Advanced IM Password Recovery

Advanced IM Password Recovery

by Elcomsoft Co. Ltd.

What is Advanced IM Password Recovery?

Advanced IM Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. Advanced IM Password Recovery's installer is typically 27.00 MB in size and installs around 42 files. The most common release is 4.40.417.1375 with 50.00% of all installations currently using this version.

Advanced IM Password Recovery is most popular in the United States with 65.9% of installations residing in this country.

Advanced IM Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.

Software Details

URL:
https://www.elcomsoft.ru
Support:
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /X{F21D8FA8-34BD-4416-A488-96CDB89D44C1}
Size:
27.00 MB
Language:
English

Advanced IM Password Recovery Executable Details

Primary executable:
msvcr90.dll
Name:
Advanced IM Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\msvcr90.dll
MD5:
SHA-1:
SHA-256:
Files installed by Advanced IM Password Recovery
File Type Filename MD5
EXE
a187aab52f26c21fb72ab439d952399b
EXE
6d7b12181abc134f93e590ec33a61428
EXE
ad9321f6067363e2616fcc372e290d5d
EXE
2b527bf50a36b398db0ccddb55bf0c54
DLL
2b0adacd7f82099d0b0aee86ee9caaec
DLL
2d4baafcca8d35cb0cbcc6d0c76ebdd6
DLL
61c1087b0c830d93eee47fd4a9063a7c
DLL
0b89749ae0fdec7b702d5542bd4d9843
EXE
11664904ab6ffe86241deeb2921f66c9
EXE
224509f74f78e5f6ea95f9d44d4227b2