Advanced Office Password Recovery

Advanced Office Password Recovery

by Elcomsoft Co. Ltd.

What is Advanced Office Password Recovery?

Advanced Office Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 65.32% of installations running this operating system. Advanced Office Password Recovery's installer is typically 7.00 MB in size and installs around 41 files. The most common release is 5.4.547.483 with 23.95% of all installations currently using this version.

Advanced Office Password Recovery is most popular in the United States with 21.61% of installations residing in this country.

Advanced Office Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.

Software Details

URL:
https://www.elcomsoft.com/aopr.html
Support:
https://www.elcomsoft.ru
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /X{85A9C830-7FA6-4C8C-A1B9-14C8D423B2A4}
Size:
7.00 MB
Language:
English

Advanced Office Password Recovery Executable Details

Primary executable:
aopr.exe
Name:
Advanced Office Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\aopr.exe
MD5:
95a84da1ebdfccef6e349eb8bade9071
SHA-1:
SHA-256:
Files installed by Advanced Office Password Recovery
File Type Filename MD5
DLL
10dc7a78363d94e5a314e9d423663ec1
DLL
4f573563ed3c8912f3ab1e203b2ded9b
DLL
7c4a3f7d8f3303b21fbe6a565aecd716
EXE
85c8159fd7488bc78dd9e245ac0aa166
EXE
27a3c344b0c05467618ec207d01b7168
EXE
43d324872442e1fd4ffec3812fe4651e
EXE
fa71e7324dd841a5b86bf2d2a751ed6b
EXE
1702110dc23fce5e498f392a8d8eaf09
EXE
2ef0e0e04ca909bfc146ccce7ca1746d
EXE
5fc3eeb7481138a21d8cdd653954f302