Elcomsoft Distributed Password Recovery

Elcomsoft Distributed Password Recovery

by Elcomsoft Co. Ltd.

What is Elcomsoft Distributed Password Recovery?

Elcomsoft Distributed Password Recovery is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 59.68% of installations running this operating system. Elcomsoft Distributed Password Recovery's installer is typically 37.00 MB in size and installs around 43 files. The most common release is 2.99.481.1670 with 24.19% of all installations currently using this version.

Elcomsoft Distributed Password Recovery is most popular in the United States with 39.13% of installations residing in this country.

Elcomsoft Distributed Password Recovery adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

Software Behaviors

Services:
  • epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
  • ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • edpr_server.exe runs as a service named 'Elcomsoft Distributed Password Recovery Server' (ElcomSoftDistributedPasswordRecoveryServer).
  • ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
  • psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
Scheduled tasks:
  • ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).

Startup Entries

Registry entries:
  • epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.
  • edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.

Software Details

URL:
https://www.elcomsoft.com/edpr.html
Support:
https://www.elcomsoft.ru
Installation path:
C:\Program Files\Elcomsoft Password Recovery\
Uninstaller:
MsiExec.exe /I{1D71119F-2056-443C-9432-166433886EC9}
Size:
37.00 MB
Language:
English

Elcomsoft Distributed Password Recovery Executable Details

Primary executable:
msvcr90.dll
Name:
Elcomsoft Distributed Password Recovery
Path:
C:\Program Files\Elcomsoft Password Recovery\msvcr90.dll
MD5:
SHA-1:
SHA-256:
Files installed by Elcomsoft Distributed Password Recovery
File Type Filename MD5
DLL
f32dfd4d00bc55bd14a196af9d3feceb
EXE
87af7550f1dc2bf6880003092e98cea8
EXE
85c8159fd7488bc78dd9e245ac0aa166
EXE
03a4ee87136938f3c4ab8c54cbd3df94
EXE
2bc35559b43860b5b6cd5f62733b3586
EXE
27a3c344b0c05467618ec207d01b7168
EXE
440ad01d9cdc94adc79de17c39775ed9
EXE
3239c9773c1181f901dd93f55c3ef8dc
EXE
9728f8b6840f832f1eeb6cec439f6485
EXE
cdcd95d134491496badf7b4bc806661b