Don't buy "wallet.dat" files with lost passwords. EXCHANGE THEM!

[Roger1234]

I‘ve got a wallet.dat an the hash but i Need help to recover the password or the private key from the wallet.dat

Can someone help me?

Email: henck3456@protonmail.com

[GoldTiger69]

I‘ve got a wallet.dat an the hash but i Need help to recover the password or the private key from the wallet.dat

Can someone help me?

Email: henck3456@protonmail.com

Do you remember part of the password?

[walletrecovery]

We need an tool that is capable to check if accounts have private keys at all defined (in encrypted format) then we can at least filter some of forged wallets. Thanks!
I noticed that inside the original wallet.dat file there are addresses to which the coins were transferred, that is, all outgoing transactions are written to the wallet file.

[balonmd]

Hey everyone. Recently I found a unique method to spot fake wallet.dat files.
Wallets can be faked at least in 2 ways.

1. By changing the iteration number of the hash itself (I'm still looking how to spot fake iterations. The probability that a wallet have fake iteration inserted in wallet hash is kind of low).
2. By changing public key with a key that has amount. (My method will spot this type of fake)

The method is entirely created and developed by me. After  months of investigation, I can spot with a precise level : 99.9% fake wallets that does not have private key, or have a wrong one mapped to public key. Unfortunately there is a very big business with fake wallet.dat, that's why I am willing to help people that are looking for forgotten password of wallet.dat. Also I would like to discuss with more wallet crackers, in order to develop cracking knowledge and share our experience.

telegram: @btc_fan
email: ursunicolae89@gmail.com

[Alen098]

I don't understand the logic.... And I am afraid the result would be zero after putting a lot of efforts and time as well...

[walletrecovery]

Code:

We have learned to identify only such fake wallets that have exist outgoing transactions.
If there have never been outgoing transactions from the wallet, then we have not found a method that will reliably determine the authenticity of the wallet.

[MA40]

We have learned to identify only such fake wallets that have exist outgoing transactions.
If there have never been outgoing transactions from the wallet, then we have not found a method that will reliably determine the authenticity of the wallet.

Hello.

Can you explain how to identify fake wallets?

Greetings and Merry Christmas.

[walletrecovery]

We have learned to identify only such fake wallets that have exist outgoing transactions.
If there have never been outgoing transactions from the wallet, then we have not found a method that will reliably determine the authenticity of the wallet.

Hello.

Can you explain how to identify fake wallets?

Greetings and Merry Christmas.

Thank you for your question and wish you a Merry Christmas!
We observed that in any wallet that had outgoing transactions there are addresses to which these outgoing transactions were made,
if there are no such addresses inside the wallet file, then the wallet is fake. When there were no outgoing transactions in the wallet,
and there are only incoming ones, then we are not yet able to recognize the authenticity of such a wallet.

[toast]

There is still no proof that such wallet files are real and correspond to the indicated bitcoin addresses. Prices will also be very high to buy. With a quantum PC and a few experts you should be able to crack such wallets, it seems to me that you will then sell them, while it is worth a fortune if you know how to retrieve your password.

[gr8simba]

I have 20xRTX3090 and i tryin BF to these wallets.

I working on that list

LEFT LIST: https://pastebin.com/raw/CPfiPXZr


Already cracked addresses by me;

Code:

# 00906ed6dc0f6fce98865e698f2e5b1579f109373435ad38deb32b035c725ce0	qwerty
# 6f1326e98250df170c537c49ec3932653039ce4bbdd8d60ea46c7b7e135cf2f5	kingsman
# d904d8bd97c66234ec8a73694cbd2b2d92cc4d6f6679cec1e4bd2f9bc82721e5	football
# 138035514cf61211bc875a93e48eaddc1dc966f070d784b31fd43220b9b76f67	31247590635abe
# caaa98e46fa498a27a90275c99bfefb5030e398ae214a300602f2adb9c494d27	qweasdzxc
# a7786a2c099668fdb03fc116405879db96edaca43348ebc2c7999f11d5b98517	1
# 2d0b3b915e2909bccd404c0a70c944e30bfe2103c0db656298fd69e70d7cc116	q

