Advanced Office Password Recovery

Advanced Office Password Recovery

by Elcomsoft Co. Ltd.

What is Advanced Office Password Recovery?

Advanced Office Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 65.32% of installations running this operating system. Advanced Office Password Recovery's installer is typically 7.00 MB in size and installs around 41 files. The most common release is 5.4.547.483 with 23.95% of all installations currently using this version.

Advanced Office Password Recovery is most popular in the United States with 21.61% of installations residing in this country.

Advanced Office Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.

Software Details

URL:
https://www.elcomsoft.com/aopr.html
Support:
https://www.elcomsoft.ru
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /X{85A9C830-7FA6-4C8C-A1B9-14C8D423B2A4}
Size:
7.00 MB
Language:
English

Advanced Office Password Recovery Executable Details

Primary executable:
aopr.exe
Name:
Advanced Office Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\aopr.exe
MD5:
95a84da1ebdfccef6e349eb8bade9071
SHA-1:
SHA-256:
Files installed by Advanced Office Password Recovery
File Type Filename MD5
EXE
99ea630d8a98fa9b67f912d4dd1792d9
EXE
0d542cd521bea05a4c3d12ee43fd332c
EXE
06835138bc4d49c1375943492994dd06
EXE
e5749971dfde0c48c40cc9aaff8bf8b9
EXE
f0ee879df3c23519de03f807fd79539d
EXE
0dd721e25f70c537e80645fc7a6117b5
DLL
2979b43ba9a48c2bef33a6146d4db210
EXE
d753350f00f360855aa6372a657aad1d
DLL
c327f7ab3dcfe3f60407ea6127274df5
DLL
f96ed28bf6a4d6ac031375ff2be6cb2b