All files with clusters allocated somewhere seem corrupted.

[pedro civa]

Hello, I've used recuva to recover some unity .cs (c# scripts) files. All the files that had this comment seem to be corrupted. Can someone explain?

Screenshots of an example of a 'corrupted' file.As you can see the header shows some random information, not code.

https://gyazo.com/1e7a18d8c0efd71ebb75a214f4ed4754

https://gyazo.com/d29fa02a378b35be81a375b86f8009e6

Screenshots of a file that I was able to recover and use.

https://gyazo.com/cf2559420ec972253a531758db92a769

https://gyazo.com/65e4951dbea1e193a6b173fb81aa2430

Thanks In advance. 

 

If its of any useful information, TRIMM is disabled.

Edited October 27, 2020 by pedro civa

[Augeas]

In the first example the file's data is held in a separate cluster. In the second the data is held entirely within the MFT record for the file. The cluster can be overwritten by another file allocation, but the MFT record can't be overwritten until that record is reused.

I don't know, of course, what has happened to the data cluster. It could have been reused by a temp file (internet search etc) which has been subsequently deleted. In any event the old data has almost certainly gone.