832 calculated 829
set_FAT_info: name from BS used

FAT32 at 57707/50/8
FAT: cluster=2(0x2), pos=927067808
     MS Data                927066112  927916031     849920 [NO NAME]
     FAT32, blocksize=4096, 435 MB / 415 MiB
FAT32 at 57760/25/58
FAT1 : 32-9575
FAT2 : 9576-19119
start_rootdir : 19120 root cluster : 2
Data : 19120-9785343
sectors : 9785344
cluster_size : 8
no_of_cluster : 1220778 (2 - 1220779)
fat_length 9544 calculated 9538

FAT32 at 57760/25/58
FAT: cluster=2(0x2), pos=927935152
     MS Data                927916032  937701375    9785344 [SHARED]
     FAT32, blocksize=4096, 5010 MB / 4778 MiB

Results
   P EFI System                  2048     206847     204800 [EFI System Partition] [BOOT]
     FAT32, blocksize=512, 104 MB / 100 MiB
     MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
     MS Data                236603393  466284544  229681152
     NTFS found using backup sector, blocksize=4096, 117 GB / 109 GiB
     MS Data                466284544  695965695  229681152 [DATA]
     NTFS, blocksize=4096, 117 GB / 109 GiB
     MS Data                466698240  696379391  229681152
     NTFS found using backup sector, blocksize=4096, 117 GB / 109 GiB
     MS Data                696379391  926060542  229681152
     NTFS, blocksize=4096, 117 GB / 109 GiB
   P MS Data                927066112  927916031     849920 [NO NAME]
     FAT32, blocksize=4096, 435 MB / 415 MiB
   P MS Data                927916032  937701375    9785344 [SHARED]
     FAT32, blocksize=4096, 5010 MB / 4778 MiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
echo "0 466044928 linear /dev/sda 239616" | dmsetup create test1
echo "0 229681152 linear /dev/sda 236603393" | dmsetup create test2
echo "0 229681152 linear /dev/sda 466284544" | dmsetup create test3
echo "0 229681152 linear /dev/sda 466698240" | dmsetup create test4
echo "0 229681152 linear /dev/sda 696379391" | dmsetup create test5
echo "0 849920 linear /dev/sda 927066112" | dmsetup create test6
echo "0 9785344 linear /dev/sda 927916032" | dmsetup create test7

interface_write()
 1 P EFI System                  2048     206847     204800 [EFI System Partition] [BOOT]
 2 P MS Data                   239616  466284543  466044928
 3 P MS Data                466284544  695965695  229681152 [DATA]
 4 P MS Data                927066112  927916031     849920 [NO NAME]
 5 P MS Data                927916032  937701375    9785344 [SHARED]
write!
No extended partition
You will have to reboot for the change to take effect.

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=937703087 (expected 937703087)
hdr_lba_start=34
hdr_lba_end=937703054
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
 1 P EFI System                  2048     206847     204800 [EFI System Partition]
 2 P MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
 3 P MS Data                466284544  695965695  229681152 [DATA]
     NTFS, blocksize=4096, 117 GB / 109 GiB
 4 P MS Data                927066112  927916031     849920 [NO NAME]
     FAT32, blocksize=4096, 435 MB / 415 MiB
 5 P MS Data                927916032  937701375    9785344 [SHARED]
     FAT32, blocksize=4096, 5010 MB / 4778 MiB

ntfs_boot_sector
 2 P MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
NTFS at 14/233/28
NTFS at 14/233/28
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
repair_MFT
NTFS at 14/233/28
MFT and MFT mirror match perfectly.
MFT and MFT mirror match perfectly.

ntfs_boot_sector
 2 P MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
NTFS at 14/233/28
NTFS at 14/233/28
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 16
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         2
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         2
ntfs_find_mft: mft_record_size     1024 bytes
ntfs_find_mft: index_block_size    4096
Extrapolated boot sector and current boot sector are identical.
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1

