pypykatz icon indicating copy to clipboard operation
pypykatz copied to clipboard

Exception: Could not find module! lsasrv.dll

Open thatpham opened this issue 2 years ago • 3 comments

I dump secrets with command: pypykatz lsa minidump lsass.dmp I got error with "Could not find module! lsasrv.dll". Can you help me where directory which load file lsarv.dll. Thanks.

thatpham avatar Jul 19 '22 03:07 thatpham

Can we expect 'lsa minidump' to work on Linux if it requires lsasrv.dll? Pywin is not supported on Linux, Pypiwin is too old (syntax errors on Python 3.* in print statements at least). Where would this module come from for non-Windows users?

bill-e-ghote avatar May 26 '23 16:05 bill-e-ghote

pypykatz doesn't require lsasrv.dll, the error message means that the dll was not found in the dump file. Most likely the issue is caused by the pypykatz version @thatpham used did not have the matching signature for that particular windows build.
pypykatz parses mindump on any operating system where python works, the entire parsing is implemented in python.

skelsec avatar May 26 '23 16:05 skelsec

pypykatz doesn't require lsasrv.dll, the error message means that the dll was not found in the dump file. Most likely the issue is caused by the pypykatz version @thatpham used did not have the matching signature for that particular windows build. pypykatz parses mindump on any operating system where python works, the entire parsing is implemented in python.

I think i do encounter same issue on some specific machines whereas in others i dont. How can i handle that situation and how to know which version would work for me ? Please check my issue that i just created https://github.com/skelsec/pypykatz/issues/137

SeiV-K avatar Nov 06 '23 11:11 SeiV-K