Elcomsoft Distributed Password Recovery

Resource Management

The resource management capability is a game-changer for busy environments. The feature allows administrators to easily manage and distribute the available computational resources across multiple jobs. The administrative server enables users to tap into a pool of available resources by requesting a certain number of recovery agents for a given password recovery job. The reserved recovery agents will be allocated to that one job, allowing multiple tasks to run separately at the same time.

In essence, resource management simplifies the process of managing and utilizing the available computational resources by several jobs, ultimately leading to improved efficiency and scalability. Here's how it works:

Strict Protection of Sensitive Information

The included Elcomsoft Hash Extractor tool allows extracting encryption metadata from a wide range of file formats. By using encryption metadata to set up attacks, you are automatically excluding the possibility of potentially sensitive information such as raw or encrypted data falling into the wrong hands as none is included in the extracted hash files.

Elcomsoft Hash Extractor enables to set up attacks on a tiny hash file instead of the original, potentially large file or document. Since no raw or encrypted data is included in encryption metadata, the hash files produced with Elcomsoft Hash Extractor offer significantly higher level of privacy, allowing remote and cloud processing without the risk of a content leak.

The optional portable version of this tool allows for better portability and flexibility, offering significantly easier extraction of password and encryption hashes from live systems.

Elcomsoft Hash Extractor supports all major Microsoft Office, Open Document, Apple iWork, and Adobe Acrobat formats, as well as LastPass and 1Password password managers and LM/NTLM/DCC hashes. The full list of supported formats is available below.

Broad Compatibility

Elcomsoft Distributed Password Recovery supports a variety of applications and file formats, allowing password recovery from Office documents, Adobe PDF files, PGP disks and archives, personal security certificates and exchange keys, MD5 hashes, Windows and UNIX login passwords.

Important note: hardware acceleration (for specific file formats and algorithms only, see the above chart for details) works properly only on Windows Server 2003/2008/2012 and Windows 7/8/8.1/10 (32-bit or 64-bit); specific versions of NVIDIA/AMD drivers are required; some other restrictions apply (e.g. for some file formats, it is implemented for brute-force attack only, while dictionary attack only works on the CPU, regardless the settings).

Wide Range of Formats Supported

Elcomsoft Distributed Password Recovery supports a variety of applications and file formats, allowing password recovery from Office documents, Adobe PDF files, PGP disks and archives, personal security certificates and exchange keys, MD5 hashes, Windows and UNIX login passwords and much more.

Archives

• ZIP (PKZip, WinZip) archives, conventional encryption
• ZIP (PKZip, WinZip) archives, AES encryption (GPU accelerated)
• RAR (WinRAR) archives (GPU accelerated)
• 7Zip archives (GPU accelerated)

Microsoft Office Documents

• Microsoft Office 2007: Word, Excel, Access, PowerPoint, Project (.DOCX, .XLSX, .ACCDB, .PPTX, .MSPX) file opening password recovery (GPU accelerated)
• Microsoft Office 2010: Word, Excel, Access, PowerPoint, OneNote (.DOCX, .XLSX, .ACCDB, .PPTX, .ONE) file opening password recovery (GPU accelerated)
• Microsoft Office 2013, 2016, 2019: Word, Excel, Access, PowerPoint, OneNote (.DOCX, .XLSX, .ACCDB, .PPTX, .ONE) file opening password recovery (GPU accelerated)
• Microsoft Word/Excel/PowerPoint XP/2003 (.DOC, .XLS, .PPT) (password recovery - "open" password only)
• Microsoft Word/Excel 97/2000 (.DOC, .XLS) (password recovery - "open" password only)
• Microsoft Word/Excel 97/2000 (.DOC, .XLS) (guaranteed decryption)
• Microsoft Money (password recovery)
• Microsoft OneNote (password recovery)

MyOffice (GPU accelerated)

• word processing (text) documents: .DOCX, .ODT, .OTT, .SXW, .STW
• spreadsheets: .XLSX, .ODS, .OTS, .SXC, .STC

OpenDocument (OpenOffice, StarOffice etc) (GPU accelerated)

• word processing (text) documents: .ODT, .OTT, .SXW, .STW
• spreadsheets: .ODS, .OTS, .SXC, .STC
• presentations: .ODP, .OTP, .SXI, .STI
• graphics/drawing: .ODG, .OTG, .SXD, .STD
• formulae, mathematical equations: .ODF, .SXM
  
