Type DPAPI Blob
Jump to navigation
Jump to search
| Defined Constant | Type_DPAPI_Blob
|
| File Type Value | 597 |
| Parent Type | None |
| Carve | Yes |
| Format Details | Yes |
| MIME Type | application/octet-stream
|
| Filename Extension | bin
|
DPAPI Blob
Description
DPAPI Encrypted Data
Details
This is data encrypted via Microsoft's DPAPI functions.
The CryptProtectData function produces this blob.
Truxton Exploiters
This file type is handled by the following ETLs:
