/usr/sbin
NameSizeModeActions
aa-remove-unknown30680755editdlrm
aa-status88390755editdlrm
aa-teardown1390755editdlrm
accessdb147280755editdlrm
add-shell8600755editdlrm
addgnupghome30750755editdlrm
addgroup377850755editdlrm
adduser377850755editdlrm
agetty690000755editdlrm
apparmor_parser15263680755editdlrm
apparmor_status88390755editdlrm
applygnupgdefaults22170755editdlrm
arpd801440755editdlrm
arptables2204880755editdlrm
arptables-nft2204880755editdlrm
arptables-nft-restore2204880755editdlrm
arptables-nft-save2204880755editdlrm
arptables-restore2204880755editdlrm
arptables-save2204880755editdlrm
atd307280755editdlrm
badblocks351440755editdlrm
bcache-super-show144880755editdlrm
biosdecode278560755editdlrm
blkdeactivate148370755editdlrm
blkdiscard350480755editdlrm
blkid1210960755editdlrm
blkzone719120755editdlrm
blockdev678160755editdlrm
bridge1047600755editdlrm
cache_check13522880755editdlrm
cache_dump13522880755editdlrm
cache_metadata_size13522880755editdlrm
cache_repair13522880755editdlrm
cache_restore13522880755editdlrm
cache_writeback13522880755editdlrm
capsh310320755editdlrm
cfdisk1050480755editdlrm
cgdisk2114320755editdlrm
chcpu473360755editdlrm
chgpasswd677920755editdlrm
chmem637200755editdlrm
chpasswd596000755editdlrm
chroot433520755editdlrm
cpgr617840755editdlrm
cppw617840755editdlrm
cron559440755editdlrm
cryptdisks_start15440755editdlrm
cryptdisks_stop8440755editdlrm
cryptsetup1387920755editdlrm
cryptsetup-reencrypt1078480755editdlrm
ctrlaltdel391440755editdlrm
debugfs2312240755editdlrm
delgroup164950755editdlrm
deluser164950755editdlrm
depmod1744240755editdlrm
devlink1540800755editdlrm
dhclient5212000755editdlrm
dhclient-script163040755editdlrm
dmeventd514400755editdlrm
dmidecode1218560755editdlrm
dmsetup1751280755editdlrm
dmstats1751280755editdlrm
dosfsck594720755editdlrm
dosfslabel553760755editdlrm
dpkg-preconfigure36630755editdlrm
dpkg-reconfigure44480755editdlrm
dumpe2fs311120755editdlrm
e2freefrag188160755editdlrm
e2fsck3350640755editdlrm
e2image434000755editdlrm
e2label1091120755editdlrm
e2mmpstatus311120755editdlrm
e2scrub72960755editdlrm
e2scrub_all53950755editdlrm
e2undo229120755editdlrm
e4crypt311040755editdlrm
e4defrag351280755editdlrm
ebtables2204880755editdlrm
ebtables-nft2204880755editdlrm
ebtables-nft-restore2204880755editdlrm
ebtables-nft-save2204880755editdlrm
ebtables-restore2204880755editdlrm
ebtables-save2204880755editdlrm
era_check13522880755editdlrm
era_dump13522880755editdlrm
era_invalidate13522880755editdlrm
era_restore13522880755editdlrm
ethtool3840480755editdlrm
faillock144880755editdlrm
fatlabel553760755editdlrm
fdformat350480755editdlrm
fdisk1538800755editdlrm
filefrag187680755editdlrm
findfs145680755editdlrm
fixparts762640755editdlrm
fsadm241080755editdlrm
fsck555760755editdlrm
fsck.btrfs11850755editdlrm
fsck.cramfs391760755editdlrm
fsck.ext23350640755editdlrm
fsck.ext33350640755editdlrm
fsck.ext43350640755editdlrm
fsck.fat594720755editdlrm
fsck.minix1251840755editdlrm
fsck.msdos594720755editdlrm
fsck.vfat594720755editdlrm
fsck.xfs19680755editdlrm
fsfreeze145680755editdlrm
fstab-decode146480755editdlrm
fstrim719120755editdlrm
gdisk2155280755editdlrm
genl842640755editdlrm
getcap146480755editdlrm
getpcaps146480755editdlrm
getty690000755editdlrm
groupadd931360755editdlrm
groupdel888480755editdlrm
groupmems637360755editdlrm
groupmod971360755editdlrm
grpck636720755editdlrm
grpconv594480755editdlrm
grpunconv594480755editdlrm
grub-bios-setup9311680755editdlrm
grub-install11629920755editdlrm
grub-macbless9185600755editdlrm
