Extracting credentials from memory with LSA protection (Proctected Process Light) enabled