Following 2 hashes for all who want to try reward will be share 50/50 both have +1 BTC

$bitcoin$64$24b4a225bbf86972233aec387401b536ef1fe333fd18cf15d13e8fe1b1acfbe2$16$7363b105beaf4028$36762$2$00$2$00
$bitcoin$64$9de529051d808b5d34c679c43020a233e6b5161de2e85070127009d61e4c24c8$16$09792b4786f368cb$49019$2$00$2$00

Wish us good luck

[walletrecovery]

NOTE: They have been marked as "Doubtful" all wallets whose hashes end in:

     - ...$60692$2$00$2$00
     - ...$38193$2$00$2$00
     - ...$62210$2$00$2$00
     - ...$131578$2$00$2$00
     - ...$37167$2$00$2$00
     - ...$37698$2$00$2$00
     - ...$35714$2$00$2$00
     - ...$42586$2$00$2$00
     - ...$83181$2$00$2$00
     - ...$106645$2$00$2$00
     - ...$234847$2$00$2$00
     - ...$76753$2$00$2$00
[/quote]

We checked HASH and found no such fragments.
Does this mean that all of our wallets are genuine?

[MA40]

Does this mean that all of our wallets are genuine?

Hello.

No, just because the hashes don't end in those fragments doesn't mean the wallets are authentic.

Sorry.

[MA40]

Hello.

The LIST OF AVAILABLE FILES "wallet.dat" has been updated.

Files with the following balances have been added:

     - 90.59781094 BTC.
     - 1.21724711 BTC.
     - 0.19000000 BTC.

[thelema93]

Hello!

I also have a wallet.dat file that has a lot of bitcoins in it. You get half if you help open it. Please contact: mangal94@protonmail.com

Thanks.

Yes we can help. We have powerful GPU rigs, a team of software experts and custom software to bruteforce.
Find me on the web at: http://www.BitcoinPassword.net
And Telegram: https://t.me/BitcoinPasswordNet

[thelema93]

I‘ve got a wallet.dat an the hash but i Need help to recover the password or the private key from the wallet.dat

Can someone help me?

Email: henck3456@protonmail.com

Yes we can help. We have powerful GPU rigs, a team of software experts and custom software to bruteforce.
Find me on the web at: http://www.BitcoinPassword.net
And Telegram: https://t.me/BitcoinPasswordNet

[kali-lnx]

Hello to everyone. I was curious did anybody try these hashes out? And if any of them are considered fake, do me a favor, please mark them. Willing to share...

