View Issue Details

IDProjectCategoryView StatusLast Update
0000576fileGeneralpublic2024-12-06 08:31
ReporterAnge Assigned Tochristos  
PrioritynormalSeverityminorReproducibilityhave not tried
Status feedbackResolutionreopened 
Product Version5.46 
Fixed in VersionHEAD 
Summary0000576: Add support for Bitcoin Wallet (SQlite-based)
DescriptionBitcoin wallet (wallet.dat) aren't properly identified.
Steps To Reproduce- get the attached wallet.dat (genuine wallet with its table cleared)
- scan it with file.
- it's identified as 'SQLite 3.x database, application id 4190024921'.
Additional InformationThey are Sqlite files with an AppID of F9 BE B4 D9 (Bitcoin main net magic https://en.bitcoin.it/wiki/Protocol_documentation#Message_structure)

The following patch in the 'sql' signature will do the trick:
>>68 belong =0xF9BEB4D9 Bitcoin wallet
TagsNo tags attached.

Activities

Ange

2024-12-02 08:22

reporter  

wallet-test.db (12,288 bytes)

Ange

2024-12-02 09:00

reporter   ~0004110

It shouldn't be 'have not tried', it just works everytime.

christos

2024-12-05 18:49

manager   ~0004116

Added, thanks.

Ange

2024-12-06 08:31

reporter   ~0004122

I've found since "wallet.dat" files (same schema, similar contents) with AppIds:
- set to the "testnet3" magic : 0B 11 09 07 - ex: https://www.virustotal.com/gui/file/6d0efdfd0ebb3925538ae97d7d4df67ce33e1435177116e96f3bd4cdf6fedf1e/details
- set to unknown magic: f2 9f 4a fb - ex: https://www.virustotal.com/gui/file/3381f267dedc33da9c4af75cac7eb1c1d728ade9897b98ada02a79698c0879fc/details

FTR, there are other known magics :https://en.bitcoin.it/wiki/Protocol_documentation#Message_structure
- testnet/regtest: FA BF B5 DA
- signet(default): 0A 03 CF 40
- namecoin: F9 BE B4 FE

Issue History

Date Modified Username Field Change
2024-12-02 08:22 Ange New Issue
2024-12-02 08:22 Ange File Added: wallet-test.db
2024-12-02 09:00 Ange Note Added: 0004110
2024-12-05 18:49 christos Assigned To => christos
2024-12-05 18:49 christos Status new => assigned
2024-12-05 18:49 christos Status assigned => resolved
2024-12-05 18:49 christos Resolution open => fixed
2024-12-05 18:49 christos Fixed in Version => HEAD
2024-12-05 18:49 christos Note Added: 0004116
2024-12-06 08:31 Ange Status resolved => feedback
2024-12-06 08:31 Ange Resolution fixed => reopened
2024-12-06 08:31 Ange Note Added: 0004122