Advanced IM Password Recovery

Advanced IM Password Recovery

by Elcomsoft Co. Ltd.

What is Advanced IM Password Recovery?

Advanced IM Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. Advanced IM Password Recovery's installer is typically 27.00 MB in size and installs around 42 files. The most common release is 4.40.417.1375 with 50.00% of all installations currently using this version.

Advanced IM Password Recovery is most popular in the United States with 65.9% of installations residing in this country.

Advanced IM Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.

Software Details

URL:
https://www.elcomsoft.ru
Support:
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /X{F21D8FA8-34BD-4416-A488-96CDB89D44C1}
Size:
27.00 MB
Language:
English

Advanced IM Password Recovery Executable Details

Primary executable:
msvcr90.dll
Name:
Advanced IM Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\msvcr90.dll
MD5:
SHA-1:
SHA-256:
Files installed by Advanced IM Password Recovery
File Type Filename MD5
DLL
c043179a046bb3029b4af9847ea1d696
EXE
cbee002b118a4b3f48f4735ef644cadc