$bitcoin$64$9de529051d808b5d34c679c43020a233e6b5161de2e85070127009d61e4c24c8$16$09792b4786f368cb$49019$96$aa9a6db8d6b1eb081826eb4f04cbc7a101653ba3e8af175756fdd400ae207de9d41e5749b96666579fd842f47b00489d$66$03ffd375f01d1ba11d8f24d69363cb92c031e998fd27946d103dc37b67544dbeb1
$bitcoin$64$ff134f9f03da571e5b256dec561730aaa674ff37d8a698d3c2c5e66fdbb07335$16$125d64b2bab4c437$136217$96$e3e9e392c47b4547644c5941104405f33e007e017eb2803c13ffb42dfde63af941e0f9e9594a0f590991f69fcae41ad1$130$041ebfac69910efb17ab697db5f2a4ff815e1d37c05e40d56977031a3a36b80464ea6782ad2913e2a5ec33e187f0fee50675bc78a25d657846e08e8425f2384b2a
$bitcoin$64$2ecb6691460c19de44584d2b22d201597874ec4ced76c806455e079e6d811da8$16$fbf192d3baf6bb02$126145$96$cf9a1ed320d16938822ade40046f85d5f75a54d2676e7fe1bfa9b47aed09d8dd2197dd0faf7ee96662df7930aab8ce3b$130$04888624b8aff8358944d6167c9e2df2ff6d250013d31c66847af1e1a7e53cb1af071815d72c1f5899c0a186cce89b920685ea1d6f402a0ac3cd269b3664c6a926
$bitcoin$64$256475ce3bd7eef52ac8f95bbcdc4b25cc97ef3fdb7d2c5cdd68fac490f79c46$16$5da5564606232552$125000$96$42ec519f35dac68bdf083b2732d8123f9dfcbd4bbcb79933ea7db043834c28e3e537ed8ef04a3dcc5d79bea1ebadc646$130$04ffcaa7a4302a6cc65a00fffcc94ba765b5ccd933de5ef401c66340bb5026eef2d2e6137040e29179feb5b4fe6f8cb6ff122ea35a05ffdbac1be43d2bbb477b5b
$bitcoin$64$8ff0c52d3026ac8b949fdc64444d4daecbde19f8bfb3fb4b3e199fdb5aff8339$16$b5ba03e404f1d79d$125631$96$d30832c872e59cd3b06ab8273515be8d158536dd09225ca0d0d181d8a1c972a6f11f65f3dfea86a2b17d0cb63b0e526e$66$03fbe14db2f1c288e44f91faad92bd6089e0667944d8df86ec1c1cb8fcf1eee34e
$bitcoin$64$f5e148a769865de007677b4235d60559c84360eb97b5d29c1f3744a3ef1992a5$16$ebd71877389b36c4$118376$96$1fd5f653aaa44ddb41631aecd74b8b5968a3fafadf2885573119aa9aab26c0d75f7cde9138052f0ce1cbb620e25c4cc1$66$03ff72a3763557aef923e059b6be05af516e21b3a6dded0b0f266598b3dc60755d
$bitcoin$64$cace7ac50d843272b6e9ec834ac9a85bf1fa71176423ec780848d099d5856746$16$f61f668243cb1ca5$127854$96$5fc3496ba1440f3315bee5f3bf41725d8e4b90490bf7a30e08e723d26885a2fc8d664f56f6dd8882f8748e76bff6ac85$130$04f337019182692c8aead3704b3ddac1deca637f44d26a78367513c56b0c8ef8bd5b355f91f39f7c9eeaea4700695391f0be0ec8e3d5c929061b0ad96a00fa43b6

$bitcoin$64$9de529051d808b5d34c679c43020a233e6b5161de2e85070127009d61e4c24c8$16$09792b4786f368cb$49019$96$aa9a6db8d6b1eb081826eb4f04cbc7a101653ba3e8af175756fdd400ae207de9d41e5749b96666579fd842f47b00489d$66$03ffd375f01d1ba11d8f24d69363cb92c031e998fd27946d103dc37b67544dbeb1
$bitcoin$64$24b4a225bbf86972233aec387401b536ef1fe333fd18cf15d13e8fe1b1acfbe2$16$7363b105beaf4028$36762$96$5e752bec17a5b7cd25589fae1b440fa7eef90f45e473df761647af870eeda42a4dd81749785923c3129729777573a8d0$66$03ff26313657970f93f056b5b284406da03038bd96011aa28cff4d048a311ce2ca

[kali-lnx]

Also....could any of that kind of information be helpful when you BF ?

mkey: 3077cd1d7dfae4d7e44a421e516ce565a024b4a225bbf86972233aec387401b536ef1fe333fd18c f15d13e8fe1b1acfbe2087363b105beaf4028000000009a8f000000
mk  : 77cd1d7dfae4d7e44a421e516ce565a024b4a225bbf86972233aec387401b536ef1fe333fd18cf1 5d13e8fe1b1acfbe2
ct  : ef1fe333fd18cf15d13e8fe1b1acfbe2
salt: 7363b105beaf4028
iv  : 24b4a225bbf86972233aec387401b536
rawi: 00008f9a
iter: 36762
24b4a225bbf86972233aec387401b536ef1fe333fd18cf15d13e8fe1b1acfbe27363b105beaf402 800008f9a

[thelema93]

Well.. There's a reason why people would let go of those files, and that is bc they have deemed it useless so I don't really see the point of this.

