Elcomsoft Co.Ltd. » Elcomsoft Distributed Password Recovey

1.3. Supported document formats

Top  Previous  Next

The program supports the following applications and file formats:

 

- Microsoft Word/Excel/PowerPoint 2007 (.DOCX, .XLSX, .PPTX) (password recovery - "open" password only)

- Microsoft Word/Excel/PowerPoint XP/2003 (.DOC, .XLS) (password recovery - "open" password only)

- Microsoft Word/Excel 97/2000 (.DOC, .XLS) (password recovery - "open" password only)

- Microsoft Word/Excel 97/2000 (.DOC, .XLS) (guaranteed decryption)

- Microsoft Money (.MNY, .MBF) (password recovery)

- Microsoft OneNote (.ONE) (password recovery)

 

- PGP zip archives, version 5-9, (.PGP) (password recovery)

- PGP secret key rings, version 5-9,  (.SKR) (passphrase recovery)

- PGP disks with conventional encryption, version 5-9,  (.PGD) (password recovery)

- PGP self-decrypting archives, version 5-9,  (.EXE) (password recovery)

- PGP Whole Disk Encryption, version 9 (.WDE) (password recovery)

- GnuPG secret key rings (SECRING.GPG) (password recovery)

 

- Personal Information Exchange certificates - PKCS #12 (.PFX, .P12) (password recovery)

 

- Adobe Acrobat PDF with 128-bit encryption, all version ("user" and "owner" password recovery)

- Adobe Acrobat PDF with 40-bit encryption, all version ("user" and "owner" password recovery)

- Adobe Acrobat PDF with 40-bit encryption, all version (guaranteed decryption)

 

- Windows Logon LM/NTLM passwords

- Windows Logon NTLM passwords using NVIDIA GeForce 8 cards for hardware acceleration

NOTE: To enable GPU usage rename PWDUMP file to *.pwdump.

 

- Intuit Quicken (.QDF) (password recovery)

 

- Lotus Notes, all version, including 8 (beta), (.ID, ADMINDATA.XML) (password recovery)

 

- MD5 Hashed Password (.MD5) (password recovery)

 

- SYSKEY Files (SAM, SYSTEM) (password recovery)

 

- Domain Cached Credentials (SECURITY) (password recovery)

 

- WPA-PSK Export Hashes (*.WPH) (password recovery)

 

- Crypt Password Hashes (*.crypt) (password recovery)

 

- Oracle Password Hashes (*.orc) (password recovery)

 

 

= Windows Logon LM/NTLM passwords

 

*.pwdump

username:id:lmhash:ntlmhash::: (as generated by PWDUMP)

 

lmnt.lst

(as generated by Cain&Abel)

 

= MD5 hashed passwords

 

*.md5

username:hash

 

= Domain Cached Credentials

 

*.dcc

username:hash:domain:iterations:comments (as generated by PSPR)

 

*.cachedump

username:hash:domain:

 

SECURITY and SYSTEM (binary Registry files)

 

= WPA-PSK hashes

 

*.wph

hash:ssid:iterations:[password]: (as generated by PSPR)

 

= UNIX/Crypt password hashes

 

*.crypt

username:hash[any number of additional fields separated by ':']

 

= Oracle password hashes

 

*.orc

username:hash[any number of additional fields separated by ':']

 

 

Support of other document formats is planned for the next versions of the program.