3 $Mft records were found
at sectors C2810, 6C2800, 77223010Review details about the ongoing recovery by going to FILE SYSTEM->Recovery info. The list below shows the file system structure in the left column and its recurrence in the middle column. The right column describes the structure. Click on the middle column to get a list of the findings. For example, click 50 to the right of # MFT below, to get the sector numbers where the items were found.
| Recovery Details | ||
|---|---|---|
| Name | Example Value | Description |
| Drive: | Physical hard drive 954 GB (DISK0:) - SAMSUNG MZFLW1T0HMLH-000MV | |
| NTFS-related findings | ||
| # MFT: | 50 | MFT entries found, sectors with signature "FILE" |
| # $Mft: | 3 | $Mft record found, MFT entry named "$Mft" |
| List expanded: |
3 $Mft records were found
at sectors C2810, 6C2800, 77223010 |
|
| # $MftMirr: | 3 | $MftMirr record found, MFT entry name "$MftMirr" |
| # Index: | 12 | Index record found, sectors with signature "INDX" |
| # NT boot sectors: | 4 | NTFS boot sector found, signature 0xAA55, "NTFS" |
| FAT-related findings | ||
| # FAT32 boot sectors: | 2 | FAT32 boot sector found, signature 0xAA55, "FAT32" |
| # FAT16 boot sectors: | 0 | FAT boot sectors found, signature 0xAA55, "FAT" |
| # exFAT boot sectors: | 0 | exFAT boot sectors found, sig 0xAA55, "EXFAT" |
| HFS+-related findings | ||
| # HFS+ volume headers: | 0 | HFS+ volume header found, sig "H+" |
| # Unused HFS volume headers: | 0 | Unused headers |
| # HFS node ends: | 18 | HFS+ tree node end |
| # HFS header nodes: | 0 | HFS+ tree header node |
| APFS-related findings | ||
| # APFS NXSBs: | 0 | APFS superblock found, sig "NXSB" |
| # APFS APSBs: | 0 | APFS volume superblock found, sig "APSB" |
| # APFS Blocks: | 0 | APFS block found, signature by BlockID |
| EXT-related findings | ||
| # EXT Superblocks: | 0 | EXT superblocks found, sig 0xEF53 |
| # XFS Superblocks: | 0 | |
| FAT-related findings | ||
| # 12-bit FATs: | 0 | 12-bit FAT, found by structure analysis |
| # 16-bit FATs: | 0 | 16-bit FAT, found by structure analysis |
| # 32-bit FATs: | 2 | 32-bit FAT, found by structure analysis |
| # EXFAT FATs: | 0 | exFAT, found by structure analysis |
| # Directory starts: | 52 | DIrectory starts found, sig ".", ".." |
| # Directory conts: | 309 | Directory continuations found, by structure analysis |
| # exFAT Directory roots: | 0 | exFAT root dir, found by structure analysis |
| # exFAT Directory starts: | 0 | exFAT dir starts, found by structure analysis |
| # exFAT Directory conts: | 2 | exFAT dir conts, found by structure analysis |
| Dir tracker list: | 52 entries | List of sectors with a cluster self-reference (".") |
| FAT analyze list: | 50 entries | FAT worklist |
| FAT cache: | 6 entries | FAT description |
| CrissCross: | Level 1, 110,064 sectors in 26 chunks | Sophistication level, list of sectors to visit |
| CrossCrossMemo: | L1/Br100/Dry0 | Level 1 / Bracket 100 / NoStreak 0 / Thieve none |
| Sectors starts: | 509 | Identified file starts |
| Cluster starts: | 1,521 | Identified cluster starts |
| All clusters: | 375 | |
| Cl sizes: | 28 | |
| File system list: | 5 items | |
| Selected file system: | NTFS at sector 796,672, cluster size 8 (953 GB) more... | |
| ID: | 1302511837 created 5/15/2020 2:12:04 PM | Recovery ID, date |
See also: Sophistication level