» krnl_akl.sys
Overview
Analysis
File Details
Behaviors (1)

krnl_akl.sys

Anti-Keylogger

Global Information Technology (UK) Limited

It runs as a Windows kernel mode device driver named “Anti-keylogger Kernel Service”.

File name:

krnl_akl.sys

Publisher:

Global Information Technology (UK) Limited. (signed by Global Information Technology (UK) Limited)

Product:

Anti-Keylogger

Description:

Anti-Keylogger core

Version:

10, 3, 1, 0

MD5:

848703def6f3e9934be553fd93c2e7cf

SHA-1:

84e5f7cd0fd22292b20fcddc5694fe354d7c4615

SHA-256:

d04b5c9051efb90dbaf4d9b2da657ef4f22b4d9ecee3a926baaa34c36d4be964

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 1:46:56 PM UTC (today)

File size:

359.2 KB (367,824 bytes)

Product version:

10, 3, 1, 0

Original file name:

krnl_akl.sys

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\Windows\System32\drivers\krnl_akl.sys

Digital Signature

Signed by:

Global Information Technology (UK) Limited

Authority:

COMODO CA Limited

Valid from:

11/3/2011 1:00:00 AM

Valid to:

11/3/2013 12:59:59 AM

Subject:

CN=Global Information Technology (UK) Limited, OU=Domain Control Validated, O=Global Information Technology (UK) Limited, STREET="Suite 12, 43 Bedford Steet", STREET=COVENT GARDEN, L=London, S=London, PostalCode=WC2E 9HA, C=GB

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

194DDF56DDD0565FFA1A15D16C303D46

File PE Metadata

Compilation timestamp:

2/11/2012 1:55:30 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

6144:uKPvqfh4OcqFg6wnBXOEv05+Cf62PA0ETjxUh:rc2EzcAEvi+C6jxk

Entry address:

0x592A0

Entry point:

55, 8D, 6C, 24, 90, 81, EC, 74, 0B, 00, 00, A1, 60, 67, 45, 00, 8B, 4D, 78, 8B, 55, 7C, 53, 56, 57, 89, 45, 6C, 89, 0D, 98, 67, 45, 00, 89, 15, 94, 67, 45, 00, FA, 0F, 01, 0D, A0, 67, 45, 00, A1, 30, 67, 45, 00, 8B, 70, 02, FB, 8D, 4D, 94, 51, E8, 1E, ED, FF, FF, 8B, 15, 98, 67, 45, 00, 8B, 7A, 14, 8B, 47, 04, 85, C0, 74, 77, 3B, C7, 74, 73, 8B, 48, 18, 8B, 50, 20, 8D, 54, 0A, FF, 3B, CA, 74, 1F, 0F, B7, 4E, 1E, 0F, B7, 5E, 18, C1, E1, 10, 0B, CB, 3B, 48, 18, 72, 0A, 3B, CA, 77, 06, 83, 78, 30, 00, 75, 09... 
[+]

Code size:

348 KB (356,352 bytes)

Driver

Display name:

Anti-keylogger Kernel Service

Service name:

krnl_akl

Type:

Kernel device driver (KernelDriver)

Depends on:

Kbdclass

Scan krnl_akl.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.