Home > Products > Windows Passwords > Windows Password Recovery > Screenshots > Forensic tools > DPAPI > DPAPI blob search
DPAPI blob search
30.07.2021
Reset Windows Password v10.4.1
 Support for Windows 10 21H1 and some extra enhancements
06.07.2021
MS Office password recovery tools
 Support for MS Office 97-2003 formats, a major update in the password analysis module and mask attack syntax, etc.
06.07.2021
Office recovery tools
 Some major changes in the password extraction module, mask attack syntax, etc.
17.06.2021
Reset Windows Password v10.3
 Disk image creation tool, Windows PIN history decryption, new HTML/email parsing engine

Passcape RSS news feed more news »

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Windows Password Recovery - search DPAPI blobs



The DPAPI blob search dialog is rather trivial. All you need to specify is the source folder, which the program would search for DPAPI blobs, and the target folder, where found blobs are to be stored. The program searches for both binary and text blobs.

Looking for DPAPI blobs

Example of a path, where you can find files, containing binary DPAPI blobs:
ะก:\Users\John\AppData\Roaming\Microsoft\Credentials

Example of a path, where you can find files, containing textual DPAPI blobs:
C:\ProgramData\Microsoft\Wlansvc
 

Keep in mind that if you want to search for blobs in current user's registry or in the Active Directory database, you should first back up the files to a separate directory.



 
Site map | Terms of use | About us | Contacts