Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: Sdlooking92020 on November 16, 2023, 02:29:57 AM



Title: Searching for wallet using 0201010420
Post by: Sdlooking92020 on November 16, 2023, 02:29:57 AM
Hello, I am looking for a wallet I think I had back a few years ago. Looking for those magic numbers and I found a couple of hundred. I am copying the 64 characters after these numbers I noticed that hundreds of them have code beginning with D03 and ending in 47. Is this normal for a wallet? Or is it a macbook thing?


Title: Re: Searching for wallet using 0201010420
Post by: achow101 on November 16, 2023, 02:37:39 AM
What makes you think that that string is relevant for a wallet?


Title: Re: Searching for wallet using 0201010420
Post by: Sdlooking92020 on November 16, 2023, 03:26:32 AM
What makes you think that that string is relevant for a wallet?

From what I've understood reading through some posts, those are a set of magic numbers and the next 64 characters should have a bitcoin key. Is this wrong? I'm afraid I don't totally understand.


Title: Re: Searching for wallet using 0201010420
Post by: achow101 on November 16, 2023, 04:19:25 AM
It depends on the software that you think you were using.

Also, that sequence is not specific enough. It's part of a larger standard called DER encoding which a lot of other software may be using. That sequence could show up in anything that's been DER encoded.


Title: Re: Searching for wallet using 0201010420
Post by: Sdlooking92020 on November 16, 2023, 04:21:38 AM
It depends on the software that you think you were using.

Also, that sequence is not specific enough. It's part of a larger standard called DER encoding which a lot of other software may be using. That sequence could show up in anything that's been DER encoded.

I am 99.99 % the name of the file is wallet.dat. That would make it bitcoin core right? Do you which numbers I would need to scrub my drive for?


Title: Re: Searching for wallet using 0201010420
Post by: achow101 on November 16, 2023, 04:33:08 AM
wallet.dat is Bitcoin Core.

It depends on what data you have and how intact you think the data is. Is it a bunch of unnamed files and you're trying to figure out which may be a wallet? Or are you looking at raw data from the drive directly (e.g. in an image file)? Or something else?


Title: Re: Searching for wallet using 0201010420
Post by: Sdlooking92020 on November 16, 2023, 04:35:14 AM
wallet.dat is Bitcoin Core.

It depends on what data you have and how intact you think the data is. Is it a bunch of unnamed files and you're trying to figure out which may be a wallet? Or are you looking at raw data from the drive directly (e.g. in an image file)? Or something else?

I am using winhex. I have the drives and made images out of them. I had the file on a flash drive and probably in several time machine backups. I since deleted the backups. I figure scanning the drive images for those magic numbers I have been reading about might help me find those private keys.


Title: Re: Searching for wallet using 0201010420
Post by: SquirrelJulietGarden on November 16, 2023, 10:41:20 AM
Did you try to use pywallet or btcrecover?

Pywallet 2.2: manage your wallet (https://bitcointalk.org/index.php?topic=34028.0)
https://www.devtome.com/doku.php?id=pywallet

BTCrecover (https://github.com/3rdIteration/btcrecover/)
Their guide: https://github.com/gurnec/btcrecover/blob/master/TUTORIAL.md#btcrecover-tutorial