How Extracting address Bitcoin to script multi signature

Question

I want to extract the correct address from a script multi-signature.

I have this real script multi-signature from this ScriptSig (tx index 1), so this is a readme script for this address

OP_2 
    03385adff37fd3d0a620ebc4e9866e81dda8ba8616e5ebcae899c7f51899267ae7 
    034c08511718f947d1a3e152195c5e2756588e3e0c2c7730927eb6647af4942107 
    033da9f8938a5b947a723df21b73fbd3985b719249324d2c705acfb97d63a5df9e 
OP_3 OP_CHECKMULTISIG

Now from this resource these value 03385adff37fd3d0a620ebc4e9866e81dda8ba8616e5ebcae899c7f51899267ae7, 034c08511718f947d1a3e152195c5e2756588e3e0c2c7730927eb6647af4942107, 033da9f8938a5b947a723df21b73fbd3985b719249324d2c705acfb97d63a5df9e are the public keys, so this value is a pure public key? and for exstract the address form these I can execute the procedure for build bitcoin primitive address ?

or I'm lost some information for this argument?

an example if I suppose this value is a public key 03385adff37fd3d0a620ebc4e9866e81dda8ba8616e5ebcae899c7f51899267ae7

This should be the compressed public key because it starts with "03" if apply the HASH160 I get this address "14r7XjPtqVijLRhY9BkGAtDqVDp4txsK1X"

Is my reasoning right?

More Information on the why I want to get the address to P2MSH

I don't want to break the privacy of the address 3CD1QW6fjgTwKq3Pj97nty28WZAVkziNom, I'm reading this article and it catalogated the address 3CD1QW6fjgTwKq3Pj97nty28WZAVkziNom how an scam address, but I think this is restrictive affermation, because the address with "3" can to hide more people/address.

I'm only learning and I don't want break the privacy of the people

Answer 1

The correct address is 3CD1QW6fjgTwKq3Pj97nty28WZAVkziNom. The individual public keys are only able to access the coins if they act together in a group of at least 2 out of 3. If you derive a regular p2pkh from each individual key, you will end up searching for utxos that likely don't exist.

Also note that each individual public key does not necessarily mean that there are that many individual people involved. Many security conscious companies and people have multisig addresses with each key stored on a separate device/location, requiring multiple signatures from different systems, etc. They may all still be under the control of a single entity.

When cataloging transactions and matching patterns across the network, you should be working with the P2SH address for a multisig address. Breaking it down into its components will produce incorrect results.