grub-mkconfig87500755editdlrm
grub-mkdevicemap2208800755editdlrm
grub-probe9270080755editdlrm
grub-reboot48430755editdlrm
grub-set-default35580755editdlrm
halt9965840755editdlrm
hdparm1437040755editdlrm
hwclock1048080755editdlrm
iconvconfig311280755editdlrm
init16202240755editdlrm
insmod1744240755editdlrm
installkernel26380755editdlrm
integritysetup616720755editdlrm
invoke-rc.d170420755editdlrm
ip6119600755editdlrm
ip6tables992960755editdlrm
ip6tables-apply70570755editdlrm
ip6tables-legacy992960755editdlrm
ip6tables-legacy-restore992960755editdlrm
ip6tables-legacy-save992960755editdlrm
ip6tables-nft2204880755editdlrm
ip6tables-nft-restore2204880755editdlrm
ip6tables-nft-save2204880755editdlrm
ip6tables-restore992960755editdlrm
ip6tables-restore-translate2204880755editdlrm
ip6tables-save992960755editdlrm
ip6tables-translate2204880755editdlrm
iptables992960755editdlrm
iptables-apply70570755editdlrm
iptables-legacy992960755editdlrm
iptables-legacy-restore992960755editdlrm
iptables-legacy-save992960755editdlrm
iptables-nft2204880755editdlrm
iptables-nft-restore2204880755editdlrm
iptables-nft-save2204880755editdlrm
iptables-restore992960755editdlrm
iptables-restore-translate2204880755editdlrm
iptables-save992960755editdlrm
iptables-translate2204880755editdlrm
irqbalance644320755editdlrm
irqbalance-ui352000755editdlrm
iscsi-iname185840755editdlrm
iscsiadm4035600755editdlrm
iscsid4201520755editdlrm
iscsistart3750800755editdlrm
iscsi_discovery52850755editdlrm
isosize309520755editdlrm
kbdrate143280755editdlrm
killall5270160755editdlrm
kpartx472720755editdlrm
ldattach350480755editdlrm
ldconfig3870755editdlrm
ldconfig.real10537680755editdlrm
locale-gen43990755editdlrm
logrotate840560755editdlrm
logsave144960755editdlrm
losetup1129920755editdlrm
lsmod1744240755editdlrm
luksformat34010755editdlrm
lvchange28628720755editdlrm
lvconvert28628720755editdlrm
lvcreate28628720755editdlrm
lvdisplay28628720755editdlrm
lvextend28628720755editdlrm
lvm28628720755editdlrm
lvmconfig28628720755editdlrm
lvmdiskscan28628720755editdlrm
lvmdump103120755editdlrm
lvmpolld2376240755editdlrm
lvmsadc28628720755editdlrm
lvmsar28628720755editdlrm
lvreduce28628720755editdlrm
lvremove28628720755editdlrm
lvrename28628720755editdlrm
lvresize28628720755editdlrm
lvs28628720755editdlrm
lvscan28628720755editdlrm
make-bcache227600755editdlrm
mdadm6038000755editdlrm
mdmon3333040755editdlrm
mkdosfs353280755editdlrm
mke2fs1378480755editdlrm
mkfs145680755editdlrm
mkfs.bfs350480755editdlrm
mkfs.btrfs4623680755editdlrm
mkfs.cramfs431680755editdlrm
mkfs.ext21378480755editdlrm
mkfs.ext31378480755editdlrm
mkfs.ext41378480755editdlrm
mkfs.fat353280755editdlrm
mkfs.minix1087840755editdlrm
mkfs.msdos353280755editdlrm
mkfs.ntfs883360755editdlrm
mkfs.vfat353280755editdlrm
mkfs.xfs3750320755editdlrm
mkhomedir_helper227040755editdlrm
mkinitramfs117920755editdlrm
mklost+found146480755editdlrm
mkntfs883360755editdlrm
mkswap1087840755editdlrm
modinfo1744240755editdlrm
modprobe1744240755editdlrm
mount.fuse144880755editdlrm
mount.lowntfs-3g1217120755editdlrm
mount.ntfs1627040755editdlrm
mount.ntfs-3g1627040755editdlrm
mount.vmhgfs475920755editdlrm
mpathpersist318000755editdlrm
multipath349680755editdlrm
multipathd1292240755editdlrm
mysqld674968480755editdlrm
netplan7980755editdlrm
newusers1011680755editdlrm
nfnl_osf187360755editdlrm
nginx11951520755editdlrm
nologin146400755editdlrm
ntfsclone596720755editdlrm
ntfscp432720755editdlrm
ntfslabel350800755editdlrm
ntfsresize801520755editdlrm
ntfsundelete555600755editdlrm
on_ac_power22280755editdlrm
