Advanced Office Password Recovery

Advanced Office Password Recovery

by Elcomsoft Co. Ltd.

What is Advanced Office Password Recovery?

Advanced Office Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 65.32% of installations running this operating system. Advanced Office Password Recovery's installer is typically 7.00 MB in size and installs around 41 files. The most common release is 5.4.547.483 with 23.95% of all installations currently using this version.

Advanced Office Password Recovery is most popular in the United States with 21.61% of installations residing in this country.

Advanced Office Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.

Software Details

URL:
https://www.elcomsoft.com/aopr.html
Support:
https://www.elcomsoft.ru
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /X{85A9C830-7FA6-4C8C-A1B9-14C8D423B2A4}
Size:
7.00 MB
Language:
English

Advanced Office Password Recovery Executable Details

Primary executable:
aopr.exe
Name:
Advanced Office Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\aopr.exe
MD5:
95a84da1ebdfccef6e349eb8bade9071
SHA-1:
SHA-256:
Files installed by Advanced Office Password Recovery
File Type Filename MD5
EXE
1a746d26703422ae2acc49f68f4e8ade
DLL
5e18d02760c57b3a0dd293da60567d8a
DLL
5cad5792bb209694db6e36baa2ca83ea
DLL
75b4d77d0cd8838fce0e1d60a1580ff5
DLL
31c4bbd6d47d892a6445dfa0e0e7e6c2
EXE
a923b5d3dcec506627b9c5a50d0bac1b
EXE
67ff5bb11bf935ce5b77840a71bab4c5
DLL
c7610e977153ab7a6e3d7ff6295b28b1
DLL
61268430467f72bfa4c11c6a6973acf2
EXE
0725f80ad95e11ead62f58dfca5a5b28