» krnl_akl.sys
Overview
Analysis
File Details
Behaviors (1)

krnl_akl.sys

Anti-Keylogger

Global Information Technology (UK) Limited

It runs as a Windows kernel mode device driver named “Anti-keylogger Kernel Service”.

File name:

krnl_akl.sys

Publisher:

Global Information Technology (UK) Limited. (signed by Global Information Technology (UK) Limited)

Product:

Anti-Keylogger

Description:

Anti-Keylogger core

Version:

10, 3, 0, 0

MD5:

c0a8ddea6f83f6c2fa641934432b3f71

SHA-1:

3f6dab5f143126ea32e5541b10327ee323fe391c

SHA-256:

c09de4dc3b15858521a0c0d47f7cfe01df63d1f5c09d862a6fd643577216c149

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 6:08:51 PM UTC (today)

File size:

359.2 KB (367,824 bytes)

Product version:

10, 3, 0, 0

Original file name:

krnl_akl.sys

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\Windows\System32\drivers\krnl_akl.sys

Digital Signature

Signed by:

Global Information Technology (UK) Limited

Authority:

COMODO CA Limited

Valid from:

11/2/2011 9:00:00 PM

Valid to:

11/2/2013 8:59:59 PM

Subject:

CN=Global Information Technology (UK) Limited, OU=Domain Control Validated, O=Global Information Technology (UK) Limited, STREET="Suite 12, 43 Bedford Steet", STREET=COVENT GARDEN, L=London, S=London, PostalCode=WC2E 9HA, C=GB

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

194DDF56DDD0565FFA1A15D16C303D46

File PE Metadata

Compilation timestamp:

1/27/2012 7:32:35 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

3072:1Th4JZujWBI02ljcVWrTFB8Suj0FJPSIQ2Z6iZ4A59/pK63N3aAk07hlKUV5nHls:74yyIEVWHjujW6IQ2/pKEN3ZbHngxz9

Entry address:

0x592A0

Entry point:

55, 8D, 6C, 24, 90, 81, EC, 74, 0B, 00, 00, A1, 60, 67, 45, 00, 8B, 4D, 78, 8B, 55, 7C, 53, 56, 57, 89, 45, 6C, 89, 0D, 98, 67, 45, 00, 89, 15, 94, 67, 45, 00, FA, 0F, 01, 0D, A0, 67, 45, 00, A1, 30, 67, 45, 00, 8B, 70, 02, FB, 8D, 4D, 94, 51, E8, 1E, ED, FF, FF, 8B, 15, 98, 67, 45, 00, 8B, 7A, 14, 8B, 47, 04, 85, C0, 74, 77, 3B, C7, 74, 73, 8B, 48, 18, 8B, 50, 20, 8D, 54, 0A, FF, 3B, CA, 74, 1F, 0F, B7, 4E, 1E, 0F, B7, 5E, 18, C1, E1, 10, 0B, CB, 3B, 48, 18, 72, 0A, 3B, CA, 77, 06, 83, 78, 30, 00, 75, 09... 
[+]

Code size:

348 KB (356,352 bytes)

Driver

Display name:

Anti-keylogger Kernel Service

Service name:

krnl_akl

Type:

Kernel device driver (KernelDriver)

Depends on:

Kbdclass

Scan krnl_akl.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.