overlayroot-chroot25100755editdlrm
ownership147920755editdlrm
pam-auth-update203350755editdlrm
pam_extrausers_chkpwd431682755editdlrm
pam_extrausers_update431680755editdlrm
pam_getenv28900755editdlrm
pam_tally145040755editdlrm
pam_tally2186000755editdlrm
pam_timestamp_check144880755editdlrm
parted883200755editdlrm
partprobe145680755editdlrm
pdata_tools13522880755editdlrm
php-fpm7.447673200755editdlrm
phpdismod72780755editdlrm
phpenmod72780755editdlrm
phpquery63890755editdlrm
pivot_root145680755editdlrm
plymouthd1499200755editdlrm
popcon-largest-unused5430755editdlrm
popularity-contest53530755editdlrm
poweroff9965840755editdlrm
pvchange28628720755editdlrm
pvck28628720755editdlrm
pvcreate28628720755editdlrm
pvdisplay28628720755editdlrm
pvmove28628720755editdlrm
pvremove28628720755editdlrm
pvresize28628720755editdlrm
pvs28628720755editdlrm
pvscan28628720755editdlrm
pwck595680755editdlrm
pwconv553440755editdlrm
pwunconv553520755editdlrm
raw145680755editdlrm
readprofile227920755editdlrm
reboot9965840755editdlrm
remove-shell9040755editdlrm
resize2fs679680755editdlrm
rmmod1744240755editdlrm
rmt599520755editdlrm
rmt-tar599520755editdlrm
rsyslogd7272480755editdlrm
rtacct494480755editdlrm
rtcwake473360755editdlrm
rtmon801200755editdlrm
runlevel9965840755editdlrm
runuser678160755editdlrm
service92620755editdlrm
setcap146480755editdlrm
setvesablank144080755editdlrm
setvtrgb144720755editdlrm
sfdisk1415440755editdlrm
sgdisk1950480755editdlrm
shadowconfig8850755editdlrm
shutdown9965840755editdlrm
sshd8845200755editdlrm
start-stop-daemon484560755editdlrm
sulogin514320755editdlrm
swaplabel186640755editdlrm
swapoff227600755editdlrm
swapon514320755editdlrm
switch_root145680755editdlrm
sysctl309600755editdlrm
tarcat9360755editdlrm
tc5421600755editdlrm
tcpdump10442320755editdlrm
telinit9965840755editdlrm
thin_check13522880755editdlrm
thin_delta13522880755editdlrm
thin_dump13522880755editdlrm
thin_ls13522880755editdlrm
thin_metadata_size13522880755editdlrm
thin_repair13522880755editdlrm
thin_restore13522880755editdlrm
thin_rmap13522880755editdlrm
thin_trim13522880755editdlrm
tipc1292640755editdlrm
tune2fs1091120755editdlrm
tzconfig1060755editdlrm
ufw49360755editdlrm
unix_chkpwd431602755editdlrm
unix_update431600755editdlrm
update-ca-certificates54180755editdlrm
update-grub640755editdlrm
update-grub-gfxpayload3010755editdlrm
update-grub2640755editdlrm
update-info-dir17000755editdlrm
update-initramfs74190755editdlrm
update-locale30630755editdlrm
update-mime94020755editdlrm
update-passwd353920755editdlrm
update-pciids17490755editdlrm
update-rc.d171610755editdlrm
update-secureboot-policy76050755editdlrm
upgrade-from-grub-legacy15240755editdlrm
useradd1471600755editdlrm
userdel1012640755editdlrm
usermod1428400755editdlrm
uuidd433200755editdlrm
validlocale17730755editdlrm
vcstime143280755editdlrm
veritysetup530640755editdlrm
vgcfgbackup28628720755editdlrm
vgcfgrestore28628720755editdlrm
vgchange28628720755editdlrm
vgck28628720755editdlrm
vgconvert28628720755editdlrm
vgcreate28628720755editdlrm
vgdisplay28628720755editdlrm
vgexport28628720755editdlrm
vgextend28628720755editdlrm
vgimport28628720755editdlrm
vgimportclone28628720755editdlrm
vgmerge28628720755editdlrm
vgmknodes28628720755editdlrm
vgreduce28628720755editdlrm
vgremove28628720755editdlrm
vgrename28628720755editdlrm
vgs28628720755editdlrm
vgscan28628720755editdlrm
vgsplit28628720755editdlrm
vigr702000755editdlrm
vipw702000755editdlrm
visudo2234320755editdlrm
vpddecode190240755editdlrm
wipefs473360755editdlrm
