'Load from DAT file' Loads a registry hive file (a DAT file like NTUSER.DAT) and imports the UserAssist key. The DAT file is temporarily loaded in the registry under the USERSLoadedHive key. Be sure to have the local admin rights to access the file and load it. Use this command if you cannot run the program on the machine you want to analyze.
Apr 25, 2018 · The last command displays the account names and their passwords for all active users in the system. As you can see, the utility shows us the super strong user’s password in the clear text! The command was successful because the Debug Mode is enabled on this computer, which allows you to set the SeDebugPrivilege flag for the desired process.