ntfs_boot_sector
 2 P MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
NTFS at 14/233/28
NTFS at 14/233/28
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 2 P MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
NTFS at 14/233/28
NTFS at 14/233/28
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Boot sector                        Backup boot sector
0000 eb52904e 54465320   .R.NTFS   eb52904e 54465320   .R.NTFS 
0008 20202000 02080000      .....  20202000 02080000      .....
0010 00000000 00f80000   ........  00000000 00f80000   ........
0018 3f00ff00 00a80300   ?.......  3f00ff00 00a80300   ?.......
0020 00000000 80008000   ........  00000000 80008000   ........
0028 ff47c71b 00000000   .G......  ff47c71b 00000000   .G......
0030 00000c00 00000000   ........  00000c00 00000000   ........
0038 02000000 00000000   ........  02000000 00000000   ........
0040 f6000000 01000000   ........  f6000000 01000000   ........
0048 0ea25634 b556340c   ..V4.V4.  0ea25634 b556340c   ..V4.V4.
0050 00000000 fa33c08e   .....3..  00000000 fa33c08e   .....3..
0058 d0bc007c fb68c007   ...|.h..  d0bc007c fb68c007   ...|.h..
0060 1f1e6866 00cb8816   ..hf....  1f1e6866 00cb8816   ..hf....
0068 0e006681 3e03004e   ..f.>..N  0e006681 3e03004e   ..f.>..N
0070 54465375 15b441bb   TFSu..A.  54465375 15b441bb   TFSu..A.
0078 aa55cd13 720c81fb   .U..r...  aa55cd13 720c81fb   .U..r...
0080 55aa7506 f7c10100   U.u.....  55aa7506 f7c10100   U.u.....
0088 7503e9dd 001e83ec   u.......  7503e9dd 001e83ec   u.......
0090 18681a00 b4488a16   .h...H..  18681a00 b4488a16   .h...H..
0098 0e008bf4 161fcd13   ........  0e008bf4 161fcd13   ........
00A0 9f83c418 9e581f72   .....X.r  9f83c418 9e581f72   .....X.r
00A8 e13b060b 0075dba3   .;...u..  e13b060b 0075dba3   .;...u..
00B0 0f00c12e 0f00041e   ........  0f00c12e 0f00041e   ........
00B8 5a33dbb9 00202bc8   Z3... +.  5a33dbb9 00202bc8   Z3... +.
00C0 66ff0611 0003160f   f.......  66ff0611 0003160f   f.......
00C8 008ec2ff 061600e8   ........  008ec2ff 061600e8   ........
00D0 4b002bc8 77efb800   K.+.w...  4b002bc8 77efb800   K.+.w...
00D8 bbcd1a66 23c0752d   ...f#.u-  bbcd1a66 23c0752d   ...f#.u-
00E0 6681fb54 43504175   f..TCPAu  6681fb54 43504175   f..TCPAu
00E8 2481f902 01721e16   $....r..  2481f902 01721e16   $....r..
00F0 6807bb16 68521116   h...hR..  6807bb16 68521116   h...hR..
00F8 68090066 53665366   h..fSfSf  68090066 53665366   h..fSfSf
0100 55161616 68b80166   U...h..f  55161616 68b80166   U...h..f
0108 610e07cd 1a33c0bf   a....3..  610e07cd 1a33c0bf   a....3..
0110 0a13b9f6 0cfcf3aa   ........  0a13b9f6 0cfcf3aa   ........
0118 e9fe0190 9066601e   .....f`.  e9fe0190 9066601e   .....f`.
0120 0666a111 00660306   .f...f..  0666a111 00660306   .f...f..
0128 1c001e66 68000000   ...fh...  1c001e66 68000000   ...fh...
0130 00665006 53680100   .fP.Sh..  00665006 53680100   .fP.Sh..
0138 681000b4 428a160e   h...B...  681000b4 428a160e   h...B...
0140 00161f8b f4cd1366   .......f  00161f8b f4cd1366   .......f
0148 595b5a66 5966591f   Y[ZfYfY.  595b5a66 5966591f   Y[ZfYfY.
0150 0f821600 66ff0611   ....f...  0f821600 66ff0611   ....f...
0158 0003160f 008ec2ff   ........  0003160f 008ec2ff   ........
0160 0e160075 bc071f66   ...u...f  0e160075 bc071f66   ...u...f
0168 61c3a1f6 01e80900   a.......  61c3a1f6 01e80900   a.......
0170 a1fa01e8 0300f4eb   ........  a1fa01e8 0300f4eb   ........
0178 fd8bf0ac 3c007409   ....<.t.  fd8bf0ac 3c007409   ....<.t.
0180 b40ebb07 00cd10eb   ........  b40ebb07 00cd10eb   ........
0188 f2c30d0a 45727265   ....Erre  f2c30d0a 45727265   ....Erre
0190 7572206c 65637475   ur lectu  7572206c 65637475   ur lectu
0198 72652064 69737175   re disqu  72652064 69737175   re disqu
01A0 65000d0a 424f4f54   e...BOOT  65000d0a 424f4f54   e...BOOT
01A8 4d475220 636f6d70   MGR comp  4d475220 636f6d70   MGR comp
01B0 72657373 82000d0a   ress....  72657373 82000d0a   ress....
01B8 4374726c 2b416c74   Ctrl+Alt  4374726c 2b416c74   Ctrl+Alt
01C0 2b537570 70722070   +Suppr p  2b537570 70722070   +Suppr p
01C8 6f757220 72656482   our red.  6f757220 72656482   our red.
01D0 6d617272 65720d0a   marrer..  6d617272 65720d0a   marrer..
01D8 00737461 72740d0a   .start..  00737461 72740d0a   .start..
01E0 00000000 00000000   ........  00000000 00000000   ........
01E8 00000000 00000000   ........  00000000 00000000   ........
01F0 00000000 00008a01   ........  00000000 00008a01   ........
01F8 a201b601 000055aa   ......U.  a201b601 000055aa   ......U.

ntfs_boot_sector
 2 P MS Data                   239616  466284543  466044928
     NTFS, blocksize=4096, 238 GB / 222 GiB
NTFS at 14/233/28
NTFS at 14/233/28
filesystem size           466044928
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

TestDisk exited normally.