xfs_admin14150755editdlrm
xfs_bmap6950755editdlrm
xfs_copy924480755editdlrm
xfs_db6349760755editdlrm
xfs_estimate143440755editdlrm
xfs_freeze8000755editdlrm
xfs_fsr430320755editdlrm
xfs_growfs349600755editdlrm
xfs_info12940755editdlrm
xfs_io1918320755editdlrm
xfs_logprint759280755editdlrm
xfs_mdrestore307360755editdlrm
xfs_metadump7820755editdlrm
xfs_mkfile10400755editdlrm
xfs_ncheck6850755editdlrm
xfs_quota880720755editdlrm
xfs_repair5766640755editdlrm
xfs_rtcp184240755editdlrm
xfs_scrub1045600755editdlrm
xfs_scrub_all60050755editdlrm
xfs_spaceman431600755editdlrm
xtables-legacy-multi992960755editdlrm
xtables-monitor2204880755editdlrm
xtables-nft-multi2204880755editdlrm
zerofree102320755editdlrm
zic637840755editdlrm
zramctl1170880755editdlrm
Edit: /usr/sbin/ntfsundelete (55560B)
ELF><@@8 @@@@ bb66000 888 XXXDDStd888 PtdQtdRtd000/lib64/ld-linux-x86-64.so.2GNUGNUz N/&LGNU@@BD em@Pl( Q2"xEg\ x[qa@6X/ 'Q}F57~.#w> sTh~"hH@LBP >`libntfs-3g.so.883_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTablentfs_attr_closeAT_UNNAMEDntfs_inode_openntfs_log_parse_optionntfs_attr_put_search_ctxntfs_log_set_handlerntfs_attr_find_in_attrdefntfs_log_redirectntfs_mbstoucsntfs_umountntfs_cluster_readntfs_log_clear_levelsntfs_inode_closentfs_file_record_readntfs_attr_reinit_search_ctxntfs_mallocntfs_attr_openntfs_log_handler_outerrntfs_ucsnlenntfs_log_set_levelsntfs_attr_get_search_ctxntfs_mapping_pairs_decompressntfs_log_get_levelsntfs_callocntfs_attr_mst_preadntfs_mountNTFS_INDEX_I30ntfs_attr_preadntfs_check_if_mountedntfs_attr_lookupntfs_homentfs_ucstombslibc.so.6setlocaleftruncateoptindregexecregfree__stack_chk_fail__lxstatreallocstrtollstrftimestrtolmemset__errno_locationmemcpystrtoulregcompoptarg__snprintf_chkoptoptgetopt_longlocaltimestrchrutime__cxa_finalize__sprintf_chk__xstatopterr__libc_start_mainwritesnprintfGLIBC_2.14GLIBC_2.4GLIBC_2.3.4GLIBC_2.2.5ii ti ui 0p=80=@K`PUZflq x@~` @`ȥ (p $;A@DHBLEPF`Gh@C (08 @ H P X`hpx !"#%&'() *(+0,8-@.H/P0X1`2h3p4x56789:<=>?HHѿHtH5½%ýhhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Q%D% D%D%D%D%D%D%ݹD%չD%͹D%ŹD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݸD%ոD%͸D%ŸD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%EDAWAVE1AUATIUS1Hh|$H=(dH%(H$X111mHf ָHHD$@f5HD$8~ĸ$HD$|$E1LH HpAAt"Av^H y}JcH>tuu,$D =XZ D<$EiA H{ASE1PL +s1H5zxH=!5KE115(L {H5ExH=kH AH=HtH$XdH3%(HhD[]A\A]A^A_H=EA P > e=/=&==E11L pgH5GwH==PHxzE1PL q1H5wH=.5ٵE115L BzH5vH=~zH Qk= }OH=78g"=ǵuH=RHt$81HD$8HD$8H<%<=p`H=keH޴HWH=RDH-H41HHHHHjH<*uHuHc`Hd^. ? AύOHUHcL0 yHcHƀ*uA.*HD$8H-H:H1HHHl$HHHyLcHL$AHcIHHHH`HL$]HD$HHD$L9J\$ LILd$(IDt$$;HItHD6DvHA,H9EHt$1LAHT$HIƉL9L9DA-uHzHT$@H|$HH9 Ht$1H|$@HT$HH9 A9LgGHAGILH)qH۲L9J=˲\$ Dt$$Ld$(gHD$8H$AH=H:H=P=H=Ht$81HD$8iHD$8H8$NuH=e'H=_HRH=Hr C0==HcI|PHcE1L tAtH5qH=Qz1XZH=+HrS"HcH4HITsH=|L PtQE1RH5VqH=y1XZH~tE1H-tPL j1UH5qH=@yE11L jH5pH=yA\5E151L t5}H5pH=xUH A LE1fuG9= H=ٯHHH<HH|`1HH=?L gE117H5oH=Xx=l&H=VL gE1<QL hE1^H5oH=w13=$t ==>1LbL9L eE11\$ oH5#oDt$$H=zwLd$(|$~)E1+1L cfH5nH=MwH=@=O=L LgE11XH5nH=v'L fE1SH5TnH=v1=u =L dfE1NL\$ Dt$$E1Ld$(P?UL pH5mH=@v1]A]HH=ìHrE>`HD$HL-MGHD$H LHHHQ8"Ht$HH1HHHHHHD5H YsHcH>HcIDHMH= wf=$fHE1/zQH5lE15 H=sL okA,^_?HE1/,APL AkE15 H5jE11\$ IH5gDt$$H=foLd$(\$ Dt$$E1L iLd$(AWQWHiWL UjE1Sb H5f1H=mFAXAYDE1wLLID$@ID$Mt$IFL0Ht$02HhxH IHXH*!NbH}BHxu@pEAAF`HE(HMIF HE0IF(E8AF0HBzՔHHBzՔHH?HH)H*!NbHMIV8HHBzՔHH?HH)H*!NbHMIV@HHBzՔHH?HH)H*!NbHM IVHHHH?HH)1IVPIVX4D IFpEdHEs,IFhHHsH1ɾH~IHUS,HHIM#~hLHBHEH1%IHHƿ0HD$00HH*!NbHL<HBzՔIwHHH?HH)I;V8AF`A8GALD$0H\$8LH޿0S0HPHPAA:V`A:WALBAD$Hf.HE1H=Rf1AWL