Update:

Tried DMDE recovery tool. I find this to be a really powerful tool to search for .dat files.

My programmer friend wants to trace the path to the Bitcoin folder in Linux. He gave me a series of commands to run.

We first want to search the word Bitcoin. This hard drive was also stopped being used in early 2010.

Sure enough I got a number of hits for the word Bitcoin, which, correlates to what we discovered earlier with one of the possible wallet files hex code read out showing the pathway for Bitcoin with wallet.dat.

Tracing the word using Grep command and than finding BlockOffset than running debugfs. Though icheck and inode don't work in NTFS on Linux.

We're trying to find the sector block where the Bitcoin folder/wallet file starts.  Any ideas much appreciated!

https://share.icloud.com/photos/01cQfRfdd9Evfni_X7oKR-oRQd

https://share.icloud.com/photos/01cQfRfdd9Evfni_X7oKR-oRQ