Searching for wallet using 0201010420

[Sdlooking92020]

Hello, I am looking for a wallet I think I had back a few years ago. Looking for those magic numbers and I found a couple of hundred. I am copying the 64 characters after these numbers I noticed that hundreds of them have code beginning with D03 and ending in 47. Is this normal for a wallet? Or is it a macbook thing?

[1714966864]

1714966864

[achow101]

What makes you think that that string is relevant for a wallet?

[Sdlooking92020]

What makes you think that that string is relevant for a wallet?

From what I've understood reading through some posts, those are a set of magic numbers and the next 64 characters should have a bitcoin key. Is this wrong? I'm afraid I don't totally understand.

[achow101]

It depends on the software that you think you were using.

Also, that sequence is not specific enough. It's part of a larger standard called DER encoding which a lot of other software may be using. That sequence could show up in anything that's been DER encoded.

[Sdlooking92020]

It depends on the software that you think you were using.

Also, that sequence is not specific enough. It's part of a larger standard called DER encoding which a lot of other software may be using. That sequence could show up in anything that's been DER encoded.

I am 99.99 % the name of the file is wallet.dat. That would make it bitcoin core right? Do you which numbers I would need to scrub my drive for?

[achow101]

wallet.dat is Bitcoin Core.

It depends on what data you have and how intact you think the data is. Is it a bunch of unnamed files and you're trying to figure out which may be a wallet? Or are you looking at raw data from the drive directly (e.g. in an image file)? Or something else?

[Sdlooking92020]

wallet.dat is Bitcoin Core.

It depends on what data you have and how intact you think the data is. Is it a bunch of unnamed files and you're trying to figure out which may be a wallet? Or are you looking at raw data from the drive directly (e.g. in an image file)? Or something else?

I am using winhex. I have the drives and made images out of them. I had the file on a flash drive and probably in several time machine backups. I since deleted the backups. I figure scanning the drive images for those magic numbers I have been reading about might help me find those private keys.

[SquirrelJulietGarden]

Did you try to use pywallet or btcrecover?

Pywallet 2.2: manage your wallet
https://www.devtome.com/doku.php?id=pywallet

BTCrecover
Their guide: https://github.com/gurnec/btcrecover/blob/master/TUTORIAL.md#btcrecover-tutorial