RMH5C^_AXLHft$(Lt$LIt$P1HHHL-NbfDAGIF8AGLIF`1HLIT$@H|$ IFPIF@I9F8IMF8I>H9HLID$@ID$(Mt$(IFL0H/IHhIHx1A‰P$AG AN(AF,Aw @u19IG(IF0IG0IF8IG8IF@IGHIFH$A Av 1IVLI~%x AV$ME1 H5\H=jd1SАHX|$,HHL[]A\A]A^A_DIHD$0H\$8L#HD$0p@1IVpHxBIFpfDE11L JH5\H=cfLMl$PL-HL)PXA;UAM[9HcED5Ht$E|5ADD$ EBDz9vx HH`Ht$Dx1HPXDD$ I|5DHxD@`HEXHt4HYE1PL '[H5[1H=bHEXZYID$0LL,HH*!NbHHBzՔHLAA8IE0LHLI?HL)LAHU8ILHLI?HL)LAHU@IHy LHHLI?HL)HUHHH4:H?HH)HuPL+HtPHHP(H@0HU HE(ID$H|$Il$H}LHEH(fIH\$8LLzE11H=aL IH5Y_HgE1{1L IH5YH=a.Lt$E11H=caL HH5MYLE1x1L HH5#YH=/aDE1yHL GE11AUZH5XH=`H)LE1AZA[&DE1T1L zGH5XH=`7LE1L H1H5SXH=/`H)E11L GH5XH=`E1C1L FH5WH=_ML }FE1MH5WH=_eLE1DAUATUSHHH(dH%(HD$1HGHWHH{HHC LC EA A!{LEAADL9..E11ACAE @HP@H9P8HMP8HH9HLL9t4Hxu݃x$P(RҋP,AEҋPXAEA9DL@HC0HVHHDHE1P1QUAQL GASWH=^VH5vVAR3 HPHD$dH3%(uH([]A\A]Ð..E11f.UE1HlH5V1L @VHWH=c]=XHZ1]BWAWAVAUATUSH(H|$HIHOLL$ HG HW HT$H$H96H$X,H$DX(EH$h$H$LhPMI]HM}E1IIItWILL9,@IAL9tLL`-uIL9uI]IH~SM}IuHE1H=K\1SIL SFH5T7EeI]_AXHAEkdAH$BXT$ 9M‰D$ H$HH$H9D$HE1D$L vTH5 TH=[P1XZD$ H([]A\A]A^A_@E11L jDH5SH=\[gifE11L jDH5SH=,[79fE11L DH5`SH=Z fE11L BDH50SH=ZH$D$ d@XdD$ HL DE11SH5RH=yZI](AYEeAZHRM} IHE1HD$ H5RL vDH='Z01.Y^.E11L CH5WRH=YE11L wRH5)RH=YD$ ff.AWE1AVL RIH5QAUATUSH0dH%(HD$ 17H=KYLl$aA~LH)RHRL LRH5QH=YHDE1 H$1I~3HQLHE11L Q"L,$H5(QH=XEVHAXAYE^I^M~L%PH-XL9f.@N?L SE1LH?18D)EtLHP1HXZL9aHCH5KHL LZHHDHE1LP1E1L[L LH1K$XZ#L LE1LH\1C(L mLE1LH]1^C,L MLE1LH^12DAfpLMRE1nH1HCPY^LIHPH@L LE1LH`1}f.E11xL J<H5IH=lQHD$dH3%(uEH([]A\A]A^A_E1%1L ;H5IH=Q7tff.fAVAUATUSHtSAAAHLI9HAt HxDHtD)mHDI[D]A\A]A^AD[]A\A]A^AWAVAUATIUSHdH%(H$1HHJHDHZIH6RLJVL1HXZLUH!%tILDHUHDL@ǿHL)ÅuYAL=9JA)HcMcLfLH1AMH~LLNu~LH!ʁ t€DHHHD@HL)H$dH34%(uaHĨ[]A\A]A^A_HLzIVHtHILTIRHHIL1ff.AWAVAUATUHSHHdH%(H$1HD$H;HxP0f=:E(HHD$ IIH HD$H@P@tbE11L HH5lFH=MD-EE11L yHH53FH=MH|$HMAŅHL$H$HT$(HA HI HD$8HL$H9H5^HH\$HL$(H=<HSDk$EHD$HXPHDH{H|$(WAƅH{LkuMHC1HD$0LIHL$0HH'HHHcHD$H9MBfLHH H$DLDA9MIHH9\$HHOt5iu5HT$ LDLD/A9vL GE1UD5H|$E;fE1B1L FH5@DH=KHT$ 1LHL$0E(HAH~61DLDA9OHL$0E(H\$ HAH9|fDHD$0HD$0H@HuLE1h1L FH5CH=KL *t\HD$xXdu(HP0Hp8H9|HыE(H)H9 HH9<E1~1L 6H5?CH=JDE11L EH5CH=rJ{H|$(AŅNE11L =EH5BH=/JjH\$DHC8Hs`HD$T$,H;C8Dx8HD$H|$(Ht$@H@HD$@HD$HHD$HL$H@HQ0H HL 86E1t$0H5BH=IP1RH HD$HHD$H9D$8AHD$Hp0HLH\$P1LCH D!HH@HL E4E11SE1H5pAH=HA_XH$dH3%(%HĘD[]A\A]A^A_lfDE11L 3H5AH=lHLH|$|L CE1[H=5HH5@1gDE1f.L "CE1`f.E11L 1H5`@H=GNfLH|$^ft$(L U4E11RH5 @H=wGXZHL %3E11AU!H5?H=>GyHT$05LLkE(AYAZIH01EIHKE(L|$ HI9~DLDA9vL AE1'E1 1L AH5(?H=FHE12PL i2H5>1H=aFHT$05~LHL$@E(_AXHAH1DLD?A9eHL$0E(IH\$ HAH9|E11L H2H5f>H=E E11L z/H58>H=E&L #1E11E1H5>H=sEEIHL ;@E1t$0H5=H=4E1mA[[1L 0@E1FHL ?E1t$0E11L ?H5W=H=DD6L ?E18\DE1}1L ?H5<H=_D蚿E1ff.fAWAVAUATUSHdH%(H$1HIH1Hx{HD$ HHD$ IN H@@HD$8HHD$0HH5{Ht!={H|$P҃5IAN5E1L 0H5;H=DH@@HHD$1茾E11L 0H5;H=CcH|$8HD$HL|$PD$H\$HHT$8 Hl$0H|$ H)HH HHO?H&HHHl$H$HD$@HD$(H$HXH;\$@HLIHVHzH~I;E}bH=bzDMeIEI9tGH\$(LI@HsXHtE111L谿/HL9uH\$(DLHH9$HHD$HD$H$H;D$@HD$H HD$HH9D$8@H E1D$$L /H5 :H=&BP1讼XZH=|yt H|$PHH|$0~IfH|$ ,H$dH3%(jD$HĨ[]A\A]A^A_H\$(f.HAyHt I;E@H3yHt I;E@LLAċxD9~ DxLEt3.=xt3xujED$[=\xuIuLE1 1L ;H58H=@eD9'AQE1L -1SH5{8H=@"AZA[E11L -H5I8H\$(H=?E11L ,H58H=2@轺D$QH57E1AuH=@ L -脺^_D$D$L ,E1H57H=?HtxHH$Aąx;DhH}McM9|L荻HHt_HEH4$LպH<$ܸHD$dH3%(u1HD[]A\A]fD賻AAvAATUSHdH%(H$1HD$HHHT$HuHt$H?AD$t:BE1@1L 7H5=H=MfH$dH3%(HİD[]A\f.8tFHL #?E1SH=FMH5b=1E1腷_AX軷E1HL @=E1SDHE11SH5 =L >H=L"Y^E1@1L 6H5<AH=L@HE1E1H>L 6PH5<H=_L1訶E11L o?H5^<H=4LXZL 9>E11E1乀H5#<H=KDO f.ATUSHHHnHH軸IH@"t1t1E181L EH5;H=MK踵L[]A\H4E1HCL N5PH5\;H=K1{1L聵XZE1[]LA\@蛵E1L[]A\f.HE1H=J1SL ;H5:M_AXto_gHE1*HBL t4PfDH5|:H=2J1蛴Y^HL =E1S HE1"Ha>L 4PHE1$H>L 3PHE1&HE?L 3P`HE1(H;L 3P;ff.AUATUSHdH%(HD$1H$HtmHHteAH1H]IH̳8"H $HEtVt^-胳1HL$dH3 %(H[]A\A]@<-tLeMiMiMiMiHL 8E1ScH58H=)H1貲X1ZnHL BE1uQfDE1h1L &H5>8H=G_1H)SL f8E1zQhf.AVAUATAUSH dH%(HD$1HHHHI-I轲HH9t%Ht$DHtqHuHD$H fHD${uYHHD$IEIH\$dH3%(uOH []A\A]A^f英1ː1@Ht$H{DGtHD$HT$fSHt&V11HjE1E11ZYuHC[1[Ð1[ff.ATUHHt8A1ֳHHtFDHHI蘲HL]A\D賰E1HL]A\L @E11E1乀H5 6H=E,f.AWAVAUATUSHH<$Ht$T$dH%(H$1HHH$Hl$0D$HHl$ AH@Hl$(HD$1HH<$1DzIHADL0cHXHD{AE9H}L3Ht 8HEs@1H{BHΰxJED[1H$dH3%(SH[]A\A]A^A_f.E1@1L 2?H54H=C跮-HHH$L4HHL1XH]ELpDL$Et H<$HL!HH|$LiH$HtND$D$HhHaE11jL >H53H=CۭXZ1HE1H=BSL 3YH5~3覭_AXD|$Ld$ 1L-3H$ fDHHHt;HHcEH|$PA)HMIcA/1#Y^A9~8HCI9uH\$ Hl$(HàH}HH9uE1l1L Q3H52H=B۬E1&1L =H52H=A谬1t@AUATUSHdH%(HD$1HIHH6AЬHHHH$߬1HHЭHH $IcH+1L D9Ws @{ Hc1A)IHH$IcHuML $L1LC2HH艫H<$莫A9CHoE11L /H5.H==fUSHHHH dHHH!H-eH9|7HH9}+H؉ٺH%D!H[]D1@HHHHHH5_dHHzHyE1)1L .H5-H=<PtSHH_HHH { H uuHwHt.HF Ht%HH!H vZH u uP0HtAHHH#1HtH v{ 1H ![D[Ð[fk[ff.ff.SHt&H dH@HX[fD 1[ÐHtUHHHtEH]錦@AVAUATUSHdH%(HD$1HHHHt HCH{HO5Hh@HCHHpHsH9I'@HsH{C=HCH@Hp" IHCHp IHCHpSM@у@MEщSHtKH{tK1貨IHPE1E1j1ɺH5au_AXuKLRH{9C] CH{趧NHCHCHpHsH9H{CAăCEC4HCIHHCI$HCID$x, H{ID$HHC1ɾH`H試IHHSHCLHsHJP,H^IHC@,I9LåCH{E1HAHD$dH3%(6HD[]A\A]A^fDCDʀHsH{1HH$uZH$HCHt HR HuLHL C*E1PH5/)H=81NAYAZH<$16@HCfL!L 4E1RPDH{HsL 41E1H5(H=7ТA[[HspE1L )H5q(1H=U7萢ˢD XZAiAtL :#E1[H5&(H= 71A?@HsE1H5'L %)a1H=6 LA謣Y^L .2E17AL (E1LV{f.AWL=VAVIAUIATAUH-VSL)H_Ht1LLDAHH9uH[]A\A]A^A_ff.HHERROR: Couldn't allocate memory in read_record() ERROR: Couldn't open $MFT/$DATAERROR: Couldn't read MFT Record %lld. ERROR: Couldn't allocate memory in get_filenames(). ERROR: Couldn't allocate memory in get_parent_name() ERROR: Couldn't create a search context. ERROR: Couldn't get filenames. ERROR: Couldn't allocate memory in get_data(). ERROR: Cannot translate name into current locale. ERROR: Couldn't get data streams. %-8lld %c%c%c%c %3d%% %s %9lld %s File is encrypted, recovery is impossible. File is compressed, recovery not yet implemented. File is resident, therefore recoverable. File has no runlist, hence no data. File has an empty runlist, hence no data. Missing segment at beginning, %lld clusters Missing segment at end, %lld clusters ERROR: Unexpected error whilst calculating percentage for inode %lld Metadata may span more than one MFT record ________________________________________ Amount potentially recoverable %d%% Can't read info from mft record %lld. File has no recoverable data. File has no data. There is nothing to recover. Missing segment at beginning, %lld clusters. Missing segment at end, %lld clusters. Truncation not performed because file has an inconsistent $MFT record. ERROR: Couldn't set the file's date and time Undeleted '%s:%s' successfully to %s. Undeleted '%s' successfully to %s. ERROR: Couldn't open $MFT/$BITMAPERROR: Couldn't allocate memory in scan_disk() ERROR: Couldn't create a regex. Inode Flags %%age Date Time Size Filename ----------------------------------------------------------------------- Couldn't read MFT Record %lld. Couldn't compare filename with regexERROR: Failed to undelete inode %lli ! Files with potentially recoverable content: %d ERROR: Couldn't alloc mem for parsing inodes! ERROR: Missing new value at end of input! Pattern to transform is empty Couldn't allocate memory in transform() Internal error, strtoll didn't return a suffix. Invalid time suffix '%s'. Use Y, M, W, D or H. Option '%s' requires an argument. -b:Cc:d:fh?i:m:o:OPp:sS:t:TuqvVYou must specify exactly one device. Scan can only be used with --percent, --match, --ignore-case, --size and --time. The --case option doesn't make sense without the --match option Copy can