[ 3 / biz / cgl / ck / diy / fa / ic / jp / lit / sci / vr / vt ] [ index / top / reports ] [ become a patron ] [ status ]
2023-11: Warosu is now out of extended maintenance.

/biz/ - Business & Finance

View post   
File: 4 KB, 1060x47, Capture.png [View same] [iqdb] [saucenao] [google]
3907142 No.3907142 [Reply] [Original]

I found this file on one of my old hard drives.

It doesn't have a file extension which makes it very difficult to know how to go about restoring it.

Tips to the person who can help me open this up.

>> No.3907276

>>3907142
are you sure it is worth OP

>> No.3907297

>>3907142
I'm certain I've seen that image before so sage.

>> No.3907328

>>3907142
It should just be an .dat file. LEtme know if that doesn't work!

>> No.3907347

.exe

Run as administrator, get gainz

>> No.3907354
File: 241 KB, 1875x881, Capture.png [View same] [iqdb] [saucenao] [google]
3907354

>>3907297
Seen this before?

>> No.3907360

>>3907142
>https://electrum.org/#download
>rename file to whatever.dat
>Open dat file with electrum
>Send BTC to 1Pb7zp4oxzEH2uPoWDJ9eHZ1DLJxCBLVbm

>> No.3907361

truecrypt file

>> No.3907371

>>3907328
Tried converting it and opening with blockchain.info but it didn't work

>> No.3907377
File: 976 KB, 245x280, kekling.gif [View same] [iqdb] [saucenao] [google]
3907377

>>3907354
Holy shit theres 13.8 btc in here!

Thanks retard

>> No.3907384

>>3907354
holy shit. GL anon

>> No.3907388

>>3907142
Send it to...

impeachdonaldjtrump@protonmail.com

I'll figure it out.

>> No.3907393

>>3907361
It's CP labelled as a Bitcoin Backup

>> No.3907441

>>3907360
>cannot read file

>> No.3907480

>>3907142
Try making it a txt file and opening with notepad. Let me know what happens

>> No.3907518
File: 150 KB, 1316x622, Capture2.png [View same] [iqdb] [saucenao] [google]
3907518

>>3907480

>> No.3907745

>>3907518
Post the full file on pastebin along with your BTC address. If I decrypt it I'll send 60% back.

>> No.3907772

>>3907518
u might want to delete this

>> No.3907798

>>3907518
delete this now unless you want your shit stolen.

>> No.3907834 [DELETED] 

>>3907772
It's not the full file...
I think I might have encrypted it some how because it's 33kb

>> No.3907842

>>3907142
Hey thanks for the free coins OP.

>> No.3907852

>>3907518
HOLY FUCKING SHIT I JUST GOT 100 BTC!!!!!!!

>> No.3907934

>>3907852
Post proof LARPing fuck

>> No.3907944

>>3907934
Nah man I'm not larping

>> No.3907948

>>3907934
>he doesn't know how to look it up on the blockchain
Fucker got lucky

>> No.3907949
File: 20 KB, 540x540, dda.jpg [View same] [iqdb] [saucenao] [google]
3907949

OP literally shaking right now lol

why you would ever post even half your address to pajeet randos on 4chan is BEYOND me

>> No.3907956

u gotta be kidding me

meanwhile i am losing fucking money in a market full of idiots like op

>> No.3907980

>>3907949
It's not an address retard

>> No.3907984

>>3907944
>>3907948
Well post the fucking transaction then OP deleted his post?
If you did manage to get 100 BTC well done to you.

>> No.3908005

screenshot of decoded wallet or retard 100%

>> No.3908016

>>3907984
He didn't get anything.

There was no address to look up on the blockchain. You think I didn't try that first thing?

>> No.3908031

how the fuck would having the blockchain adress help with getting any of the bitcoin in it

>> No.3908042

>>3908016
Yeah these guys are LARPing so hard.
Fucking hell OP just take it to a pro in real life instead

>> No.3908052

So you don't remember which software wallet you made that backup file with?

>> No.3908059

>>3908042
A bitcoin pro that I know in real life yeah?

