Lost wallet? Help me find out

[Ultegra134]

Updated, View second page please

Hello there,
After all this bullrun, I've been searching for old wallets I had, back when I was young and innocent.
I've found a 12 phrase on a text document and another long "word" with random letters. Starts with xc2.....2om, it's 32 characters long. Have no idea what it could actually be.

Furthermore, I found a file, approximately 80mb with the name "wallet". Just that, no extension, nothing.

I've already tried importing the 12 phrase on a Bitcoin wallet but says invalid. I'm suspecting that they could be something else too.

Anyone of any assistance please? What is this "wallet" file, that 32 character object? Any chances that the 12 word phrase belongs to another coin?

Thank you in advance

[1715286915]

1715286915

[jackjack]

Hi
I don't know if you can move your thread yourself but the forum for technical help is there: https://bitcointalk.org/index.php?board=4.0
12 words phrase is likely a BIP39 or Electrum mnemonic, try using tools on internet but use them OFFLINE! I just found this for example https://iancoleman.io/bip39/
The 80MB wallet may be a Truecrypt/Veracrypt container?
Your 'xc2.....2om' word may be a password? Of the container? Or a BIP38 password for your keys?

[BitMaxz]

Are you sure that the wallet file doesn't have the extension? Or it might be just hidden? check carefully because there are some users here who mention about 80MB of the wallet.dat file of their Bitcoin core wallet.

Here's the post below for reference
- https://bitcointalk.org/index.php?topic=34028.msg2570257#msg2570257

About the 12 phrase seed can you try to check the words from your backup seed with this list of words from here https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt
Check if all of the words from your backup seed are under that list. If some of the words are not there it means it's a different wallet.

It might be a litecoin or other coin. Can you try to check if when it was created? Try to right-click the file that has 12 phrase backup and click properties it should be show details with the date when it was created.

[Ultegra134]

Hi
I don't know if you can move your thread yourself but the forum for technical help is there: https://bitcointalk.org/index.php?board=4.0
12 words phrase is likely a BIP39 or Electrum mnemonic, try using tools on internet but use them OFFLINE! I just found this for example https://iancoleman.io/bip39/
The 80MB wallet may be a Truecrypt/Veracrypt container?
Your 'xc2.....2om' word may be a password? Of the container? Or a BIP38 password for your keys?

Thank you for your reply, I've no idea what Truecrypt/Veracrypt container is lol, so I doubt that it's that. Furthermore, I don't really understand what this tool you've attached does. I'd really appreciate if you could elaborate.

Are you sure that the wallet file doesn't have the extension? Or it might be just hidden? check carefully because there are some users here who mention about 80MB of the wallet.dat file of their Bitcoin core wallet.

Here's the post below for reference
- https://bitcointalk.org/index.php?topic=34028.msg2570257#msg2570257

About the 12 phrase seed can you try to check the words from your backup seed with this list of words from here https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt
Check if all of the words from your backup seed are under that list. If some of the words are not there it means it's a different wallet.

It might be a litecoin or other coin. Can you try to check if when it was created? Try to right-click the file that has 12 phrase backup and click properties it should be show details with the date when it was created.

Thank you, I've checked the attached list and all words do match up. I've tried importing it using a desktop wallet by inserting the 12 word phrase with no success. The text was created on December of 2018. I've no idea on how to test that "wallet" file.

[jackjack]

Hi
I don't know if you can move your thread yourself but the forum for technical help is there: https://bitcointalk.org/index.php?board=4.0
12 words phrase is likely a BIP39 or Electrum mnemonic, try using tools on internet but use them OFFLINE! I just found this for example https://iancoleman.io/bip39/
The 80MB wallet may be a Truecrypt/Veracrypt container?
Your 'xc2.....2om' word may be a password? Of the container? Or a BIP38 password for your keys?

Thank you for your reply, I've no idea what Truecrypt/Veracrypt container is lol, so I doubt that it's that. Furthermore, I don't really understand what this tool you've attached does. I'd really appreciate if you could elaborate.