only be used with --output and --destination. You can only select one of Scan, Undelete or Copy. Percentage value must be in the range 0 - 100. You may not use --quiet and --verbose at the same time. You may not use --quiet when scanning a volume. To use --parent, you must also use --verbose. %s v%s (libntfs-3g) - Recover deleted files from an NTFS Volume. Copyright (c) 2002-2005 Richard Russon Copyright (c) 2004-2005 Holger Ohmacht Copyright (c) 2005 Anton Altaparmakov Copyright (c) 2007 Yura Pakhuchiy Copyright (c) 2013-2018 Jean-Pierre Andre Usage: %s [options] device -s, --scan Scan for files (default) -p, --percentage NUM Minimum percentage recoverable -m, --match PATTERN Only work on files with matching names -C, --case Case sensitive matching -S, --size RANGE Match files of this size -t, --time SINCE Last referenced since this time -u, --undelete Undelete mode -i, --inodes RANGE Recover these inodes -o, --output FILE Save with this filename -O, --optimistic Undelete in-use clusters as well -d, --destination DIR Destination directory -b, --byte NUM Fill missing parts with this byte -T, --truncate Truncate 100%% recoverable file to exact size. -P, --parent Show parent directory -c, --copy RANGE Write a range of MFT records to a file -f, --force Use less caution -q, --quiet Less output -v, --verbose More output -V, --version Display version information -h, --help Display this help ERROR: Failed to scan device '%s'. ERROR: NO inode(s) AND NO match-regex specified! Inode Flags %%age Date Size Filename Couldn't allocate memory in copy_mft() Couldn't create output file '%s'ERROR: Failed to read MFT blocks %lld-%lld. ntfsundelete.cRecovered file name %s %F %RCreating file: %s File has no data streams. File is %d%% recoverable DirectoryFileMFT Record %lld Type: %s Date: %s Data Streams: Filename: (%d) %s File Flags: System Directory Sparse Reparse Compressed Encrypted Parent: %s Size alloc: %lld Size data: %lld Date C: %s Date A: %s Date M: %s Date R: %s Name: %s Resident Compressed Encrypted Size init: %lld Size vcn: %lld Data runs: None %lld @ %lld unknown%s/%s:%s%s/%s.%dRecord is in use by the mft Forced to continue. %s%lldCouldn't create file %sFile has resident data. Write failedClose failedFile has a sparse section. Read failedTruncation failedmftUnknown option '%s'. ERROR: Invalid Number: %s ERROR: Missing range end! Invalid time '%s'. 2017.3.23AR.3ntfsundelete %s %s%s Range to copy is backwards. Couldn't open $MFT/$DATACouldn't read MFT Record %lldRead %lld MFT Records MFT extracted to file %s bytecasecopydestinationforcehelpinodesmatchoptimisticoutputparentpercentagequietscansizetimetruncateverboseversionމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމމdމމމXމމމމމމމމމމމ< މމۈψމƈމމމމމމމމމމމ~bAމ5މ,{މމމމ.މτ=== =========================== ==============copy_mfthandle_undeleteset_dateopen_fileundelete_filelist_recorddump_recordcalc_percentagename_matchget_datarescue_nameverify_parentget_parent_nameget_filenamesread_recordscan_diskusageversionparse_timetransformparse_inode_argparse_optionsmainutils.cThe device %s doesn't exist Failed to mount '%s'Invalid size '%s'. Invalid number '%.