Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Child processes
Related files
 PE file structure
|
Show functions |
Import table
msvcp100.dll
DllMain
msvcr100.dll
DllMain
alsvc.exe
SKL Client by Deep Software Inc. (Signed)
| Version: | 6.0.2.1365 |
| MD5: | 99407d8de83972cf757c581d88bc3db2 |
| SHA1: | 9fd43aa39ae0ef6e9872098add624e5e718ed005 |
| SHA256: | 4b44a6641ac0139eeccfd910a02973cce800ff6cd73246d37a7521b57be120cf |
What is alsvc.exe?
SKL Client (alsvc.exe) is part of the SoftActivity Keylogger. A key logging application that is designed to stay hidden on a system and capture key stroke activities and record them in real-time.
About alsvc.exe (from Deep Software Inc.)
“With Activity Monitor, SoftActivity TS Monitor and SoftActivity Keylogger you can have your hand always on the pulse of what is going on in your LAN. These unique keyloggers allow remote computer moni”
Details
| File name: | alsvc.exe |
| Product name: | SKL Client |
| Typical file path: | C:\windows\syspkgwk\alsvc.exe |
| File version: | 6.0.2.1365 |
| Size: | 883.92 KB (905,136 bytes) |
| Certificate |
| Issued to: | Deep Software Inc. |
| Authority (CA): | VeriSign |
| Expiration date: | Tuesday, February 12, 2013 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | Yes |
| Code language: | Microsoft Visual C++ 10.0 |
| .NET CLR: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00454447% | |
| Kernel CPU: | 0.00325705% | |
| User CPU: | 0.00128742% | |
| Kernel CPU time: | 5,979 ms/min | |
| CPU cycles: | 16,620,629/sec | |
| Context switches: | 16/sec | |
| Memory |
| Private memory: | 27.05 MB | |
| Private (maximum): | 15.34 MB | |
| Private (minimum): | 15.34 MB | |
| Non-paged memory: | 27.05 MB | |
| Virtual memory: | 93.93 MB | |
| Virtual memory (peak): | 95.86 MB | |
| Working set: | 10.88 MB | |
| Working set (peak): | 26.39 MB | |
| Page faults: | 19,906/min | |
| I/O |
| I/O read transfer: | 274.76 KB/sec | |
| I/O read operations: | 292/sec | |
| I/O write transfer: | 794.83 KB/sec | |
| I/O write operations: | 323/sec | |
| I/O other transfer: | 3.74 MB/sec | |
| I/O other operations: | 3,411/sec | |
| Resource allocations |
| Threads: | 17 | |
| Handles: | 334 | |
Process properties
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.00966742% | |
| Kernel CPU: | 0.00926367% | |
| User CPU: | 0.00040375% | |
| CPU cycles: | 227,784/sec | |
| Memory: | 1.23 MB | |
| MSVCR100.dll |
| Total CPU: | 0.00461607% | |
| Kernel CPU: | 0.00399175% | |
| User CPU: | 0.00062432% | |
| CPU cycles: | 224,852/sec | |
| Context switches: | 3/sec | |
| Memory: | 760 KB | |
| srv_snf.dll (SoftActivity DLL Module by Deep Software) |
| Total CPU: | 0.00179843% | |
| Kernel CPU: | 0.00130294% | |
| User CPU: | 0.00049549% | |
| CPU cycles: | 124,770/sec | |
| Context switches: | 2/sec | |
| Memory: | 2.29 MB | |
| sechost.dll |
| Total CPU: | 0.00073377% | |
| Kernel CPU: | 0.00044026% | |
| User CPU: | 0.00029351% | |
| CPU cycles: | 13,855/sec | |
| Memory: | 100 KB | |
| alsvc.exe (main module) |
| Total CPU: | 0.00029351% | |
| Kernel CPU: | 0.00011007% | |
| User CPU: | 0.00018344% | |
| CPU cycles: | 6,791/sec | |
| Memory: | 2.25 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Professional |
75.00% |
|
| Windows 7 Ultimate N |
25.00% |
|
Distribution by country
Egypt installs about 100.00% of SKL Client.