In this tool you put your 12 words in "BIP39 Mnemonic"
This will give you a private key in "BIP32 Root Key"
You may need to put your "xc2" password in "BIP39 Passphrase (optional)" too

Then you can import the two "BIP32 Root Key" (the one with xc2 in BIP39 Passphrase and the one without) in Electrum (I'm not sure bitcoin-core has implemented BIP32 yet) and use your funds if it works

[Ultegra134]

Hi
I don't know if you can move your thread yourself but the forum for technical help is there: https://bitcointalk.org/index.php?board=4.0
12 words phrase is likely a BIP39 or Electrum mnemonic, try using tools on internet but use them OFFLINE! I just found this for example https://iancoleman.io/bip39/
The 80MB wallet may be a Truecrypt/Veracrypt container?
Your 'xc2.....2om' word may be a password? Of the container? Or a BIP38 password for your keys?

Thank you for your reply, I've no idea what Truecrypt/Veracrypt container is lol, so I doubt that it's that. Furthermore, I don't really understand what this tool you've attached does. I'd really appreciate if you could elaborate.

In this tool you put your 12 words in "BIP39 Mnemonic"
This will give you a private key in "BIP32 Root Key"
You may need to put your "xc2" password in "BIP39 Passphrase (optional)" too

Then you can import the two "BIP32 Root Key" (the one with xc2 in BIP39 Passphrase and the one without) in Ethereum (I'm not sure bitcoin-core has implemented BIP32 yet) and use your funds if it works

Thanks, I've tried that but it says invalid mnemonic. Tried using the password too but made no difference.

[HCP]

Thanks, I've tried that but it says invalid mnemonic. Tried using the password too but made no difference.

Then it's possible that one (or more) of the words is "incorrect"... have a look through that BIP39 wordlist for "similar" words that may have been written down/typed out incorrectly... things like kid, kit, kite etc...

Then you can import the two "BIP32 Root Key" (the one with xc2 in BIP39 Passphrase and the one without) in Ethereum (I'm not sure bitcoin-core has implemented BIP32 yet) and use your funds if it works

I'm sure you meant "Electrum"

And Bitcoin Core does use BIP32 to generate keys in the HD wallets, and with the advent of "descriptors", you can import xpubs and xprvs... using the importdescriptors command, refer: https://github.com/bitcoin/bitcoin/blob/master/doc/descriptors.md#bip32-derived-keys-and-chains

[jackjack]

Thanks, I've tried that but it says invalid mnemonic. Tried using the password too but made no difference.

Then it's possible that one (or more) of the words is "incorrect"... have a look through that BIP39 wordlist for "similar" words that may have been written down/typed out incorrectly... things like kid, kit, kite etc...

Isn't there a tool out there to bruteforce a sentence with one bad word?
I think so but if not I can make one quickly

Then you can import the two "BIP32 Root Key" (the one with xc2 in BIP39 Passphrase and the one without) in Ethereum (I'm not sure bitcoin-core has implemented BIP32 yet) and use your funds if it works

I'm sure you meant "Electrum"

And Bitcoin Core does use BIP32 to generate keys in the HD wallets, and with the advent of "descriptors", you can import xpubs and xprvs... using the importdescriptors command, refer: https://github.com/bitcoin/bitcoin/blob/master/doc/descriptors.md#bip32-derived-keys-and-chains

Damn, nice catch, fixed
So many common letters, that should be forbidden!

Good to know bitcoin-core can import BIP32 HD wallets!

[HCP]

Isn't there a tool out there to bruteforce a sentence with one bad word?
I think so but if not I can make one quickly

Yep... btcrecover can usually work it out fairly quickly... however you need the "incorrect" seed, and a known address generated by that wallet. Sounds like the OP may not have the address.

This is the most "up to date" version of btcrecover (that has added extra features over the original by gurnec): https://github.com/3rdIteration/btcrecover

[Ultegra134]

Isn't there a tool out there to bruteforce a sentence with one bad word?
I think so but if not I can make one quickly

Yep... btcrecover can usually work it out fairly quickly... however you need the "incorrect" seed, and a known address generated by that wallet. Sounds like the OP may not have the address.

