Elcomsoft Distributed Password Recovery
Break complex passwords, recover strong encryption keys and unlock documents in a production environment.
- Break passwords to more than 300 types of data.
- Heterogeneous GPU acceleration with multiple different video cards per computer.
- Works 50 to 250 times faster with hardware acceleration.
- Linear scalability with low bandwidth requirements and zero overhead on up to 10,000 computers.
- Remote deployment and console management.
Supports: all versions of Microsoft Office, OpenOffice, ZIP/7zip/RAR/RAR5, PDF, BitLocker/LUKS/LUKS2/PGP/TrueCrypt/VeraCrypt/FileVault 2/BestCrypt. Over 300 formats are supported.
Description
High-Performance Distributed Password Recovery
Break complex passwords, recover strong encryption keys and unlock documents in a production environment. Elcomsoft Distributed Password Recovery is a high-end solution for forensic and government agencies, data recovery and password recovery services and corporate users with multiple networked workstations connected over a LAN or the Internet. Featuring unique acceleration technologies and providing linear scalability with no overhead, Elcomsoft Distributed Password Recovery offers the fastest password recovery by a huge margin and is the most technologically advanced password recovery product currently available.
Hardware Acceleration
Elcomsoft Distributed Password Recovery employs a revolutionary, patented technology to accelerate password recovery when a compatible NVIDIA or AMD graphics card is present in addition to the CPU-only mode. Hardware acceleration utilises GPU cores of NVIDIA GeForce boards, AMD GPUs, and GPU cores built into Intel CPUs, including Intel HD Graphics, UHD Graphics, and Intel Iris.
The acceleration technology offloads parts of computationally heavy processing onto the fast and highly scalable processors featured in the latest graphic accelerators, achieving unprecedented recovery speeds that exceed those available to CPU-only users by a significant margin.
ElcomSoft pioneered asynchronous hardware acceleration. Heterogeneous acceleration allows multiple video cards of different makes and models to be used, effectively utilising existing hardware and squeezing the last bit of performance out of every supported component.
Strict Protection of Sensitive Information
The included Elcomsoft Hash Extractor tool allows extracting encryption metadata from a wide range of file formats. By using encryption metadata to set up attacks, you automatically exclude the possibility of potentially sensitive information, such as raw or encrypted data, falling into the wrong hands, as none is included in the extracted hash files.Elcomsoft Hash Extractor enables set-up attacks on a tiny hash file instead of the original, potentially large file or document. Since no raw or encrypted data is included in encryption metadata, the hash files produced with Elcomsoft Hash Extractor offer a significantly higher level of privacy, allowing remote and cloud processing without the risk of a content leak.The optional portable version of this tool allows for better portability and flexibility, offering significantly easier extraction of password and encryption hashes from live systems.Elcomsoft Hash Extractor supports all major Microsoft Office, Open Document, Apple iWork, Adobe Acrobat formats, LastPass and 1Password password managers and LM/NTLM/DCC hashes. The complete list of supported formats is available below.
| Application | File extension/Source |
| 1Password | .js, .sqlite, .plist, .db, .xml |
| LastPass | .log, .sqlite, .xml |
| Dashlane | .dash, .aes, .log |
