home

BlackOnW.exe

ARABIC CALLIGRAPHER 2.0

Rami Kanhouche

Publisher:
GolanSoft  (signed by Rami Kanhouche)

Product:
ARABIC CALLIGRAPHER 2.0

Description:
Arabic Calligrapher 2.0 Program, Release 9.

Version:
2.00.0009

MD5:
9d0a099d97710fb710ad11b710f49329

SHA-1:
03b50dbc8e411725403f36e80b95c0cec59defc1

SHA-256:
9292db2ec4a0f9da4a0ef00076bd13eb37acfabb34e4157783a2b3b7de9551c7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 10:05:18 PM UTC  (today)

File size:
19 MB (19,959,448 bytes)

Product version:
2.00.0009

Copyright:
Golansoft Copyrights 2016.

Trademarks:
ARABIC CALLIGRAPHER 2.0

Original file name:
BlackOnW.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\golansoft\arabic calligrapher 2.0\blackonw.exe

Digital Signature
Signed by:
Rami Kanhouche

Authority:
DigiCert Inc

Valid from:
7/15/2014 2:00:00 AM

Valid to:
7/20/2015 2:00:00 PM

Subject:
CN=Rami Kanhouche, O=Rami Kanhouche, L=Beirut, S=Beyrouth, C=LB

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0FC9212EAA16561C29D6B4B42DA17A15

File PE Metadata
Compilation timestamp:
3/28/2016 9:14:33 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:XiUCHQAP5/QFFfJrqWALO1bxBA378BtBGC7luC1o4VcGtJ:SU3APhYVqXOLRtBj4C1QGb

Entry address:
0x2F9FDAE

Entry point:
50, E8, 92, 4C, E2, FE, CE, 50, 55, 10, 81, 14, 39, F3, 94, A6, 7C, F2, B6, 95, 4D, FF, B2, AB, E2, 63, B7, 28, 85, F0, 42, 6D, C1, BE, BF, 96, 8C, FB, 86, 27, 27, 68, 1D, 70, EB, 6F, A0, 94, 9F, 90, 84, 9F, FE, 34, A8, 3A, CB, 79, BA, 43, 2C, F4, 46, E3, DF, 7B, 1A, 3B, 58, B6, 5A, B0, 9C, 87, E8, 7F, 16, 2D, 58, 0D, AE, DE, 83, 93, 02, 17, 54, F5, C9, DE, 19, EB, 71, EC, 5A, 7D, 53, A8, C4, C9, 72, F9, 33, 69, 9F, 1B, 82, FB, 2C, 3B, 41, 22, B0, 1F, 0B, 02, 3B, F0, 69, 97, C3, 88, F2, 59, 27, AC, 1A, AC...
 
[+]

Entropy:
7.8320  (probably packed)

Code size:
12 MB (12,570,624 bytes)

Automation Object
CLSID:
{B14ED37F-06DB-4488-B986-D9149ABDAB79}

CLSID name:
GSAC1.GSClssACInterface


Scan BlackOnW.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.