This is the most "up to date" version of btcrecover (that has added extra features over the original by gurnec): https://github.com/3rdIteration/btcrecover

Unfortunately, that is correct, I do not even have the address. If I did, I could see if it was worthy of recovering, I cannot even guarantee that it's not another empty wallet.

So far, I've recovered three wallets, one of them was intact, another one was simply empty and the last one had $100 in it. This is a file I found randomly on my drive, the 12 word phrase could also point to one of these 3 wallets.

[BrewMaster]

So far, I've recovered three wallets, one of them was intact, another one was simply empty and the last one had $100 in it.

how is this $100 showing up?
there must be either an address that has that balance or a transaction that shows this received amount. can't you use that to extract your possible address and then check it against your 12 words?

[Ultegra134]

So far, I've recovered three wallets, one of them was intact, another one was simply empty and the last one had $100 in it.

how is this $100 showing up?
there must be either an address that has that balance or a transaction that shows this received amount. can't you use that to extract your possible address and then check it against your 12 words?

The three wallets I'm mentioning have nothing to do with the 12 word phrase I have. I am just suspecting that the phrase might be from one of the wallets I found and recovered successfully. These three wallets were online Blockchain ones, and were recovered by looking back on my old email, finding the wallet IDs and guessing the passwords.

[HCP]

Given that your 12 words are all in the BIP39 list, but giving "invalid mnemonic" (and if you've already tried the "similar word" approach and had no luck) another option might be writing a script that tries all the different permutations of those specific 12 words, looking for "valid" mnemonics...

With a set of 12 words... you're looking at 12! permutations = 479,001,600... and given the way the "checksum" works, not all of those permutations is actually going to be valid.

Unfortunately, I suspect that any given 12 words would generates tens of thousands (if not millions) of valid seed combinations (maybe ~5%? ) So, while getting a script to generating and identify all the "valid" seeds from your 12 words probably isn't that difficult, the trick will be identifying which one of those valid seeds actually has "in use" keys attached to it.

[plen]

Any chances that the 12 word phrase belongs to another coin?

Just out of curiousity have you tried this phrase with an ETH wallet?

[cajancharles]

I've found a 12 phrase on a text document and another long "word" with random letters. Starts with xc2.....2om, it's 32 characters long. Have no idea what it could actually be.
Anyone of any assistance please? What is this "wallet" file, that 32 character object? Any chances that the 12 word phrase belongs to another coin?

Open the wallet file in hex editor (like hexinator) and post the screenshot of it,  so we can identify with the header what kind of file is that.

[Ultegra134]

Any chances that the 12 word phrase belongs to another coin?

Just out of curiousity have you tried this phrase with an ETH wallet?

Nope, it's funny that I didn't think of that earlier. Will try that out and report back, thanks!

I've found a 12 phrase on a text document and another long "word" with random letters. Starts with xc2.....2om, it's 32 characters long. Have no idea what it could actually be.
Anyone of any assistance please? What is this "wallet" file, that 32 character object? Any chances that the 12 word phrase belongs to another coin?

Open the wallet file in hex editor (like hexinator) and post the screenshot of it,  so we can identify with the header what kind of file is that.

Will try that as soon as possible and report back. I hope we can come up with something of value. Thanks you!

[Ultegra134]

I've found a 12 phrase on a text document and another long "word" with random letters. Starts with xc2.....2om, it's 32 characters long. Have no idea what it could actually be.
Anyone of any assistance please? What is this "wallet" file, that 32 character object? Any chances that the 12 word phrase belongs to another coin?

Open the wallet file in hex editor (like hexinator) and post the screenshot of it,  so we can identify with the header what kind of file is that.

Okay, I downloaded Hexinator and opened the file with it. I have no idea what this thing is, posting a screenshot. I hope you can understand what's going on here. Report back if you need me to do anything else with the file.