| KeePass | .key, .keyx |
| Microsoft Office | .doc, .dot, .xls, .xla, .xlw, .ppt, .pps .pps, .pot, .mny, .mbf, .one, .docx, .docm, .xlsx, .xlsm, .xlsb, .pptx, .pptm, .mpp, .accdb, .pages, .numbers, .key |
| Open Document | .odt, .ott, .odg, .otg, .odp, .otp, .ods, .ots, .odf, sxw, .stw, .sxd, .std, .sxi, .sti, .sxc, .stc, .sxm |
| Hancom Office | .hwp, .cell |
| Adobe Acrobat | |
| 7ZIP | .7z, .7z001, .exe |
| ZIP | .zip, .zipx, .exe, .sfx |
| RAR | .rar, .sfx, .exe |
| IZArc | .ize |
| Acronis True Image | .tib, .tibx |
| Veeam | .vbm, .vstore |
| Macrium Reflect | .mrimg, .mrbak |
| Windows Users (LM/NTLM hashes) | SAM, SYSTEM |
| Windows Users (DCC hashes) | SECURITY, SYSTEM |
| Application family | Applications | Extensions | Type of recovery | Password types | Hardware Acceleration |
| ZIP archives | PKZip, WinZip | .ZIP, .EXE, .SFX | password | – | NVIDIA, AMD, Intel |
| ZIP archives | WinZip (AES) | .ZIPX. .EXE, .SFX | password | – | NVIDIA, AMD, Intel |
| Bitcoin Wallet | Bitcoin Core | wallet.dat | password | – | NVIDIA, AMD, Intel |
| 7zip archives | 7Zip | .7z, .7z.001, .EXE | password | – | NVIDIA, AMD, Intel |
| RAR archives | RAR/WinRAR 3/4/5 | .RAR | password | – | NVIDIA, AMD, Intel |
| Microsoft Office 2007 | Word, Excel, Access, PowerPoint, OneNote, Project | .DOCX, .XLSX, .ACCDB, .PPTX, .ONE, .MSPX | password | opening | NVIDIA, AMD, INTEL |
| Microsoft Office 2010 | Word, Excel, Access, PowerPoint, OneNote, Project | .DOCX, .XLSX, .ACCDB, .PPTX, .ONE, .MSPX | password | opening | NVIDIA, AMD, INTEL |
| Microsoft Office 2013, 2016, 2019 | Word, Excel, Access, PowerPoint, OneNote | .DOCX, .XLSX, .ACCDB, .PPTX, .ONE, .MSPX | password | opening | NVIDIA, AMD, INTEL |
| Microsoft Office XP/2003 | Word, Excel, PowerPoint | .DOC, .XLS, .PPT | password | opening | – |
| Microsoft Office 97/2000 | Word, Excel | .DOC, .XLS | password | opening | – |
| Microsoft Office 97/2000 | Word, Excel | .DOC, .XLS | key, guaranteed decryption | opening | – |
| Microsoft SQL Server | Microsoft SQL Server, Microsoft SQL Server Compact | .MDF, .SDF | password | – | NVIDIA, AMD, INTEL |
| OpenDocument | word processing | .ODT, .OTT, .SXW, .STW | password | – | NVIDIA, AMD, INTEL |
| OpenDocument | spreadsheets | .ODS, .OTS, .SXC, .STC | password | – | NVIDIA, AMD, INTEL |
| OpenDocument | presentations | .ODP, .OTP, .SXI, .STI | password | – | NVIDIA, AMD, INTEL |
| OpenDocument | graphics/drawing | .ODG, .OTG, .SXD, .STD | password | – | NVIDIA, AMD, INTEL |
| OpenDocument | formulae, mathematical equations | .ODF, .SXM | password | – | NVIDIA, AMD, INTEL |
| MyOffice | MyOffice Text, MyOffice Spreadsheet | .DOCX, .XLSX, .ODT, .ODTX | password | opening | NVIDIA, AMD, INTEL |
| Microsoft Money | Microsoft Money | .MNY | password | – | – |
| Intuit Quicken | Intuit Quicken | .QDF | password | – | NVIDIA, AMD, INTEL |
| Hangul/Hancom Office 2010 | Hanword | .HWP | password | – | – |
| Hangul/Hancom Office 2014 | Hanword | .HWP | password | – | – |
| Hangul/Hancom Office 2010 | Hancell | .CELL | password | – | NVIDIA, AMD, INTEL |
| Hangul/Hancom Office 2014 | Hancell | .CELL | password | – | NVIDIA, AMD, INTEL |
| PGP | PGP zip archives | .PGP | password | – | NVIDIA |
| PGP | PGP secret key rings | .SKR | password | – | NVIDIA |
| PGP | PGP disk (volume encryption) | .PGD | password | – | NVIDIA |
| PGP | PGP self-decrypting archives | .EXE | password | – | – |
| PGP | PGP whole disk encryption | – | password | – | NVIDIA |
| Certificates | Personal Information Exchange certificates – PKCS #12 | .PFX, .P12 | password | – | NVIDIA, AMD, INTEL |
