PhoinixDR
Recover lost files.
Understand your chances.
Evidence-driven recovery from disks, USB sticks, SD cards and disk images. Nothing is ever written to the source.
Single executable, no installation. Windows 10 (21H2+) or 11. Latest release: see GitHub. Checksums and details.
PhoinixDR is provided “as is” and is used entirely at your own risk. Data recovery is inherently uncertain, and improper use may result in permanent data loss or damage. Always work from a copy or disk image when possible and recover files to a different storage device.
Recover deleted files
Native readers for each filesystem find deleted records, reconstruct names and paths, and on ext3/ext4 pull layouts back out of the journal. Anything without a recognisable filesystem is carved by signature.
Know before you recover
PHOINIX doesn't just find deleted files. It analyzes the evidence that determines whether the original data is still recoverable.
Every file carries a recovery likelihood and an assessment confidence, and every number comes with its reasons: is the layout known, are its clusters reused, does the content still validate as a JPEG, a PDF, a ZIP?
One engine, every situation
Quick Scan
Deleted files through filesystem metadata: names, paths, timestamps and layouts in seconds.
Deep Scan
Carves the unallocated space by signature and validates each file's structure. Finds what metadata no longer describes.
Partition Recovery
Finds lost volumes by their own structures and mounts them virtually. The partition table is never rewritten.
File Carving
JPEG, PNG, GIF, BMP, PDF, ZIP and Office, SQLite, RIFF, MP4, 7z, and your own signatures.
Disk Images
RAW, split RAW, E01 and split E01, VHD, VHDX, VMDK, with hash verification and case reports for forensic work.
Command line
The same engine as phoinix: scriptable, JSON everywhere, explainable scores.
Open source by design
Read-only towards the source, explainable scores, deterministic fixtures with cryptographic ground truth, decision records for every architectural choice. PHOINIX is built in the open so that the code and the decisions behind it can be inspected and challenged. Yes, PHOINIX is vibecoded, and deliberately so; read where it came from.