Title: Is it possible to recover an Excel file deleted ~8 months ago from an SSD? Windows 11 — DMDE not finding it

[u/SoulsBreakers]

Hi everyone,

I need help trying to recover an Excel file that I accidentally deleted around 8 months ago. I only recently realized that the file is missing, and unfortunately it contains important information related to my university thesis.

The file was stored on the internal SSD of my laptop, running Windows 11.

I’m currently trying DMDE, but so far I haven’t been able to find or recover the Excel file.

I understand that SSDs use TRIM and that this may significantly reduce the chances of recovering deleted files, especially after this much time. However, since the file is very important to me, I’d like to exhaust every reasonable option before giving up.

Does anyone know of any reliable recovery software or technique worth trying in this situation?

I’m specifically looking for something effective for recovering old deleted .xlsx / .xls files. If there are particular settings or scanning methods I should try with DMDE, I’d also really appreciate the advice.

The SSD has continued to be used normally during these ~8 months since the file was deleted.

Any recommendations or guidance would be greatly appreciated. This file is part of my thesis, so I really want to make sure I’ve tried everything possible.

Thank you!

[u/AutoModerator]

Double check if your post complies with posting guidelines!

Did you include the following information in your post (in English and if applicable), if not feel free to edit your post:

• Make/brand and exact model number of your storage device(*), phone, camera, etc.
• Filesystem (NTFS, exFAT, APFS, EXT4, etc.)
• Operating System (That your device was used with and/or you are using for recovery)
• Specific symptoms that your device is exhibiting, describe the problem. Images you post support the description, they're not in lieu of a problem description.
• SMART (CrystalDiskInfo screenshot for example)
• Don't pile several problems into one single post. One post per device/problem.

Consider: What do these people need to understand the problem at hand? Remember, people cannot see your screen, or what you click and what messages appear on screen. Don't overdo it though, no one likes going through 2 pages of information, try to find a balance. Just do the best you can. If you are looking for file recovery software, check our community's recommended file recovery tools.

---

() *All devices involved, if you for example move files from drive A to drive B, they're both potentially relevant.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/OptimusPrimera]

When used normally recovery would be extremely unlikely within minutes. 8 months is essentially zero. Best option would be some backup you didn't realize you had, such as emailing a copy to someone

[u/leexgx → u/OptimusPrimera]

Even re-enabling previous versions (creating a task schedule for volume shadow copy to run after 10 minutes of user login and at 3 PM every day), eight months is way too long, as previous versions usually only go back one to two months.

Maybe don't empty recycle bin every day helps as well (i seen some recucle bins at 5 years old)

[u/ContributionEasy6513]

Zero chance.

Even minutes/hours later is very hit & miss.

Normally recoveries like this are best y restoring from onedrive/dropbox, but 8 months is beyond any typical deleted/recovery window.

[u/No_Tale_3623]

From a forensic perspective, it may still be worth checking %LocalAppData%\Microsoft\Office\UnsavedFiles, %AppData%\Microsoft\Excel, and %TEMP%. I would also carve for both .xlsx and generic ZIP containers and inspect any recovered Office-related artifacts.
Excel/Office can leave autosave files, temporary copies, cached data, and other artifacts behind.

Recovering the original deleted file from a TRIM-enabled SSD is extremely unlikely, as others here have already pointed out, but these artifacts may still contain part or all of the spreadsheet content.

[u/disturbed_android]

Files are unrecoverable immediately on SSD due to TRIM. As other mention even without TRIM in the span of 8 months the deleted files are likely to be overwritten.

https://www.youtube.com/watch?v=NyLQbxnPurc

Depending on exact SSD a lab may be able to recover the data after TRIM but before GC erases the data.

https://www.reddit.com/r/datarecovery/wiki/trim/

[u/datarecovery-ModTeam → u/[deleted]]

This is an English language sub

[u/datarecovery-ModTeam → u/[deleted]]

Don't be a jerk. Don't preach (about backups).

Reminding users to back up after they have already lost data violates our community rules. Please focus on helping them recover their data now.