| VPN | Internet Key Exchange (IKE) passwords | – | password | – | NVIDIA, AMD, INTEL |
| TrueCrypt, VeraCrypt | TrueCrypt and VeraCrypt full disk encryption | – | password | – | NVIDIA |
| TrueCrypt, VeraCrypt | TrueCrypt and VeraCrypt encrypted containers | – | password | – | NVIDIA |
| BestCrypt | BestCrypt containers and volumes | – | password | – | – |
| BitLocker | BitLocker and BitLocker To Go disk encryption | – | password | – | NVIDIA, AMD |
| FileVault 2 | HFS/HFS+ and APFS full-disk encryption | – | password | – | NVIDIA, AMD |
| LUKS | LUKS disks and containers | – | password | NVIDIA | |
| LUKS2 | LUKS2 disks and containers | – | password | NVIDIA, AMD, INTEL | |
| Hashes | MD5 hashes | – | password | NVIDIA | |
| Hashes | Salted MD5 hashes | – | password | NVIDIA | |
| Hashes | SHA-1 | – | password | NVIDIA, AMD, INTEL | |
| Hashes | SHA-256 | – | password | NVIDIA, AMD, INTEL | |
| Hashes | SHA-512 | – | password | NVIDIA, AMD, INTEL | |
| Adobe Acrobat PDF X/XI/DC | PDF with 256-bit encryption | password | user and owner | – | |
| Adobe Acrobat PDF 9.x | PDF with 256-bit encryption | password | user and owner | NVIDIA, AMD | |
| Adobe Acrobat PDF 5-8 | PDF with 128-bit encryption | password | user and owner | NVIDIA, AMD | |
| Adobe Acrobat PDF | PDF with 40-bit encryption | password | user and owner | – | |
| Adobe Acrobat PDF | PDF with 40-bit encryption | key, guaranteed decryption | user | – | |
| System Passwords | Microsoft Windows | – | password | LM NTLM NTLMv1 NTLMv2 | NVIDIA |
| System Passwords | Microsoft Windows | – | password | SYSKEY | – |
| System Passwords | Microsoft Windows | – | password | DCC (Domain Cached Credentials) | NVIDIA, AMD, INTEL |
| System Passwords | UNIX | – | password | user | – |
| System Passwords | Mac OS X | login.keychain | password | keychain | NVIDIA, AMD, INTEL |
| System Passwords | Mac OS X | – | password | user | NVIDIA |
| System Passwords | Mac OS X | DMG | password | DMG image | NVIDIA |
| Password managers | KeePass | .KDBX, .KBD, .PWD | password | master | NVIDIA, AMD, INTEL |
| Password managers | KeePass (RDBX4) | .KBDX | password | master | – |
| Password managers | 1Password | Windows / macOS / Android / iOS; backups on Dropbox and iCloud Drive | password | master | NVIDIA, AMD, INTEL |
| Password managers | LastPass | Windows, macOS and Linux browser plug-ins, Android app | password | master | NVIDIA, AMD, INTEL |
| Password managers | Dashlane | Windows, macOS | password | master | NVIDIA, AMD, INTEL |
| System Passwords | Wireless networks | – | password | WPA and WPA2 | NVIDIA, AMD, INTEL, AVX2 |
| Lotus | Lotus Notes (RC2) | .ID | password | – | – |
| Lotus | Lotus Notes (AES) | .ID | password | – | NVIDIA, AMD, INTEL |
| Lotus | Lotus Notes | admindata.xml | password | – | – |
| Lotus | HCL Domino R12 | password | – | – | |
| Oracle | Oracle DB | password | users’ passwords | – | – |
| Ritlabs | TheBat! | masterkey.dat | password | master | – |
| Ritlabs | TheBat! | .TBK | password | backup | – |
| Mozilla | Mozilla, Firefox, Thunderbird | – | password | master | – |
| iPhone/iPod/iPad backup | iTunes | – | password | – | NVIDIA, AMD (except iOS 10.0), INTEL |
| BlackBerry backup | BlackBerry Desktop Software (old) | .IPD, .BBB | password | – | AES-NI[1] |
| BlackBerry backup | BlackBerry Desktop Software (6.0+ for Windows, 2.0+ for Mac) | – | password | – | NVIDIA, AMD |
| Apple iWork ’09 | Pages, Numbers, Keynote | .pages, .numbers, .key | password | opening | NVIDIA, AMD, INTEL |
| Apple iWork 2013/2014 | Pages, Numbers, Keynote | .pages, .numbers, .key | password | opening | NVIDIA, AMD, INTEL |
