Hi guys,
I used to use a wallet called Multibits on my laptop.
I had two partitions Linux/Windows my Multibits software was on Windows partition.
That partition crashed so I logged in via my linux partition and used photorec to recover my C:\ (windows partition).
Now my question is how do I find my .key or .wallet file in the recovered files, All files are called etc. recup00234, recup 000321 and so on.
Multibits wallet
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
recuperation
- Posts: 2737
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Multibits wallet
Are you sure you are using PhotoRec?darx wrote: ↑31 Jan 2024, 13:34 Hi guys,
I used to use a wallet called Multibits on my laptop.
I had two partitions Linux/Windows my Multibits software was on Windows partition.
That partition crashed so I logged in via my linux partition and used photorec to recover my C:\ (windows partition).
Now my question is how do I find my .key or .wallet file in the recovered files, All files are called etc. recup00234, recup 000321 and so on.
Recovered files are typically labeled starting with the letter "f" and followed by a number. They are organized in folders whose names start which "recup_dir.".
Please read the manual of the TestDisk package it contains the documentation for PhotoRec as well:
https://www.cgsecurity.org/testdisk.pdf
Your file types does not seem to be known by PhotoRec as you can see here:
https://www.cgsecurity.org/wiki/File_Fo ... y_PhotoRec
Both extensions are already recovered but they refer to other file formats.
How come you expect that PhotoRec will automatically recover your preferred file types?
The standard procedure to recover files that PhotoRec does not know would involve creating a custom signature file. Such a signature file describes the common denominator of all "wallet" files. Another signature file would do the same for the "key" files.
Unfortunately, according to a secondary source
https://rewallet.de/en/blog/multibit-wallet-recovery/
both files are encrypted using AES.
If this is true, the encrypted wallet and key files do not contain a signature that is common for alle those individual "walle" and "key" files.
In this case you cannot recover your files as you have no means to identify them.
If you do not believe this you can try to prove me wrong. Create three wallets and compare two wallet files using a hex editor such as Hxd. If they have something in common it may be by chance. This is why yould compare the location of the common byte values found with the same location in a third wallet file. You can apply the same method for your key files as well.