Undeleting a file overwritten with mv
Any reason the data couldn't be carved out with photorec[0]? It even has flv built in, but even if it didn't, creating new types isn't hard.  This type of datacarving seems exactly what that software was designed for, and it does so quickly with a wizard.The taking of the 500K bytes for the has does seem like a smart way to differentiate between the undeleted files and the deleted ones, I'll keep that in mind if I am ever in such a crazy situation and it would be helpful.[0] https://www.cgsecurity.org/wiki/PhotoRec#How_PhotoRec_works