I've got wallet.dat with 3.27 BTC (my private from 2011). Still don't remember password. More info in PM.

Hi Guys
I just find this web page after buying wallet that is in circulation for last 2 weeks. That refers to address 1KTvsW5tg5gkJf9fyT2xsvjkv7dzuZNTpW& - lost my 120 USD.
I also have downloaded free wallets from wallets-dat.com and wallets-dat.net that seems to be operated by the same person - I bought mine form wallets-dat.net link.

Also, I have analyzed fake wallets (posted here) with password given. Normally entering password causes bitcoin client to crash. However little changes to its source code allows me work with it and what I found interesting. You can get some private keys for just few of accounts - that are empty anyway.

However dumping private keys for accounts that are referenced as holding coins - simply have not private keys included at all - client returns error.


What I conclude from that is,  if we just had an tool that is capable to check if accounts have private keys at all defined (in encrypted format) then we can at least filter some of forged wallets.

On the other hand, forger may be able to put some rubbish as a private key. I do not know exact structure of wallet file - I just invest about 1-2h to figure out if I can extract some additional information -
maybe it is not possible to create well forged fake.

Hence forging might be done as one of 2 ways:
- Injecting fake transactions referencing to forgotten account to existing wallet.
- Injecting fake account without or broken private keys.
- Striping private keys out of wallet that literally has originally holded them.

Having that tool may save lot of time for cracking. And at least allow to figure out if it make sense to work on them.

how do i get ntime to date converted again?

Welcome into the Hashtopolis club

So , long time lurker.. and i even have a few wallet.dat .. some are listed here as fake but some not..
one notable point that i have:
none of the wallet hashes i have are crackable by the password listed (the 12... whatever)
Info for each wallet exists but id dodgy , most likely
iterations of the fake ones are the same, so we throw those away
but that leaves me with 3 wallets that seem genuine. I had a 4th that was inactive for a while and then it was cleared out entirely.. the transactions were ongoing though.. so not fake in that respect.
Now, i have a wallet with 25000 iterations, which , with y research, makes it a very old wallet, it loads into bitcoind core fine and transactions seem to match, it also seem that no errors are thrown out and the syncing took some serious time, EVEN with a NVME raid drive that was pushing and insane amout o IOPS through that time.
so i have wallets with iterations of 71074, 140625, 25000 and 129551. All wallets check in and all wallets load error free and seem ok in bitcoin core..

so for comparison:
$bitcoin$64$7095f9031c639640d11d86c0a8597556ae8c940fb3bbda7c1cd789c3fea8dc08$16$c738f48338155e0a$67219$2$00$2$00
$bitcoin$64$c35f2dc2039ced49e0b86661b5f6edbf0326262396f4a75baea7ed02d512a055$16$7bccc0618f4c2555$140625$2$00$2$00
$bitcoin$64$5b2f6e4398004a207eea181b9db111971ab9749c19451a5f0926d1000d70b682$16$d72f084441487b68$25000$2$00$2$00
$bitcoin$64$fbb81fa5f31a282331e8ef06d849522e282bd6689174b970fd8635eff36887ca$16$d68a0ad1e3fdd725$71074$2$00$2$00

These seem legit but i am not sure.. any check i throw at them they seem ok..  most likely they are still fake but they seem to be VERY good fakes

If that pooling resource thing is still available, i have a 3080 and 2 2080s in a rig.. thinking should i mine rather ...

Hi!

I have done some "research" on wallets.dat I got, don't mean that they are the same like here, but you should check, before you try to guess the password...

at the following wallet if you compare the files in a simple way the iteration is the same.
All have: 35714

10.08    1EQjwXjyom9T35764huyriFEredLGmneVC
12.8219  19tLSCZWhX5YBVy6uX2kLheNjdUb9RBojS
22.85    19Hj5Pzi4hCj12porw97i183XYTrScbtXS
42.2445  1NKmf6GszBQ6wo349LUT4Je1csNyDDpb5Y

I'd say it very unlikely that so much wallets have the same, iteration!
Maybe this is only true for my files, but check this...

Bye

Hi everyone!

About a week ago I started working on wallet.data files. Even though I got a private key and it was password protected.
I only set 2 TITANV GPUs on the break to test.

The thing works!

What I am sharing now is for skeptics that it is not impossible to do!


Time.Started.....: Wed Jan 06 21:42:24 2021 (4 hours, 38 mins)
Time.Estimated...: Sat Jan 09 13:32:21 2021 (2 days, 11 hours)
Guess.Mask.......: ?a?a?a?a?a [5]
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:    17248 H/s (10.09ms) @ Accel:2 Loops:128 Thr:1024 Vec:1
Speed.#2.........:    16426 H/s (11.25ms) @ Accel:2 Loops:128 Thr:1024 Vec:1
Speed.#*.........:    33673 H/s
Recovered........: 0/1 (0.00%) Digests
Progress.........: 562626560/7737809375 (7.27%)
Rejected.........: 0/562626560 (0.00%)
Restore.Point....: 5570560/81450625 (6.84%)
Restore.Sub.#1...: Salt:0 Amplifier:49-50 Iteration:84096-84224
Restore.Sub.#2...: Salt:0 Amplifier:60-61 Iteration:102400-102528
Candidates.#1....: HQl`4 -> HvPRL
Candidates.#2....: Z8_&a -> Z<4(2
Hardware.Mon.#1..: Temp: 77c Fan:100% Util: 99% Core:1402MHz Mem: 850MHz Bus:16
Hardware.Mon.#2..: Temp: 74c Fan:100% Util: 99% Core:1402MHz Mem: 850MHz Bus:16


At the moment it seems that I am going for a 5 word experiment and the number of possible variations = 7737809375.
It can also be seen that there are only 2 days 11 hours left.
The 1,2,3,4 word option had already been tested and it wasn’t that hard.
If the password is not 5 words, I will continue to look for the 6,7,8,9,10 ... character options.
Since it would be hard enough with 2GPU there I will already be using a 40 X RTX3090 GPU.
I think in about a couple of weeks you will have quite a bit of BTC and the rest of the altcoin.

So, any of these have been actually opened? Ever?

Thank you for a good job.
Yes, wallets with 150, 99, 78, 70, and 57 BTC are suspicious and moved to a special table with fix price.
I faced various fake files of 150 and 78 like watch-only, and HEX edited too. Files with Password: "12aVP18cd5XsbcGQy8u6eywQ6UuA6Q319s" are fake.

On my site - AllPrivateKeys, original files only. I check, synchronize, and do screenshots before publishing for sale.
Also, I give a replacement or a full refund till two days if something wrong.

With some luck and skills, you may recover lost passwords and would be able to access the coins. The power GPU farm is good but not enough. I know persons who recover lost passwords using a laptop. Don't forget about luck, skills, and hints for passwords mask.

PS: Beware of scams on forums and just registered sites!
Rare files can't cost cheap. Scammers always sell cheap. They need money here and now, then they run to "sell" to others, and drop contacts with you forever. You are not interesting anymore.

Good Luck!
Merry Christmas and Happy New Year 2021

- Balance = 70.01000000 BTC. (Main Bitcoin Address: 17w8w8ZHdqkSYFkhAMfHJaEqCHgHm9egKv). Fake "wallet.dat". Download here. Password: "12aVP18cd5XsbcGQy8u6eywQ6UuA6Q319s".

How are these ones fake, just corrupted wallet.dat files no?
As the password only decrypts some of the keys.

Hello.

I can't really tell if it's authentic or fake, but it has a different password than the fake one; therefore, it can be assumed to be authentic until someone finds its password and it can be verified.

A greeting.