NirSoft has released EncryptedRegView, a free tool which finds, decrypts and displays Registry data protected by Windows’ DPAPI encryption scheme. DPAPI isn’t widely used, even by Microsoft products, but the program managed to find Outlook passwords, Microsoft Edge details and a few other interesting items on our test PC. The program is straightforward to use. Run it as an administrator if possible, click OK on the opening dialog and watch as EncryptedRegView scans your Registry. The program displays every DPAPI-protected item it finds, with columns for Registry path, original and decrypted values, hash and encryption values, and more. Most of… [Continue Reading]
Continue reading...
Continue reading...