Windows Password Recovery - search DPAPI blobs
The DPAPI blob search dialog is rather trivial. All you need to specify is the source folder, which the program would search for DPAPI blobs, and the target folder, where found blobs are to be stored. The program searches for both binary and text blobs.
Example of a path, where you can find files, containing binary DPAPI blobs:
С:\Users\John\AppData\Roaming\Microsoft\Credentials
Example of a path, where you can find files, containing textual DPAPI blobs:
C:\ProgramData\Microsoft\Wlansvc
Keep in mind that if you want to search for blobs in current user's registry or in Active Directory database, you should first
back up the files to a separate directory.