Do not use the LSA private data functions. Instead, use the CryptProtectData and CryptUnprotectData functions.
More info on LsaRetrievePrivateData in Windows Dev CenterExported by
| size | filename | version | |
|---|---|---|---|
| 640512 | module.284.3eefdd40.76fd0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 640512 | module.600.3f5a5a88.755e0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 878080 | advapi32.dll | 6.1.7601.18247 (win7sp1_gdr.130828-1532) | |
| 640512 | advapi32.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 640512 | advapi32.dll | 6.1.7601.18247 (win7sp1_gdr.130828-1532) | |
| 655360 | advapi32.dl_ | 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) | |
| 640512 | module.1784.3ee63380.755e0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 640512 | module.3656.3effe720.755e0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) |
Imported by
| size | filename | |
|---|---|---|
| 313904 | fsociety.exe | |
| 787456 | mimikatz - Copy.exe | |
| 289384 | crypted120med.exe.renameme | |
| 72192 | regapi.dll | |
| 3751676 | dll_prog.exe | |
| 557568 | g.exe | |
| 574464 | clean_clansv2.20.exe | |
| 17315008 | MSO.DLL | |
| 664064 | executable.3204.exe | |
| 509440 | winlogon.exe | |
| 390504 | mDNSResponder.exe |