Elcomsoft Forensic Disk Decryptor
What is Elcomsoft Forensic Disk Decryptor?
Elcomsoft Forensic Disk Decryptor is software application developed by Elcomsoft Co. Ltd.. It is most commonly found on computers running Windows 7 with nearly 61.90% of installations running this operating system. Elcomsoft Forensic Disk Decryptor's installer is typically 4.00 MB in size and installs around 37 files. The most common release is 1.00.110.1392 with 46.03% of all installations currently using this version.
Elcomsoft Forensic Disk Decryptor is most popular in the United States with 45.59% of installations residing in this country.
Elcomsoft Forensic Disk Decryptor adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.
Software Behaviors
- Services:
-
- ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
- epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
- edpr_server.exe runs as a service named 'Elcomsoft Distributed Password Recovery Server' (ElcomSoftDistributedPasswordRecoveryServer).
- ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
- Scheduled tasks:
-
- ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).
Startup Entries
- Registry entries:
-
- epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.
- edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
Software Details
- URL:
- https://www.elcomsoft.ru
- Support:
- –
- Installation path:
- C:\Program Files\Elcomsoft Password Recovery\
- Uninstaller:
- MsiExec.exe /X{F359F477-98B4-40BD-BDC7-2EA5C51A8BF9}
- Size:
- 4.00 MB
- Language:
- English
Elcomsoft Forensic Disk Decryptor Executable Details
- Primary executable:
- msvcr90.dll
- Name:
- Elcomsoft Forensic Disk Decryptor
- Path:
- C:\Program Files\Elcomsoft Password Recovery\msvcr90.dll
- MD5:
- –
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
DLL
|
99c7dc88410c090c90bb1e961706c5c2 | |
|
EXE
|
f25c95cf18fcc0e79c37dd7075a8f98f | |
|
DLL
|
b53a6eaf9fea8257c8b19f03b906f9ba | |
|
DLL
|
3c07545f4988e8da4c85368e3679a9f6 | |
|
EXE
|
47b0a2aa9c568ea6c800a6f912f21631 | |
|
EXE
|
09b75c11a4c1bbeb4e7b14cc60c922e5 | |
|
EXE
|
6b592d0fadbe8acf8688faaeace5c21a | |
|
EXE
|
906228d487efed53322bb8901e522fa5 | |
|
EXE
|
54b34261ff14b1a11acc6e76ef79dd16 | |
|
EXE
|
b43f9842d89864a793bdfaa171f527e2 |