*s'. Couldn't open inode %llu. %c%sPathname was truncated. (%s)Couldn't open $BitmapCouldn't read $BitmapCouldn't read $MFT/$BITMAPError reading inode %lld. Out of memory. Aborting. Couldn't read MFT Record %lluError closing inode %llu. Failed to set locale, using default '%s'. Error getting information about %sFailed to determine whether %s is mountedUse the force option to ignore this error. Access is denied because the NTFS volume is already exclusively opened. The volume may be already mounted, or another software may use it which could be identified for example by the help of the 'fuser' command. You can use force option to avoid this check, but this is not recommended and may lead to data corruption. The device '%s' doesn't have a valid NTFS. Maybe you selected the wrong device? Or the whole disk instead of a partition (e.g. /dev/hda, not /dev/hda1)? Or the other way around? NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE! The usage of the /f parameter is very IMPORTANT! No modification was made to NTFS by this software. The NTFS partition is hibernated. Please resume Windows and turned it off properly, so mounting could be done safely. Access is denied because the NTFS journal file is unclean. Choices are: A) Shutdown Windows properly. B) Click the 'Safely Remove Hardware' icon in the Windows taskbar notification area before disconnecting the device. C) Use 'Eject' from Windows Explorer to safely remove the device. D) If you ran chkdsk previously then boot Windows again which will automatically initialize the journal. E) Submit 'force' option (WARNING: This solution it not recommended). F) ntfsmount: Mount the volume read-only by using the 'ro' mount option. You seem to have a SoftRAID/FakeRAID hardware and must use an activated, different device under /dev/mapper, (e.g. /dev/mapper/nvidia_eahaabcc1) to mount NTFS. Please see the 'dmraid' documentation for help. Volume is scheduled for check. Please boot into Windows TWICE, or use the 'force' option. NOTE: If you had not scheduled check and last time accessed this volume using ntfsmount and shutdown system properly, then init scripts in your distribution are broken. Please report to your distribution developers (NOT to us!) that init scripts kill ntfsmount or mount.ntfs-fuse during shutdown instead of proper umount. WARNING: Dirty volume mount was forced by the 'force' mount option. Invalid size suffix '%s'. Use T, G, M, or K. Couldn't create a search context. Couldn't translate filename to current locale. The directory structure is too deep (over %d) nested directories. Couldn't translate attribute type to current locale. Unknown attribute type 0x%02x Attribute type was truncated. Couldn't translate attribute name to current locale. Attribute name was truncated. Error reading inode %llu. Aborting. Inode %lld is an extent of inode %lld. This program is free software, released under the GNU General Public License and you are welcome to redistribute it under certain conditions. It comes with ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be found in the file "COPYING" distributed with this program, or online at: http://www.gnu.org/copyleft/gpl.html Developers' email address: ntfs-3g-devel@lists.sf.net Tftm_ftm_mft_next_recordutils_mftrec_in_useutils_cluster_in_useutils_attr_get_nameutils_inode_get_namefind_first_attributeutils_parse_sizeutils_mount_volumeutils_valid_deviceutils_set_locale;",fLitimP4l̏d<lpH|\,|DFAA  ABA (4 صEAD ^ AAF (` E F F B F J Q ` \?Ed G N |)JU FBB A(A0D@ HMPTHB@p 0D(A BBBG XHPP\HB@m HFPG THCPkHA@QHCPrHA@PHCPxHA@Dl eFIE E(D0H8G@n8A0A(B BBB p=0=KbPCUcZdfflhqixm~OoPpqsStTuvȥV 08o   p oo0ooo0 @ P ` p !! !0!@!P!`!p!!!!!!!!!"" "0"@"P"`"p"""""""""## #0#@#P#`#p######pf3877a860dcc4e0f89aa2f05268a0413e84ce3.debug#S-.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.data.bss.gnu_debuglink 88 &XX$9|| GoDQ Y aono00P}Bp  ####''e[ ) 0088@@ 0 @0 04d