$ od -x -N 72 forhallyn-trusty-amd64.img.corrupted | grep '[1-9]*' refcount_table_cluster 0000 0100 0000000 4651 fb49 0000 0200 0000 0000 0000 0000 0000020 0000 0000 0000 1000 0000 0200 0000 0000 0000040 0000 0000 0000 1000 0000 0000 0300 0000 0000060 0000 0000 0100 0000 0000 0100 0000 0100 0000100 0000 0000 0500 0000
nb_snapshots = 0000 0100 snapshots_offset = 0000 0000 0500 0000
$ od -x -N 72 forhallyn-trusty-amd64.img | grep '[1-9]*' 0000000 4651 fb49 0000 0200 0000 0000 0000 0000 0000020 0000 0000 0000 1000 0000 0200 0000 0000 0000040 0000 0000 0000 1000 0000 0000 0300 0000 0000060 0000 0000 0100 0000 0000 0100 0000 0000 0000100 0000 0000 0000 0000
nb_snapshots = 0000 0000 snapshots_offset = 0000 0000 0000 0000
Looking at just the QCowHeader (and not de-scrambling BE format), I see the following differences; however I think this looks 'ok', I'll need to examine the rest of the file.
$ od -x -N 72 forhallyn- trusty- amd64.img. corrupted | grep '[1-9]*' table_cluster 0000 0100
refcount_
0000000 4651 fb49 0000 0200 0000 0000 0000 0000
0000020 0000 0000 0000 1000 0000 0200 0000 0000
0000040 0000 0000 0000 1000 0000 0000 0300 0000
0000060 0000 0000 0100 0000 0000 0100 0000 0100
0000100 0000 0000 0500 0000
nb_snapshots = 0000 0100
snapshots_offset = 0000 0000 0500 0000
$ od -x -N 72 forhallyn- trusty- amd64.img | grep '[1-9]*'
0000000 4651 fb49 0000 0200 0000 0000 0000 0000
0000020 0000 0000 0000 1000 0000 0200 0000 0000
0000040 0000 0000 0000 1000 0000 0000 0300 0000
0000060 0000 0000 0100 0000 0000 0100 0000 0000
0000100 0000 0000 0000 0000
nb_snapshots = 0000 0000
snapshots_offset = 0000 0000 0000 0000
Looking at just the QCowHeader (and not de-scrambling BE format), I see the following differences; however I think this looks 'ok', I'll need to examine the rest of the file.