>> No.3908070

>>3908052
Unfortunately not

>> No.3908082

>>3908016
>>3907984
Alright the 100 BTC was an exaggeration but I did manage to get about 22 BTC out of it.

Feeling so fucking good right now.

And the transaction hash was:
4238dfb79f8e11d6220249b290e021bc365bd7f31108a06f3a18d394fd412508

By the way.

>> No.3908110

>>3908082
That transaction was before this thread was made jesus christ what are you doing mate?

>> No.3908114

>>3908082
nice anon.
whatre you gonna do with your newfound riches now ?

>> No.3908119

>>3908082
Wanna make a random anon's night?

185ysid8Wx9nWQFrn9ekwpbmuQe4EneJbE

>> No.3908122

>>3907354

This is OpenSSL encrypted file. In addition to this file, you're going to need the password as well. If you don't remember it, you're fucked.

>> No.3908125

>>3908114
>being this stupid

>> No.3908134

>>3908114
>110k or so
>riches
>>3908119
Post a selfie of yourself with timestamp and I'll send you a BTC, I mean it.

>> No.3908136
File: 64 KB, 328x489, 1465952703144.png [View same] [iqdb] [saucenao] [google]
3908136

>>3908125
>being this prudent

>> No.3908152

>>3908110
This. Why are you larping so hard. And why are people believing you

>> No.3908163

>>3908134
shit, it's alot more money than I've ever seen/had before.
wanna help a fellow brother out?
1E8CSfgejLrBx86S3srYq9PD7wVntc8nzk

>> No.3908197

>>3908122
>
I don't remember ever using OpenSSL but i'll have a look at it anyways...
Only encryption i ever used was gpg but I can't seem to get the file recognised with the package i just downloaded

>> No.3908201

>>3908163
Selfie with timestamp. Simple as that.
>>3908152
Same reason people bought LINK.

>> No.3908261

>>3907142

OP, if you're still here try doing this on that file:

openssl.exe enc -d -p -aes-256-cbc -a -in 'Bitcoin Wallet backup' -out decrypted.txt -pass pass:***

Ofcourse, put your real password you encrypted this with after pass.

Check out decrypted.txt afterwards, it should contain your keys.

>> No.3908306

>>3908261
This actually looks like the only legit advice here though the code looks off why would it be "-pass pass:"?

>> No.3908313
File: 102 KB, 1000x1334, 22561065_1873167952997376_1727800810_o.jpg [View same] [iqdb] [saucenao] [google]
3908313

>>3908201
here you go.

>> No.3908314
File: 1.55 MB, 1358x1084, IMAGE00001.png [View same] [iqdb] [saucenao] [google]
3908314

>>3908119

>>3908201
sorry for shitty quality here you go

>> No.3908333

>>3908313
Nice try pajeet

>> No.3908334

>>3908313
>>3908314
You guys are morons jesus christ please stop being in crypto

>> No.3908347

>>3908334
cant hate on a guy for trying. Right?

>> No.3908351

>>3908313
Are those krk rokit 6?
You begin and you have a home studio
Go fuck yourself

>> No.3908365

>>3908347
You look like you bleach your asshole

>> No.3908382

>>3908313
>dumbfuck pajeet
>>3908314
>dumbfuck butt pirate
Exactly the kind of people who fall for easy trolls

>> No.3908433
File: 1.85 MB, 450x253, tumblr_njzuh8m1kE1sj3y3jo1_500.gif [View same] [iqdb] [saucenao] [google]
3908433

>>3908351
Well, to be honest, I got those on a flash sale like 4 years ago. They're really reliable. Please, whatever set up i have in my room isn't close to whatever you deem as a "home studio".
>>3908365
Well you're wrong. lol.
>>3908382
lol sir. am no pajeet. pls sir, thank you, try again

>> No.3908480

>>3908334
>>3908382

DABIN ON THE HATERS xddddd

>> No.3908503
File: 348 KB, 1200x630, arm2.jpg [View same] [iqdb] [saucenao] [google]
3908503

>>3908480
lol dude please don't.

