» BlackOnW.exe
Overview
Analysis
File Details
Behaviors (1)

BlackOnW.exe

ARABIC CALLIGRAPHER 1.1

Rami Kanhouche

File name:

BlackOnW.exe

Publisher:

GolanSoft (signed by Rami Kanhouche)

Product:

ARABIC CALLIGRAPHER 1.1

Description:

Arabic Calligrapher 1.1 Program, Release 8.

Version:

1.00.0008

MD5:

48440f209b567185dd2fe600e25d866b

SHA-1:

cc34564720c7e3531b65a56e9eb42881ee24319a

SHA-256:

235a24eefca9a1b6cded757320f5b56ed18179cbe6a8358120d7527c8f513c9f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 4:36:21 AM UTC (today)

File size:

13.7 MB (14,335,464 bytes)

Product version:

1.00.0008

Golansoft Copyrights 20014.

Trademarks:

ARABIC CALLIGRAPHER 1.1

Original file name:

BlackOnW.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\golansoft\arabic calligrapher 1.1\blackonw.exe

Digital Signature

Signed by:

Rami Kanhouche

Authority:

DigiCert Inc

Valid from:

7/15/2014 3:00:00 AM

Valid to:

7/20/2015 3:00:00 PM

Subject:

CN=Rami Kanhouche, O=Rami Kanhouche, L=Beirut, S=Beyrouth, C=LB

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0FC9212EAA16561C29D6B4B42DA17A15

File PE Metadata

Compilation timestamp:

7/16/2014 11:15:25 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

Entry address:

0x14D79D1

Entry point:

E8, E8, A5, 00, 00, 54, B5, 9C, A1, 78, DD, 4C, 2D, 5C, 05, 52, 12, 5D, 7C, 31, FE, 83, DA, 5F, FE, CB, EE, 03, 6E, D3, 22, 2F, DE, E3, 96, 53, 22, 9F, EA, 57, 5A, A7, A2, 17, 4F, A2, 33, B2, 9F, CF, 52, C3, 1A, 07, A2, 37, AE, E4, D7, 8A, 9B, 98, 55, 6A, 77, C7, 58, E5, 34, F0, 7C, 7D, E4, 45, D4, 43, C1, F2, 77, E6, FA, 12, E6, D3, 4F, 51, 18, 3D, 7A, 9F, 02, FB, 53, 2E, 6B, 1C, 4A, 48, CF, C2, 9E, 84, 0C, 47, D3, 9B, 1E, 1A, AF, BE, 11, 90, 01, 11, 04, 5A, 54, 91, 5F, 79, 34, 4F, 7A, B3, 9E, 3B, 27, BF... 
[+]

Entropy:

7.8459 (probably packed)

Code size:

8.7 MB (9,072,640 bytes)

Automation Object

CLSID:

{B14ED37F-06DB-4488-B986-D9149ABDAB79}

CLSID name:

GSAC1.GSClssACInterface

Scan BlackOnW.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.