Advanced IM Password Recovery

Advanced IM Password Recovery

by Elcomsoft Co. Ltd.

What is Advanced IM Password Recovery?

Advanced IM Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. Advanced IM Password Recovery's installer is typically 27.00 MB in size and installs around 42 files. The most common release is 4.40.417.1375 with 50.00% of all installations currently using this version.

Advanced IM Password Recovery is most popular in the United States with 65.9% of installations residing in this country.

Advanced IM Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.

Software Details

URL:
https://www.elcomsoft.ru
Support:
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /X{F21D8FA8-34BD-4416-A488-96CDB89D44C1}
Size:
27.00 MB
Language:
English

Advanced IM Password Recovery Executable Details

Primary executable:
msvcr90.dll
Name:
Advanced IM Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\msvcr90.dll
MD5:
SHA-1:
SHA-256:
Files installed by Advanced IM Password Recovery
File Type Filename MD5
DLL
70140d842638f057b7fbe4273743dcf8
EXE
060aabbe1546a71223ad998db48db209
EXE
85c8159fd7488bc78dd9e245ac0aa166
EXE
e260050ceec835f578676fb75d9646c7
EXE
1b66056dd728bf2e8db39f431c1d7c74
EXE
3239c9773c1181f901dd93f55c3ef8dc
EXE
3ecba812aa207c1f90c6a783067a65a5
EXE
2044fecba8dcebae8fa62b732aa61f47
EXE
1702110dc23fce5e498f392a8d8eaf09
EXE
4daf3ebd50ad7613804e8a9a58022546