It's either op has actual wallet.dat with funds and private keys in it but it was too difficult to crack or that there's something wrong with it like having no private keys so there's no way to spend those funds. If it's the former, then those two also applies to the one you are gonna be exchanging with...

Are you saying that it's possible to alter a wallet.dat file to remove the private keys and it will still open in Bitcoin Core normally?
The reason I am asking is because I am currently attempting to crack some wallets and as far as I am aware, if I can open the wallet normally in Core, then it must be crack able right? or am I missing something?

[balonmd]

Well.. There's a reason why people would let go of those files, and that is bc they have deemed it useless so I don't really see the point of this.

It's either op has actual wallet.dat with funds and private keys in it but it was too difficult to crack or that there's something wrong with it like having no private keys so there's no way to spend those funds. If it's the former, then those two also applies to the one you are gonna be exchanging with...

Are you saying that it's possible to alter a wallet.dat file to remove the private keys and it will still open in Bitcoin Core normally?
The reason I am asking is because I am currently attempting to crack some wallets and as far as I am aware, if I can open the wallet normally in Core, then it must be crack able right? or am I missing something?

Yes, all metadata values can be faked, changed, updated and so on. There is a test wallet, I can send you with all fake values for your validation.
Please check my post there:
https://bitcointalk.org/index.php?topic=5374076.msg58577872#msg58577872

[prepareimage_fresa]

Hi!

I have done some "research" on wallets.dat I got, don't mean that they are the same like here, but you should check, before you try to guess the password...

at the following wallet if you compare the files in a simple way the iteration is the same.
All have: 35714

10.08    1EQjwXjyom9T35764huyriFEredLGmneVC
12.8219  19tLSCZWhX5YBVy6uX2kLheNjdUb9RBojS
22.85    19Hj5Pzi4hCj12porw97i183XYTrScbtXS
42.2445  1NKmf6GszBQ6wo349LUT4Je1csNyDDpb5Y

I'd say it very unlikely that so much wallets have the same, iteration!
Maybe this is only true for my files, but check this...

Bye

Hey, that's incredible remark!
Then it's is possible to assume that duplicate iterations are crafted fake wallets.

Code:

cat all.btc.hashes | cut -d'$' -f7 | sort | uniq -c | sort -nr

If you'll see in the result more than one instance of iteration - don't waste time on it

I will be more than happy if author of this thread will check his wallet hashes for duplicate iterations and mark them as probably fake

Thanks!

From my perspective, and wallets i have, the following are md5's of wallets with duplicate iteration numbers, in format of md5(wallet_hash). They are probably fake wallets.
Compare these with wallet hashes you have, and mark it as probably fake.

Code:

while read line; do echo -n $line | md5sum; done < all.btc.hashes

ebc5d38a456d1ecea8ab3de8d0ed9f3e
f4eb0964d0c6217e025e2f7433510e89
36429177dada25bb0089705b5d352bef
43ef9d2b9551dca78f5cf3507f25ec8a
963e6eaed379c82a698e9e3603f8d84f
4d60f7042ef9525886a699fef61b40ae
b4edfd455728537f77823d6a8f42ae94
ac8197928d773bc042773e7388b196a6

Sorry for a complexity, but this quite outside the scope of thread's subject.

I have a wallet but I do not understand how to use the code provided in this reply. Do I replace 'all.btc.hashes' part of the example code with the wallet.dat hash generated for Hashcat?