Quote from: litecoin_messiah on Today at 03:37:01 AM

Create a USB with kali linux, (it comes prebundled with testdisk and other tools)

start kali linux live usb on the device and create a system image with testdisk of the hard disk the wallet existed in.

if you value any chance of recovering crypto (and there is loads of methods yet untested such as https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15947 that shows bitcoin-qt creates a crash log with current state i believe of the event of crashing. and the file won't show up with normal scans.

Whatever it is you want to do, if you dont make a clone of this hard disk you will regret it. i have done this countless times.

The cloned file image of the disk can be used just as the hard drive without any of the weakness. imagine loading it in nvme ssd and now you have 100x the read/write speed or more Wink

"5. Delivery it to the pros at Wallet Recovery Services (not sure if they accept forensic cases)" i hear this guy is a selective scammer, he shows up everywhere you look for wallet recovery but he can't do shit.

Thank you sir!

I will make sure to take my time before cloning the disk to make sure I am not further messing it. I understand the point on faster medium such as NVME
Would you recommend I look into something else about cloning? Even if I have to read a few extra things its an investment of time I would be willing to do.

Regarding the Wallet Recovery Services, I believe this is related to a trusted member DaveF. I am obviously a few steps away from delivering this to anyone but would appreciate any further inputs here.