[HCP]

It's a JSON format wallet... and it looks a lot like the Electrum wallet file format:

Code:

{
    "addr_history": {
        "12B..........................HR": [],
        "13Q..........................BX": [],
        "13i..........................u9": [],
        "16B..........................qn": [],
        "19A..........................Gu": [],
        "19V..........................yv": [],
        "1A9..........................Ro": [],
        "1Ak..........................Bb": [],
        "1Bk..........................W3": [],
        "1Br..........................RL": [],
        "1Cm..........................eN": [],
        "1Co..........................NF": [],
        "1EV..........................4E": [],
        "1F1..........................KX": [],
        "1H3..........................NP": [],
        "1HK..........................Sj": [],
        "1Ha..........................oK": [],
        "1LZ..........................ib": [],
        "1M6..........................yH": [],
        "1NF..........................Vh": [],
        "1PQ..........................7k": [],
        "1Pa..........................PN": [],
        "1Pb..........................1Q": [],
        "1Pj..........................wL": [],
        "1Q4..........................qt": [],
        "1QL..........................tN": []
    },
    "addresses": {
...

However, given that the addresses all start with a "G"... it's not a Bitcoin wallet... possibly Bitcoin Gold?   You could try opening it with the BTG fork of Electrum called "ElectrumG" from here: https://bitcoingold.org/electrumg/

[Ultegra134]

It's a JSON format wallet... and it looks a lot like the Electrum wallet file format:

Code:

{
    "addr_history": {
        "12B..........................HR": [],
        "13Q..........................BX": [],
        "13i..........................u9": [],
        "16B..........................qn": [],
        "19A..........................Gu": [],
        "19V..........................yv": [],
        "1A9..........................Ro": [],
        "1Ak..........................Bb": [],
        "1Bk..........................W3": [],
        "1Br..........................RL": [],
        "1Cm..........................eN": [],
        "1Co..........................NF": [],
        "1EV..........................4E": [],
        "1F1..........................KX": [],
        "1H3..........................NP": [],
        "1HK..........................Sj": [],
        "1Ha..........................oK": [],
        "1LZ..........................ib": [],
        "1M6..........................yH": [],
        "1NF..........................Vh": [],
        "1PQ..........................7k": [],
        "1Pa..........................PN": [],
        "1Pb..........................1Q": [],
        "1Pj..........................wL": [],
        "1Q4..........................qt": [],
        "1QL..........................tN": []
    },
    "addresses": {
...

However, given that the addresses all start with a "G"... it's not a Bitcoin wallet... possibly Bitcoin Gold?   You could try opening it with the BTG fork of Electrum called "ElectrumG" from here: https://bitcoingold.org/electrumg/

Great work, thanks! Cannot even remember I had such wallets, of any other coin though. It's quite fascinating that I keep finding wallets, addresses and 12 word phrases. Will download it and report back as soon as possible.

Thanks again!

[Ultegra134]

It's a JSON format wallet... and it looks a lot like the Electrum wallet file format:

Code:

{
    "addr_history": {
        "12B..........................HR": [],
        "13Q..........................BX": [],
        "13i..........................u9": [],
        "16B..........................qn": [],
        "19A..........................Gu": [],
        "19V..........................yv": [],
        "1A9..........................Ro": [],
        "1Ak..........................Bb": [],
        "1Bk..........................W3": [],
        "1Br..........................RL": [],
        "1Cm..........................eN": [],
        "1Co..........................NF": [],
        "1EV..........................4E": [],
        "1F1..........................KX": [],
        "1H3..........................NP": [],
        "1HK..........................Sj": [],
        "1Ha..........................oK": [],
        "1LZ..........................ib": [],
        "1M6..........................yH": [],
        "1NF..........................Vh": [],
        "1PQ..........................7k": [],
        "1Pa..........................PN": [],
        "1Pb..........................1Q": [],
        "1Pj..........................wL": [],
        "1Q4..........................qt": [],
        "1QL..........................tN": []
    },
    "addresses": {
...

However, given that the addresses all start with a "G"... it's not a Bitcoin wallet... possibly Bitcoin Gold?   You could try opening it with the BTG fork of Electrum called "ElectrumG" from here: https://bitcoingold.org/electrumg/

One more question please, could it also be something else? Like Bitcoin Cash? I mean, can those two get confused? If I open it with ElectrumG, will it be BTG 100%?