home

Kairali.ocx

Kairali SDK

Supersoft

The file Kairali.ocx by Supersoft has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Supersoft  (signed and verified)

Product:
Kairali SDK

Version:
1.00

MD5:
835927ab09fc0f43e6dae57814d6ee12

SHA-1:
383bb56e3655ee19533b5136398e6862f77c96c6

SHA-256:
89528eb2c80d5bb06937c7c5ee3c9218f4c312ed55b47802c89801927ffcbb72

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
5/2/2024 6:53:01 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Supersoft (M)
16.3.3.11

File size:
105.4 KB (107,912 bytes)

Product version:
1.00

Copyright:
Copyright is with Supersoft, Kesavadasapuram, Trivandrum - 4, Kerala

Trademarks:
Trademarkt is with Supersoft, Kesavadasapuram, Trivandrum - 4, Kerala

Original file name:
Kairali.ocx

File type:
OLE control extension (Win32 OCX)

Language:
English (United States)

Common path:
C:\Program Files\supersoft evaluation\kairali.ocx

Digital Signature
Signed by:
Supersoft

Authority:
Root Agency

Valid from:
9/28/2002 3:21:32 AM

Valid to:
12/31/2039 3:59:59 PM

Subject:
CN=Supersoft

Issuer:
CN=Root Agency

Serial number:
5DF17E3294AE15A84BC25820234104E8

Registration
CLSIDs:
{4F0EA13E-0A85-43FA-9D99-D26A44CFCA61}, {92D205C5-9610-4F30-8A86-56894621D6E0}

ProgIDs:
KairaliSDK.KairaliEdit, KairaliSDK.KairaliText

COM registered:
Yes

File PE Metadata
Compilation timestamp:
7/18/2001 12:11:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:4q/AmwNSo4PIots2jcp9ZNv9dp8h3cbgiHMdRXgAbJ:4q/AmwN4I2jehq66wAbJ

Entry address:
0x17AC

Entry point:
5A, 68, 8C, 4B, 01, 11, 68, 90, 4B, 01, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 70, 00, 00, 00, 30, 00, 00, 00, 68, 00, 00, 00, 40, 00, 00, 00, 14, 9B, BB, E1, 0A, FC, 20, 4C, B5, 60, DB, 6C, 0D, 81, 05, 5E, 00, 00, 00, 00, 02, 00, 01, 00, 00, 00, 20, 20, 3D, 20, 20, 20, 4B, 61, 69, 72, 61, 6C, 69, 53, 44, 4B, 00, 64, 0D, 0A, 20, 20, 4B, 61, 69, 72, 61, 6C, 69, 20, 53, 44, 4B, 20, 46, 6F, 72, 20, 4D, 61, 6C, 61, 79, 61, 6C, 61, 6D, 20, 62, 79, 20, 53, 75, 70, 65, 72, 73, 6F, 66, 74, 20, 00, 00, 63, 65, 6C...
 
[+]

Entropy:
5.6481

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
72 KB (73,728 bytes)

Remove Kairali.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.