A customer of mine brought me a 2TB crashed harddrive. The drive itself is not damaged physically, but the file tables (MFT / NTFS) are corrupt so there is zero ability to recover files with their original names.
The contents of the drive is not important, except for the customer’s wallet.dat file which contains “a substantial amount of bitcoins” (sic).
Finding this file among 2TB of data is pretty much a needle in a haystack.
So, question: Does wallet.dat contain anything unique, anything that can be binary searched for, anything that makes it say “hey, I’m wallet.dat!”?