3 ms·
On Windows they are protected with DPAPI, so you won't be able to decrypt them without having access to the user account that "owns" the passwords. Of course,
by ryanlol 9y ago
On Windows they are protected with DPAPI, so you won't be able to decrypt them without having access to the user account that "owns" the passwords.
Of course, this helps you very little when the malware is running under your user account and uses DPAPI calls to decrypt the passwords.
https://msdn.microsoft.com/en-us/library/ms995355.aspx https://msdn.microsoft.com/en-us/library/ms995355.aspx