EFS files - Masterkey with empty user password in windows login
Kitamiss opened this issue · comments
Hi,
I am trying to extract a certificate to decrypt the efs file in windows.
The encrypted file belongs to an HDD of another PC that cannot log in as a user.
I have no problems recovering the masterkey if the user password exists, but when the user did not enter a Windows access password when running mimikatz in these 2 ways it does not work:
-
at the end of the line /password: (I leave the password empty).
-
at the end of the line do not use /password:
How can I get the sha1 masterkey if the user who encrypts the file does not have a login password?
Thank you
Solo había que añadir sha1 pass en blanco:
da39a3ee5e6b4b0d3255bfef95601890afd80709