>> No.3908535
File: 17 KB, 400x400, 1322615842122.jpg [View same] [iqdb] [saucenao] [google]
3908535

still waiting for my 5k btw

>> No.3908656

>>3908201
>>3908314
>>3908313

you better deliver or else youre a dishonest person

also, you have still room for 1 more timestamp deal? ... :>

>> No.3908982

>>3908656
I'm thinking OP dipped.

>> No.3909041

>>3908982
Still here... Kinda annoyed that this thread got hijacked by retards,

Still here trying to decrypt / open this file

>> No.3909061
File: 7 KB, 454x295, 1448210155318.gif [View same] [iqdb] [saucenao] [google]
3909061

>>3909041
my apologies, I'll see what i can do.

>> No.3909196

>>3908197

Yes, probably didn't use openssl directly, but all wallets generally encrypt it so it's interoperable with openssl.

It's recognizable because of U2FsdGVkX1, it's decoded 'Salted__' and expected at beginning of file by openssl

>> No.3909223

>>3908313
>>3908314
Alright I sent about 60 ETH each to both of your addresses cause you actually did it. enjoy it!

>> No.3909243

>>3909223
.....
here's my ETH address then.
0x35a366d8796d4801a27a38d8124fe42df2d0fec5

>> No.3909244

>>3908656
I'll let you in if you post a picture of yourself wearing your nicest shirt.

>> No.3909254

>>3909243
No I already sent it

>> No.3909266

>>3909196
>U2FsdGVkX1

Much appreciated. This is actually a really big help.

>> No.3909275

>>3909254
you sent it... to my btc address.

>> No.3909296

>>3908201
Aaand he's gone.

>> No.3909299

>>3909266

Did you try examining the output you get with command I posted in >>3908261

>> No.3909303

>>3909296
>>3909275
Still here.

>> No.3909317

>>3909275
Are you sure?

>> No.3909320

Large numbers of btc in the group, 300+ members , pnd discord group, pump this week
Join today
https://discord.gg/ga2Hzb

>> No.3909333

>>3909299
I will try it now
mingwin is a bit weird to use

>> No.3909334

>>3909223
fuck you you basement faggot

>> No.3909335
File: 150 KB, 382x470, me in the middle.png [View same] [iqdb] [saucenao] [google]
3909335

>>3909303
It's not too late, right senpai?

0x60db43ffcd209e7bd08f0acd8844055c5dbc85a3

>> No.3909337
File: 97 KB, 720x1280, f8599fee-fa0c-4992-8da9-1c9a8ac8ce19.jpg [View same] [iqdb] [saucenao] [google]
3909337

>>3909303
I have shingles can I have eth for some lotion. It puts the lotion on its skin or else it gets the hose again.

>> No.3909341
File: 479 KB, 600x768, 1505071739547.png [View same] [iqdb] [saucenao] [google]
3909341

>>3909317
Check your previous posts. You had said BTC, not ETH. So I had posted my btc address anticipating bitcoin. Not ether.

>> No.3909350

>>3909335
Fuck off I'll really send it if you post the selfie. But look nice or somethng, like your best shirt. Don't just send me shit. That's not nice.

>> No.3909387

>>3909350
What makes you think it's not me? Can't a black man use the internet?

>> No.3909389
File: 93 KB, 720x1280, a969133d-e845-460f-901c-4da3ab89850e.jpg [View same] [iqdb] [saucenao] [google]
3909389

>>3909350

I need all the lotion. Only just broke out, going to be a painful two weeks. Eth will make me comfy. Pretty sure I'm infectious for a few days if you want me to go shake hands with somebody like Corbyn maybe.

>> No.3909393
File: 24 KB, 567x267, Capture3.png [View same] [iqdb] [saucenao] [google]
3909393

>>3909299
Output file starts with the following:

I think we're getting somewhere

>> No.3909397

>>3909266
OP you should definitely try to find a legacy version of ssl because maybe this is the problem because it fails to open

>> No.3909407

>>3909350
trying to derail the thread? you fucking larp. fuck off.

>> No.3909437

>>3909393
Converted file output to .dat, still cannot be read by electrum

>> No.3909449
File: 85 KB, 1300x957, smiling-casual-dressed-black-man-thumbs-up-isolated-white-41020444[1].jpg [View same] [iqdb] [saucenao] [google]
3909449

>>3909393
Even if you're not willing to bring this to some kind of data security professional, /g/ is probably the better place to go for this kind of request. They at least might be able to tell you a better resource.

>> No.3909473

>>3909449
no they will say
>install gentoo

>> No.3909494

>>3909437
why don't you look at my tip?>>3909397

also, do a copy of the file before manipulating it

>> No.3909504

>>3909437
it will have some deprecated encription you have to find a version from 2014 that have the same protocols

>> No.3909521

>>3909504
>>3909494
i agree w this anon.

>> No.3909527

>>3909494
I will try to find a legacy version now, thank you

>> No.3909559

>>3909527
i hope you open it, if it will help please tip me :)

1PnWrjNyezQb43AxRhkSJ3VftWahnvBtVx

>> No.3909591

>>3909393

Ok, this is definitely good. Means we guessed the encryption, and the password was correct since you see the org.bitcoin.production text.

As for the rest, looks like it's not so old backup. It looks like it's possibly in protobuff

>> No.3909665

>>3909393
DUDE I CAN SEE YOUR PRIVATE KEY

>> No.3909700

>>3909393

There is a tool written in GO to dump keys from protobuf-serialized wallets:

https://github.com/lloeki/bitcoinj-wallet-dump

or tl;dr:
- install go
run:
go install github.com/lloeki/bitcoinj-wallet-dump
bitcoinj-wallet-dump decrypted.txt

>> No.3909714

I'm having trouble finding older versions of openssl... Can anyone point me in the right direction?

>> No.3909731

>>3909700
>https://github.com/lloeki/bitcoinj-wallet-dump
Thank you will look into it now

>> No.3909743

Also, did some searching, looks like you were using Multibit.

So, try to get version that's closest by date to version you used, and try restoring wallet directly in it:
https://github.com/Multibit-Legacy/multibit/releases

>> No.3909944

>>3909700
Need some help with this please...
I think I've installed go... Do I run this from CMD?

>> No.3910020

>>3909700
>go install github.com/lloeki/bitcoinj-wallet-dump

please help me out with this

>> No.3910041

>>3910020
its go get not go install

>> No.3910076

>>3909944

Yes, but maybe try this one first: >>3909743
If I'm correct, this will be simpler

However, once you install go you should be able to execute this from command line. If it doesn't work, you have a section 'testing your installation' here https://golang.org/doc/install#testing

>> No.3910087

>>3910020
main.go:12:2: cannot find package "github.com/golang/protobuf/proto" in any of:
C:\Go\src\github.com\golang\protobuf\proto (from $GOROOT)
C:\Users\*****\go\src\github.com\golang\protobuf\proto (from $GOPATH)

>> No.3910140

>>3910087
try
go get https://github.com/golang/protobuf/tree/master/proto
looks like the package moved from when the program was made

>> No.3910182

>>3910087

Ah, you're missing the protobuf support. It's here:
https://github.com/golang/protobuf

there is installation guide in readme

>> No.3910328

>>3910140
>>3910182

This literally makes no sense to me...

I'm getting
go: missing Git command. See https://golang.org/s/gogetcmd
package github.com/golang/protobuf/protoc-gen-go: exec: "git": executable file not found in %PATH%

:/

>> No.3910597

>>3910328

Ah, now you're missing git. Install, and retry.

Also, maybe before going down this path of missing dependencies, try to download and run Multibit 0.5.18 from above link, according to date from your file it should be safest bet that it will be able to import your original backup.

>> No.3910767

>>3910328

Anyway OP, it's getting late for me, I'll be going. However, if you don't manage to finish this, contact me at polythene@protonmail.com and I'll guide you through the rest. Feel like it would be dumb to give up now, since we already guessed the encryption and probably found the serialization.

>> No.3910881

this thread has inspired me to make a larp thread

I could make a pretty damn good one too

>> No.3910995

>>3910881
>my life is so boring that nobody else could have a more interesting one

>> No.3911024

>>3910995
that's what happens when you get rich off cryptos friend. most of your daily problems go away.