| Tally Vault | Tally ERP 9 | .500, .900, .1800 | password | opening | – |
| Windows Easy Transfer | Windows Easy Transfer | .mig | password | – | |
| Parallels | Parallels virtual machines | config.pvs | password | – | |
| VirtualBox | VirtualBox virtual machines | .vbox | password | NVIDIA, AMD | |
| VMware | VMware virtual machines | .vmx | password | NVIDIA, AMD | |
| Acronis | Acronis True Image, Acronis Cyber Protect Home Office | .tib | password | backup | – |
| Acronis | Acronis True Image, Acronis Cyber Protect Home Office | .tibx | password | backup | NVIDIA, AMD, INTEL |
| Macrium | Macrium Reflect 8 | .mrimg, .mrbak | password | backup | NVIDIA, AMD, INTEL |
| Veeam | Veeam Backup & Replication | password | backup | NVIDIA, AMD, INTEL | |
| FileMaker | FileMaker Pro 10 – 19 | password | – | ||
| Bitcoin | Electrum Bitcoin Wallet | ? | ? | ? | NVIDIA, AMD, INTEL |
| Encrypted Archive | IZArc | .ize | ? | ? | NVIDIA, AMD, INTEL |
Important note: hardware acceleration (for specific file formats and algorithms only; see the above chart for details) works appropriately only on Windows Server 2003/2008/2012 and Windows 7/8/8.1/10 (32-bit or 64-bit); specific versions of NVIDIA/AMD drivers are required; some other restrictions apply (e.g. for some file formats, it is implemented for brute-force attack only, while dictionary attack only works on the CPU, regardless the settings).
Wide Range of Formats Supported
Elcomsoft Distributed Password Recovery supports a variety of applications and file formats, allowing password recovery from Office documents, Adobe PDF files, PGP disks and archives, personal security certificates and exchange keys, MD5 hashes and Oracle passwords, Windows and UNIX login passwords and many more.
Archives
- ZIP (PKZip, WinZip) archives, conventional encryption
- ZIP (PKZip, WinZip) archives, AES encryption (GPU accelerated)
- RAR (WinRAR) archives (GPU accelerated)
- 7Zip archives (GPU accelerated)
Microsoft Office Documents
- Microsoft Office 2007: Word, Excel, Access, PowerPoint, Project (.DOCX, .XLSX, .ACCDB, .PPTX, .MSPX) file opening password recovery (GPU accelerated)
- Microsoft Office 2010: Word, Excel, Access, PowerPoint, OneNote (.DOCX, .XLSX, .ACCDB, .PPTX, .ONE) file opening password recovery (GPU accelerated)
- Microsoft Office 2013, 2016, 2019: Word, Excel, Access, PowerPoint, OneNote (.DOCX, .XLSX, .ACCDB, .PPTX, .ONE) file opening password recovery (GPU accelerated)
- Microsoft Word/Excel/PowerPoint XP/2003 (.DOC, .XLS, .PPT) (password recovery – “open” password only)
- Microsoft Word/Excel 97/2000 (.DOC, .XLS) (password recovery – “open” password only)
- Microsoft Word/Excel 97/2000 (.DOC, .XLS) (guaranteed decryption)
- Microsoft Money (password recovery)
- Microsoft OneNote (password recovery)
MyOffice (GPU accelerated)
- word processing (text) documents: .DOCX, .ODT, .OTT, .SXW, .STW
- spreadsheets: .XLSX, .ODS, .OTS, .SXC, .STC
OpenDocument (OpenOffice, StarOffice etc) (GPU accelerated)
- word processing (text) documents: .ODT, .OTT, .SXW, .STW
- spreadsheets: .ODS, .OTS, .SXC, .STC
- presentations: .ODP, .OTP, .SXI, .STI
- graphics/drawing: .ODG, .OTG, .SXD, .STD
- formulae, mathematical equations: .ODF, .SXM
(for a full list of supported applications, see http://en.wikipedia.org/wiki/OpenDocument_software)
Apple iWork (GPU accelerated)
- Pages (.pages)
- Numbers (.numbers)
- KeyNote (.key)
Hangul/Hancom Office (Hanword, Hancell)
- Hanword 2010
- Hanword 2014
- Hancell 2010 (GPU accelerated)
- Hancell 2014 (GPU accelerated)
- Hancom Office Neo 2016 (GPU accelerated)
Disk encryption and Open-Key Passwords
