Elcomsoft Distributed Password Recovery

Elcomsoft Distributed Password Recovery

by Elcomsoft Co. Ltd.

What is Elcomsoft Distributed Password Recovery?

Elcomsoft Distributed Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 59.68% of installations running this operating system. Elcomsoft Distributed Password Recovery's installer is typically 37.00 MB in size and installs around 43 files. The most common release is 2.99.481.1670 with 24.19% of all installations currently using this version.

Elcomsoft Distributed Password Recovery is most popular in the United States with 39.13% of installations residing in this country.

Elcomsoft Distributed Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • edpr_server.exe runs as a service named 'Elcomsoft Distributed Password Recovery Server' (ElcomSoftDistributedPasswordRecoveryServer).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.

Software Details

URL:
https://www.elcomsoft.com/edpr.html
Support:
https://www.elcomsoft.ru
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /I{1D71119F-2056-443C-9432-166433886EC9}
Size:
37.00 MB
Language:
English

Elcomsoft Distributed Password Recovery Executable Details

Primary executable:
msvcr90.dll
Name:
Elcomsoft Distributed Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\msvcr90.dll
MD5:
SHA-1:
SHA-256:
Files installed by Elcomsoft Distributed Password Recovery
File Type Filename MD5
EXE
70892fe044aace31577923fd60261870
EXE
aebd24fc61f3986952077863f7b8903f
EXE
dca6a2f56d55f3e221d992981f7e3f58
EXE
2b527bf50a36b398db0ccddb55bf0c54
DLL
40ab7ba09460f0d00d7225a2b4b9230b
DLL
03dc6c33846b6fcefaf33660f745270b
DLL
3c639628833684b7d97840a15797cced
DLL
07c6e748324868ebea02ed3e2de3aff9
EXE
ae2ce3372129cec0b55a4c184b0f6644
EXE
7009fcdde668d434fcd5ec3fa7a54b3a