Quote from: mikecolins on January 20, 2021, 08:02:12 PM

Quote from: FNT on January 20, 2021, 06:52:55 AM

Hi!

I have done some "research" on wallets.dat I got, don't mean that they are the same like here, but you should check, before you try to guess the password...

at the following wallet if you compare the files in a simple way the iteration is the same.
All have: 35714

10.08 1EQjwXjyom9T35764huyriFEredLGmneVC
12.8219 19tLSCZWhX5YBVy6uX2kLheNjdUb9RBojS
22.85 19Hj5Pzi4hCj12porw97i183XYTrScbtXS
42.2445 1NKmf6GszBQ6wo349LUT4Je1csNyDDpb5Y

I'd say it very unlikely that so much wallets have the same, iteration!
Maybe this is only true for my files, but check this...

Bye

Hey, that's incredible remark!
Then it's is possible to assume that duplicate iterations are crafted fake wallets.

Code:

cat all.btc.hashes | cut -d'$' -f7 | sort | uniq -c | sort -nr

If you'll see in the result more than one instance of iteration - don't waste time on it

I will be more than happy if author of this thread will check his wallet hashes for duplicate iterations and mark them as probably fake

Thanks!

From my perspective, and wallets i have, the following are md5's of wallets with duplicate iteration numbers, in format of md5(wallet_hash). They are probably fake wallets.
Compare these with wallet hashes you have, and mark it as probably fake.

Code:

while read line; do echo -n $line | md5sum; done < all.btc.hashes

ebc5d38a456d1ecea8ab3de8d0ed9f3e
f4eb0964d0c6217e025e2f7433510e89
36429177dada25bb0089705b5d352bef
43ef9d2b9551dca78f5cf3507f25ec8a
963e6eaed379c82a698e9e3603f8d84f
4d60f7042ef9525886a699fef61b40ae
b4edfd455728537f77823d6a8f42ae94
ac8197928d773bc042773e7388b196a6

Sorry for a complexity, but this quite outside the scope of thread's subject.

I have a wallet but I do not understand how to use the code provided in this reply. Do I replace 'all.btc.hashes' part of the example code with the wallet.dat hash generated for Hashcat?