  (for full list of supported applications, see http://en.wikipedia.org/wiki/OpenDocument_software)

Apple iWork (GPU accelerated)

• Pages (.pages)
• Numbers (.numbers)
• KeyNote (.key)

Hangul/Hancom Office (Hanword, Hancell)

• Hanword 2010
• Hanword 2014
• Hancell 2010 (GPU accelerated)
• Hancell 2014 (GPU accelerated)
• Hancom Office Neo 2016 (GPU accelerated)

Disk encryption and Open-Key Passwords

• PGP zip archives (.PGP) (password recovery)
• PGP secret key rings (.SKR) (passphrase recovery) (GPU accelerated)
• PGP disks with conventional encryption (.PGD) (password recovery) (GPU accelerated)
• PGP self-decrypting archives (.EXE) (password recovery)
• PGP whole disk encryption (password recovery) (GPU accelerated)
• Personal Information Exchange certificates - PKCS #12 (.PFX, .P12) (password recovery) (GPU accelerated)
• IKE (Internet Key Exchange) dump (password recovery) (GPU accelerated)
• TrueCrypt and VeraCrypt (full disk encryption and encrypted containers) (GPU accelerated)
• LUKS and LUKS2 disks and containers (GPU accelerated)
• FileVault 2 (GPU accelerated) on both HFS/HFS+ and APFS volumes
• BitLocker and BitLocker To Go (GPU accelerated)
• BestCrypt 9 containers

Adobe Acrobat PDF

• Adobe Acrobat PDF with 256-bit encryption ("user" and "owner" password recovery) (GPU accelerated)
• Adobe Acrobat PDF with 128-bit encryption ("user" and "owner" password recovery)
• Adobe Acrobat PDF with 40-bit encryption ("user" and "owner" password recovery)
• Adobe Acrobat PDF with 40-bit encryption (guaranteed decryption)

System Passwords

• Windows 11/10/8.1/8/7/Vista/XP/2000 (32 bit and 64 bit; all editions) Windows Server 2019/2016/2008/2003 logon passwords (LM/NTLM) (password recovery); Windows Hello PIN codes (non-TPM systems) (GPU accelerated)
• Windows SYSKEY startup passwords (password recovery)
• Windows DCC (Domain Cached Credentials) passwords (password recovery) (GPU accelerated)
• UNIX users’ passwords (password audit/recovery)
• Mac OS X account passwords (GPU accelerated)

Virtual Machines

• Parallels (fast CPU recovery), VirtualBox and VMware (GPU accelerated)

Backups

• Acronis True Image, Acronis Cyber Protect Home Office (.TIB, .TIBX)(password recovery) (GPU accelerated)
• Macrium Reflect 8 (.MRIMG, .MRBAK)(password recovery) (GPU accelerated)
• Veeam Backup & Replication (password recovery) (GPU accelerated)

Other Passwords and Hashes

• Intuit Quicken (.QDF) (password recovery)
• Lotus Notes ID files (password recovery) (GPU accelerated)
• MD5 hashes (plaintext recovery) (GPU accelerated)
• Salted MD5 hashes (plaintext recovery) (GPU accelerated)
• SHA-1/SHA-256/SHA-512 hashes (plaintext recovery) (GPU accelerated)
• WPA and WPA2 passwords (GPU accelerated)
• Mac OS X keychain password (GPU accelerated)
• TheBat! master passwords (masterkey.dat) and passwords to backups (*.tbk)
• Mozilla/FireFox/Thunderbird master passwords (password recovery)
• Microsoft SQL Server (.MDF) (password recovery) (GPU accelerated)
• Microsoft SQL Server Compact (.SDF) (password recovery) (GPU accelerated)
• iPhone/iPod/iPad backups (password recovery) (GPU accelerated)
• FileMaker databases
• Apple Disk Image (.DMG) passwords
• Password Managers: KeePass, LastPass, 1Password, Dashlane master password, Bitwarden, Dropbox Passwords, Enpass, Kaspersky, Keeper, Roboform, Sticky Password, and Zoho Vault
• Bitcoin Wallet passwords including Bitcoin Core, Classic, XT and Unlimited
• Tally ERP 9 Vault passwords
• Easy Transfer (.mig)