================================================================
  WALLET CHECK REPORT
  Date:    07/10/2026 01:57:45
  WARNING: this file may contain private keys - store it safely.
================================================================
Wallet:  wallet_0,009.dat

========================================================================
1. HASH OF ORIGINAL
========================================================================
FILE:    wallet_0,009.dat
CRC32:   F4172847
MD5:     D6775EF73BF98C74A64061FB1EC99869
SHA-1:   5293C2666F3386379FEC72CA8985FD2AB4B9A57B
SHA256:  71243CA001B8B39F29717D77F86A58F545F67BB9EE924EB6414C9A407AD6EE07
========================================================================
2. OFFLINE TRIAGE (no node)
========================================================================
--- File format ---
Size: 57344 bytes
Detected: Berkeley DB magic -> LEGACY wallet (expected for 0.19).

--- bitcoin-wallet info ---
Wallet info
===========
Encrypted: yes
HD (hd seed available): no
Keypool Size: 0
Transactions: 3
Address Book: 2

--- Marker scan (printable strings) ---
Markers found: ckeyA, name"16PCQnhRNZoD2jGuCNvfJS3aCZeELsX34A, name"168w3GKS5LZwBSBrNRZX8JtUKxFrfyDBef, mkey
  -> mkey present: wallet is most likely ENCRYPTED.
  -> ckey present: ENCRYPTED private keys exist.

--- Real on-chain balance (block explorer lookup) ---
Addresses found in wallet file: 2
Checking balances (this may take a few seconds)...
  [1/2] 16PCQnhRNZoD2jGuCNvfJS3aCZeELsX34A : 0.00900000 BTC (900000 sat)
  [2/2] 168w3GKS5LZwBSBrNRZX8JtUKxFrfyDBef : 0.00000000 BTC (0 sat)
--------------------------------------------------
TOTAL BALANCE: 0.00900000 BTC   (900000 sat)
Source:        https://mempool.space/api/address/168w3GKS5LZwBSBrNRZX8JtUKxFrfyDBef

========================================================================
3. START bitcoind
========================================================================
Args: -datadir=C:\DISCK-D\01-MY-PROGRAMS\01-BTC-Tools\02hashcat-7.1.2\01bitcoin-0.19.1-wallet-check\bin\walletcheck_work -wallet=wallet_0,009.dat -noconnect=1 -dnsseed=0 -listen=0 -maxconnections=0 -server=1 -printtoconsole=0
Waiting for RPC (up to 90 s)...
RPC is ready.

========================================================================
4. getwalletinfo
========================================================================
{
  "walletname": "wallet_0,009.dat",
  "walletversion": 10500,
  "balance": 0.00900000,
  "unconfirmed_balance": 0.00000000,
  "immature_balance": 0.00000000,
  "txcount": 3,
  "keypoololdest": 1783641469,
  "keypoolsize": 0,
  "unlocked_until": 0,
  "paytxfee": 0.00000000,
  "private_keys_enabled": true,
  "avoid_reuse": false,
  "scanning": false
}

Parsed -> private_keys_enabled=True | keypoolsize=0 | txcount=3 | hdseedid=n/a

========================================================================
5. WALLET IS ENCRYPTED - unlocking
========================================================================
No passphrase entered - private keys will not be dumped.
(The verdict can still confirm the wallet TYPE without the password.)

========================================================================
6. listaddressgroupings
========================================================================
{
    "value":  [
                  [
                      "16PCQnhRNZoD2jGuCNvfJS3aCZeELsX34A",
                      0.009,
                      ""
                  ]
              ],
    "Count":  1
}

========================================================================
7. getbalances
========================================================================
{
  "mine": {
    "trusted": 0.00900000,
    "untrusted_pending": 0.00000000,
    "immature": 0.00000000
  }
}

========================================================================
8. getaddressesbylabel (default label)
========================================================================
bitcoin-cli.exe : error code: -1
At C:\DISCK-D\01-MY-PROGRAMS\01-BTC-Tools\02hashcat-7.1.2\01bitcoin-0.19.1-wallet-check\bin\wallet_check2.ps1:142 
char:12
+     $out = & $cli @base @CmdArgs 2>&1
+            ~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (error code: -1:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError
 
error message:
getaddressesbylabel "label"

Returns the list of addresses assigned the specified label.

