Advanced Office Password Recovery

Advanced Office Password Recovery

by Elcomsoft Co. Ltd.

What is Advanced Office Password Recovery?

Advanced Office Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 65.32% of installations running this operating system. Advanced Office Password Recovery's installer is typically 7.00 MB in size and installs around 41 files. The most common release is 5.4.547.483 with 23.95% of all installations currently using this version.

Advanced Office Password Recovery is most popular in the United States with 21.61% of installations residing in this country.

Advanced Office Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.

Software Details

URL:
https://www.elcomsoft.com/aopr.html
Support:
https://www.elcomsoft.ru
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /X{85A9C830-7FA6-4C8C-A1B9-14C8D423B2A4}
Size:
7.00 MB
Language:
English

Advanced Office Password Recovery Executable Details

Primary executable:
aopr.exe
Name:
Advanced Office Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\aopr.exe
MD5:
95a84da1ebdfccef6e349eb8bade9071
SHA-1:
SHA-256:
Files installed by Advanced Office Password Recovery
File Type Filename MD5
EXE
ee68185f1ea09ac0549ae8a71fa9a66b
EXE
c5417a63a7b46f74264ff90d7776deb8
EXE
430f42a138aa9b0f9f523fae58753ad1
EXE
88f36ae5fb78796c4165c93a6ccff77f
EXE
95a84da1ebdfccef6e349eb8bade9071
EXE
c813f40ee7393728cb175f920093f411
EXE
a187aab52f26c21fb72ab439d952399b
EXE
6d7b12181abc134f93e590ec33a61428
EXE
ad9321f6067363e2616fcc372e290d5d
DLL
4eb1edf6b45b9678273bee45fcc1897e