- PGP zip archives (.PGP) (password recovery)
- PGP secret key rings (.SKR) (passphrase recovery) (GPU accelerated)
- PGP disks with conventional encryption (.PGD) (password recovery) (GPU accelerated)
- PGP self-decrypting archives (.EXE) (password recovery)
- PGP whole disk encryption (password recovery) (GPU accelerated)
- Personal Information Exchange certificates – PKCS #12 (.PFX, .P12) (password recovery) (GPU accelerated)
- IKE (Internet Key Exchange) dump (password recovery) (GPU accelerated)
- TrueCrypt and VeraCrypt (full disk encryption and encrypted containers) (GPU accelerated)
- LUKS and LUKS2 disks and containers (GPU accelerated)
- FileVault 2 (GPU accelerated) on both HFS/HFS+ and APFS volumes
- BitLocker and BitLocker To Go (GPU accelerated)
- BestCrypt 9 containers
Adobe Acrobat PDF
- Adobe Acrobat PDF with 256-bit encryption (“user” and “owner” password recovery) (GPU accelerated)
- Adobe Acrobat PDF with 128-bit encryption (“user” and “owner” password recovery)
- Adobe Acrobat PDF with 40-bit encryption (“user” and “owner” password recovery)
- Adobe Acrobat PDF with 40-bit encryption (guaranteed decryption)
System Passwords
- Windows 11/10/8.1/8/7/Vista/XP/2000 (32-bit and 64-bit; all editions) Windows Server 2019/2016/2008/2003 logon passwords (LM/NTLM) (password recovery); Windows Hello PIN codes (non-TPM systems) (GPU accelerated)
- Windows SYSKEY startup passwords (password recovery)
- Windows DCC (Domain Cached Credentials) passwords (password recovery) (GPU accelerated)
- UNIX users’ passwords (password audit/recovery)
- Mac OS X account passwords (GPU accelerated)
Virtual Machines
- Parallels (fast CPU recovery), VirtualBox and VMware (GPU accelerated)
Backups
- Acronis True Image, Acronis Cyber Protect Home Office (.TIB, .TIBX)(password recovery) (GPU accelerated)
- Macrium Reflect 8 (.MRIMG, .MRBAK)(password recovery) (GPU accelerated)
- Veeam Backup & Replication (password recovery) (GPU accelerated)
Other Passwords and Hashes
- Intuit Quicken (.QDF) (password recovery)
- Lotus Notes ID files (password recovery) (GPU accelerated)
- MD5 hashes (plaintext recovery) (GPU accelerated)
- Salted MD5 hashes (plaintext recovery) (GPU accelerated)
- SHA-1/SHA-256/SHA-512 hashes (plaintext recovery) (GPU accelerated)
- Oracle users’ passwords (password audit/recovery)
- WPA and WPA2 passwords (GPU accelerated)
- Mac OS X keychain password (GPU accelerated)
- TheBat! master passwords (masterkey.dat) and passwords to backups (*.tbk)
- Mozilla/Firefox/Thunderbird master passwords (password recovery)
- Microsoft SQL Server (.MDF) (password recovery) (GPU accelerated)
- Microsoft SQL Server Compact (.SDF) (password recovery) (GPU accelerated)
- iPhone/iPod/iPad backups (password recovery) (GPU accelerated)
- BlackBerry backups (.IPD, .BBB) (password recovery) (GPU accelerated)
- FileMaker databases
- Apple Disk Image (.DMG) passwords
- KeePass, LastPass, 1Password, Dashlane master password (GPU accelerated)
- Bitcoin Wallet passwords, including Bitcoin Core, Classic, XT and Unlimited
- Tally ERP 9 Vault passwords
- Easy Transfer (.mig)
System requirements
Windows
- Windows 7
- Windows 8
- Windows 8.1
- Windows 10
- Windows Server 2012
- Windows Server 2016
- Windows Server 2019
Trial Limitations
Works with up to 5 agents simultaneously. When/if the password is found, only the first two characters of the password are shown, and the other one is hidden under the asterisks.
Uninstallation procedure: To uninstall the product, follow the standard procedure via Control Panel—Programs and Features or use the Uninstall link from the product’s folder in the Windows Start menu.