Elcomsoft Distributed Password Recovery

Elcomsoft Distributed Password Recovery

by Elcomsoft Co. Ltd.

What is Elcomsoft Distributed Password Recovery?

Elcomsoft Distributed Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 59.68% of installations running this operating system. Elcomsoft Distributed Password Recovery's installer is typically 37.00 MB in size and installs around 43 files. The most common release is 2.99.481.1670 with 24.19% of all installations currently using this version.

Elcomsoft Distributed Password Recovery is most popular in the United States with 39.13% of installations residing in this country.

Elcomsoft Distributed Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • edpr_server.exe runs as a service named 'Elcomsoft Distributed Password Recovery Server' (ElcomSoftDistributedPasswordRecoveryServer).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.

Software Details

URL:
https://www.elcomsoft.com/edpr.html
Support:
https://www.elcomsoft.ru
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /I{1D71119F-2056-443C-9432-166433886EC9}
Size:
37.00 MB
Language:
English

Elcomsoft Distributed Password Recovery Executable Details

Primary executable:
msvcr90.dll
Name:
Elcomsoft Distributed Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\msvcr90.dll
MD5:
SHA-1:
SHA-256:
Files installed by Elcomsoft Distributed Password Recovery
File Type Filename MD5
EXE
bb220bf62e4e237bf9c59b30ac778313
DLL
b53a6eaf9fea8257c8b19f03b906f9ba
DLL
3c07545f4988e8da4c85368e3679a9f6
EXE
47b0a2aa9c568ea6c800a6f912f21631
EXE
09b75c11a4c1bbeb4e7b14cc60c922e5
EXE
9099cbefa9d16975a191e7463d8fb036
EXE
430f42a138aa9b0f9f523fae58753ad1
EXE
88f36ae5fb78796c4165c93a6ccff77f
EXE
bcfcde2d282904cab1f8cfcf4d48b999
EXE
7b0979459c8ce04bc9c95dc2ad782d4d