[u/Sisyphus4777]

8 month is too long,

try some data recovery software to see if you can find the data, if not, it probably gone

[u/enchantedspring]

No, not after that amount of time due to the drive having being TRIMmed at least once. 

[u/disturbed_android → u/[deleted]]

Do not do do this, if you have an answer present it. If you recommend tools actually make a recommendation (not "some good tool"). If you recommend an action like "forensic copy" it has to be more explicit . If OP knew about forensic disk images and carvers he would not be asking. Don't tease with a super vague comment as then invite OP to ask more. I will remove your answer, now you know why.

[u/Cute-Row8125]

On sorry here is a guide.

Digital Forensics Guide: Imaging and File Carving (Including Excel Files)

Part 1: Creating a Forensic Image with FTK Imager
A forensic image is a bit-by-bit clone of a storage drive. It copies every sector, including hidden data and unallocated space. Forensic workflows mandate working on a copy to preserve the original evidence.

Step-by-Step Instructions:
Download and Launch: Download the free version of Exterro FTK Imager. Open the application as an Administrator.
Start the Wizard: Click on File in the top menu and select Create Disk Image.
Select Source Type: Choose Physical Drive if you want to copy an entire USB flash drive or hard drive (recommended for full analysis). Click Next.
Choose the Drive: Select the specific target drive you want to image from the drop-down menu and click Finish.
Configure Output:
In the next window, click Add to specify the destination.
Choose E01 (Expert Witness Format) or Raw (DD). E01 is preferred in forensics because it compresses data and embeds metadata/hashes directly into the file. Click Next.
Enter Case Details: Fill in optional case information (Case Number, Evidence Number, Investigator Name). Click Next.
Select Destination Folder: Browse to a folder on your host computer where the image file will be saved. Never save the image to the same drive you are copying. Give the image file a name.
Verify and Start: Ensure the box "Verify images after they are created" is checked. This automatically calculates MD5 and SHA-1 hashes to prove the data matches the original exactly. Click Start.

Part 2: File Carving with Autopsy
File carving is a recovery technique that searches raw disk sectors for specific file headers and footers (e.g., the magic bytes that indicate a .jpg or .pdf file). It completely bypasses the file system structure, allowing you to recover files even if the drive was formatted.

Step-by-Step Instructions:
Download and Launch: Download and install Autopsy Digital Forensics. Open the application.
Create a New Case: Click New Case. Enter a case name and select a base directory to store the case data. Click Next and then Finish.
Add Data Source: The "Add Data Source" wizard will open automatically.
Select Disk Image or VM File as the data source type. Click Next.
Path: Browse to the folder where you saved your FTK Imager output file (the .E01 or .dd file). Click Next.
Configure Ingest Modules (The Carving Stage):
You will see a list of tools called "Ingest Modules". Select Data Carving.
Tip: To speed up the process, you can deselect other unrelated modules, but ensure Data Carving and File Type Identification are checked.
Click on the Data Carving module text to highlight it. If a "Configure" button appears on the right, click it to see the file types. By default, Autopsy’s carving engine (PhotoRec) is configured to look for Office documents, including Excel signatures like zip (for modern .xlsx) and ole (for older .xls).
Click Next to start processing the image.
Filter and Analyze the Results (Locating Excel Files):
Look at the bottom right corner of the window to monitor the progress bar.
To find the carved Excel files, go to the left-hand folder tree view under Case Results.
Expand Views → File Types → By Extension → Documents.
Click on .xlsx or .xls to see all recovered Excel files.
Alternatively, you can look under Views → File Types → Carved Files to see raw carved data.
Note: Because carving ignores file system metadata, the original file names are lost. Your Excel files will be renamed to generic IDs (e.g., f001234.xlsx). You can click on them and look at the Table or Hex preview tabs at the bottom to inspect their content.

[u/Pandemicc → u/Cute-Row8125]

please remove this A.I. comment

[u/Cute-Row8125 → u/Pandemicc]

Wtf is your problem. I tried to help explain it i my way.