Arguments:
1. label    (string, required) The label.

Result:
{ (json object with addresses as keys)
  "address": { (json object with information about address)
    "purpose": "string" (string)  Purpose of address ("send" for sending address, "receive" for receiving address)
  },...
}

Examples:
> bitcoin-cli getaddressesbylabel "tabby"
> curl --user myusername --data-binary '{"jsonrpc": "1.0", "id":"curltest", "method": "getaddressesbylabel", "params": 
["tabby"] }' -H 'content-type: text/plain;' http://127.0.0.1:8332/

========================================================================
9. dumpwallet
========================================================================
Skipped: wallet locked / no passphrase.

========================================================================
10. getaddressinfo per address (ismine / iswatchonly / solvable)
========================================================================
Unique addresses found: 1 (checking up to 100)

[16PCQnhRNZoD2jGuCNvfJS3aCZeELsX34A]
{
  "address": "16PCQnhRNZoD2jGuCNvfJS3aCZeELsX34A",
  "scriptPubKey": "76a9143b0b4e060f763e4248324294664df42109d790be88ac",
  "ismine": true,
  "solvable": true,
  "desc": "pkh([3b0b4e06]04bd80416b48f1f9e1134b92c9e15257eb7c9a8c47b0793a43120ffcf6ce363463153b05e371685affd514c4b80dd20cf301cc84b36c460fef5e4819cb3b21f22f)#srqyuq8z",
  "iswatchonly": false,
  "isscript": false,
  "iswitness": false,
  "pubkey": "04bd80416b48f1f9e1134b92c9e15257eb7c9a8c47b0793a43120ffcf6ce363463153b05e371685affd514c4b80dd20cf301cc84b36c460fef5e4819cb3b21f22f",
  "iscompressed": false,
  "label": "",
  "ischange": false,
  "labels": [
    {
      "name": "",
      "purpose": "unknown"
    }
  ]
}

========================================================================
11. listdescriptors (descriptor wallets, Core 0.21+)
========================================================================
Not supported on this Core version (descriptors are a 0.21+ feature).
Legacy equivalent already checked: HD seed via dumpwallet (hdseed=1) / hdseedid.

========================================================================
PART III - VERDICT  (cross-checked, single result)
========================================================================
Re-checked signals (the evidence this verdict is based on):
  file format             : Berkeley DB (legacy wallet)
  loaded by node (RPC)    : yes
  getwalletinfo parsed    : yes
  encrypted               : yes    (unlocked_until / mkey)
  private_keys_enabled    : True
  keypoolsize             : 0
  txcount                 : 3
  HD seed present         : no    (hdseedid / dump hdseed=1)
  ckey marker (enc keys)  : yes
  mkey marker (encryption): yes
  addressgroupings empty  : no
  watch-only in balances  : no
  private keys dumped     : 0
  addresses ismine        : 1
  addresses iswatchonly   : 0
  REAL balance (explorer) : 0.00900000 BTC   (across 2 addresses)

VERDICT:  [GOOD]  Real ENCRYPTED wallet with keys 

    The file contains private keys (or an encrypted HD seed) and is password-protected.
    Evidence: encrypted=yes; ckey=yes; HD seed=no; keys dumped=0; keypool=0.
    If you did not unlock it, the keys are present but locked.

Brute-force / recovery:  MAKES SENSE - Part IV: btcrecover (known pattern) or hashcat -m 11300 (hash via bitcoin2john.py).

Real on-chain balance:  0.00900000 BTC  (across 2 addresses, source: https://mempool.space/api/address/168w3GKS5LZwBSBrNRZX8JtUKxFrfyDBef)

========================================================================
STOP bitcoind
========================================================================
Node stopped cleanly.