Elcomsoft Distributed Password Recovery
What is Elcomsoft Distributed Password Recovery? (from ElcomSoft Co)
High-performance distributed password recovery for forensic and government agencies, password recovery and data recovery services and corporations. Recover the most complex passwords and strong encryption in realistic timeframes. Accelerate the recovery by offloading calculations to NVIDIA GPUs and scale to over 10,000... Read more
Overview
Elcomsoft Distributed Password Recovery is a program developed by ElcomSoft Co. The most used version is 2.99.481.1670, with over 98% of all installations currently using this version. Upon installation, it defines an auto-start registry entry which allows the program run on each boot for the user which installed it. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software installer includes 43 files and is usually about 37.05 MB (38,844,679 bytes). In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 39% of users of Elcomsoft Distributed Password Recovery come from the United States, it is also popular in France and Germany.
Program details
URL: www.elcomsoft.com/edpr.html
Help link: www.elcomsoft.ru
Installation folder: C:\Program Files\Elcomsoft Password Recovery\
Uninstaller: MsiExec.exe /I{1D71119F-2056-443C-9432-166433886EC9}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 37.05 MB
Language: English (United States)
Files installed by Elcomsoft Distributed Password Recovery
-
edpr_console.exe - Elcomsoft Distributed Password Recovery (Elcomsoft Distributed Password Recovery Console)
-
edpr_server.exe - Elcomsoft Distributed Password Recovery Server
-
epr_agent.exe - Elcomsoft Password Recovery Agent
-
GPUManager.exe - GPU Manager Utility
-
EWSA.exe - Elcomsoft Wireless Security Auditor (EWSA)
-
ARCHPR.exe - Advanced Archive Password Recovery (ARCHPR Application)
-
PSPR.exe - Proactive System Password Recovery
-
aopr.exe - Advanced Office Password Recovery (AOPR Application)
-
EFDD.exe - ElcomSoft Forensic Disk Decryptor
-
EPPB.exe - Elcomsoft Phone Password Breaker
-
atex.exe - Elcomsoft Apple Token Extractor
-
wdeinfo.exe - Elcomsoft Password Recovery (Elcomsoft Distributed Password Recovery)
-
PPA.exe - Proactive Password Auditor
-
edei.exe - EDPR Disk Encryption Info
-
esil.dll - ElcomSoft Info Library (ESIL)
-
ewsaserv.exe - PSPR Service (PSPRSERV)
-
ewsaserv64.exe
-
psprserv.exe
-
psprserv64.exe
-
awprhook.dll - AWPRHook (AWPRHook dll)
-
awprhook64.dll
-
awprserv.dll - AWPRSERV (AWPRSERV dll)
-
awprserv64.dll
-
ewsaserv.dll - EWSASERV (EWSASERV dll)
-
ewsaserv64.dll
-
aimpr.exe - Advanced Instant Messengers Password Recovery
-
AOPB.exe - Advanced Office Password Breaker
-
APDFPR.exe - Advanced PDF Password Recovery
-
asapr.exe - Advanced Sage Password Recovery
-
ASQLPR.exe - Advanced SQL Password Recovery
Behaviors exhibited
Scheduled Task
- ARCHPR.exe is scheduled as a task with the class '{C576B535-174E-4058-A42E-B70F666368DE}' (runs on registration).
5 Services
- epr_agent.exe runs as a service named 'Elcomsoft Password Recovery Agent' (ElcomSoftDistributedAgent).
- ewsaserv.exe runs as a service named 'EWSA Control Service' (EWSASERV).
- edpr_server.exe runs as a service named 'Elcomsoft Distributed Password Recovery Server' (ElcomSoftDistributedPasswordRecoveryServer).
- ewsaserv64.exe runs as a service named 'EWSA Control Service' (EWSASERV).
- psprserv64.exe runs as a service named 'PSPR Control Service' (PSPRSERV).
2 Startup Files (User Run)
- epr_agent.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Elcomsoft Distributed Agent' and executes as "C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\epr_agent.exe" -s.
- edpr_server.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ElcomSoft DPR Server' and executes as C:\Program Files\Elcomsoft Password Recovery\Distributed Password Recovery\edpr_server.exe.
How do I remove Elcomsoft Distributed Password Recovery?
You can uninstall Elcomsoft Distributed Password Recovery from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Elcomsoft Distributed Password Recovery, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Elcomsoft Distributed Password Recovery.
OS VERSIONS
Win 7 (SP1) 60%
Win XP 2%
|
|
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 11%
Keep it 89%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
59.68% |
|
| Windows 10 |
38.71% |
|
| Windows XP |
1.61% |
|
Which OS releases does it run on? |
| Windows 7 Ultimate |
29.03% |
|
| Windows 7 Professional |
17.74% |
|
| Windows 8.1 |
11.29% |
|
| Windows 10 Pro |
9.68% |
|
| Windows 7 Home Premium |
9.68% |
|
| Windows 8.1 Pro |
8.06% |
|
Geography
39.13% of installs come from the United States
Which countries install it?
| United States |
39.13% |
| France |
10.14% |
| Germany |
10.14% |
| United Kingdom |
4.35% |
| Austria |
2.90% |
| Belgium |
2.90% |
| Netherlands |
2.90% |
| Canada |
2.90% |
| Australia |
2.90% |
| Brazil |
1.45% |
| Egypt |
1.45% |
| Greece |
1.45% |
| Italy |
1.45% |
| Saudi Arabia |
1.45% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Hewlett-Packard |
31.91% |
|
| Acer |
21.28% |
|
| Dell |
14.89% |
|
| Lenovo |
6.38% |
|
| MSI |
4.26% |
|
| ASUS |
4.26% |
|
| American Megatrends |
4.26% |
|
| Medion |
4.26% |
|
| Sony |
2.13% |
|
| GIGABYTE |
2.13% |
|
| Gateway |
2.13% |
|
| Intel |
2.13% |
|
Common models |
| HP ENVY dv6 Notebook PC |
4.44% |
|
| Hewlett-Packard p6-2047de |
4.44% |
|
| MSI MS-7A11 |
2.22% |
|
| Micro-Star Co., Ltd. GE60... |
2.22% |
|
| Micro-Star Co., Ltd. GE60... |
2.22% |
|
| LENOVO 4270CTO |
2.22% |
|
About ElcomSoft Co
ElcomSoft developes Windows security and productivity applications for business and private customers.
Publisher URL: www.elcomsoft.com