home

BlackOnW.exe

ARABIC CALLIGRAPHER 2.0

Rami Kanhouche

Publisher:
GolanSoft  (signed by Rami Kanhouche)

Product:
ARABIC CALLIGRAPHER 2.0

Description:
Arabic Calligrapher 2.0 Program, Release 7.

Version:
2.00.0007

MD5:
414873f05e661c147a2d80f0e7d3025d

SHA-1:
607163905f5bd0bbefa23613c356c81f475cab23

SHA-256:
72efe9c1c657f2c0fc92a96297a188941eec08fae0955afcebb8a7eb384a4eea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:19:30 PM UTC  (today)

File size:
18.6 MB (19,455,640 bytes)

Product version:
2.00.0007

Copyright:
Golansoft Copyrights 2016.

Trademarks:
ARABIC CALLIGRAPHER 2.0

Original file name:
BlackOnW.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\golansoft\arabic calligrapher 2.0\blackonw.exe

Digital Signature
Signed by:
Rami Kanhouche

Authority:
DigiCert Inc

Valid from:
7/15/2014 3:00:00 AM

Valid to:
7/20/2015 3:00:00 PM

Subject:
CN=Rami Kanhouche, O=Rami Kanhouche, L=Beirut, S=Beyrouth, C=LB

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0FC9212EAA16561C29D6B4B42DA17A15

File PE Metadata
Compilation timestamp:
3/19/2016 5:39:43 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:W0DtjuBdJLW2ZUqPR+mJHrbnAA/KBK3FHqZ34ywjyd:1xyLvZUqPRrb1gKMZVi4

Entry address:
0x1D4F504

Entry point:
60, 66, 89, 1C, 24, 9C, C7, 44, 24, 20, C5, 8B, FC, D3, E9, F4, 91, 16, 01, 9A, 15, 60, 16, 3F, 08, E1, E3, 0E, 39, AD, 6C, AA, C1, 0C, 60, 6F, 28, 45, 66, F8, 9B, 26, B6, 41, 22, 2E, DF, 3E, 55, E0, 2D, 00, D2, 3D, CF, F9, B8, 4A, 02, 58, 7D, D5, B5, 30, FE, F2, D9, 60, 72, DA, E6, B2, 54, CA, 47, 26, 80, A2, 91, E6, 44, 61, B4, 03, DB, 3B, 6D, F4, F6, DF, 9D, 79, 58, AB, 02, 00, 22, EB, 65, 19, 23, 45, 9D, 70, AE, 5A, A7, 4B, 6B, 71, F7, 38, 05, B8, BC, 69, B4, 65, 1D, 3C, 24, 90, 4A, EF, 54, 0F, CD, 27...
 
[+]

Entropy:
7.8372  (probably packed)

Code size:
12 MB (12,550,144 bytes)

Automation Object
CLSID:
{B14ED37F-06DB-4488-B986-D9149ABDAB79}

CLSID name:
GSAC1.GSClssACInterface


Scan BlackOnW.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.