home

npbmcstarter.dll

BMC Starter

Reza Khakshour

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘RezaKhakshour.com/BMCStarter’.
Publisher:
Reza Khakshour  (signed and verified)

Product:
BMC Starter

Version:
1.0.0.3

MD5:
727e5993dddfa0fa8adbc79ac150f633

SHA-1:
2d452ebf5c33eacc6e23a8706d6e5d3c22806747

SHA-256:
493afa38c2fd0cafdf319bb6fbda063cca8ce8e3dcf6a54d865677e602f2d45e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 3:53:25 PM UTC  (today)

File size:
326.2 KB (334,016 bytes)

Product version:
1.0.0.3

Copyright:
Copyright 2014 Reza Khakshour

Original file name:
npBMCStarter

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\bmcstarter\npbmcstarter.dll

Digital Signature
Signed by:
Reza Khakshour

Authority:
thawte, Inc.

Valid from:
2/18/2015 4:00:00 AM

Valid to:
11/2/2015 3:59:59 AM

Subject:
CN=Reza Khakshour, OU=Individual Developer, O=No Organization Affiliation, L=Swansea, S=West Glam, C=GB

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
61CA74B9BDAB634F122D0CE56E2D197D

Registration
CLSID:
{f76a1e09-2fe8-58e5-aea4-2c8d1e0a1dd6}

ProgID:
RezaKhakshour.BMCStarter.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
4/9/2015 9:02:44 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:a1E3OtdJluERnC+2Ie0vTR+UJ4xgPlXBTJIuUJMqgYqUnnxur4D9ntIgW:a1ptzluEBC+2Ie8TRdCm9H8yqgY7gr0M

Entry address:
0x1535CA

Entry point:
B8, AC, 42, 15, 10, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 00, 00, 00, 08, E1, 48, 01, E9, 60, 20, 15, 55, 8B, EC, 83, E4, 30, EA, 45, F7, E1, 48, F8, 53, 56, 37, BE, 01, 31, D1, D6, D3, E2, 8F, 1C, 04, 57, 07, 78, 0C, BE, 0F, 2B, A2, 89, 55, D4, 8E, 12, E0, 45, D8, 03, C8, B8, E1, D3, 86, 27, FC, E0, C3, 2A, D0, 33, D2, A8, 7D, EC, 05, 30, 36, 07, 22, C7, 45, F4, A1, 50, C6, DD, 0B, C3, 39, 30, F8, 99, 75, FC, 06, E4, 02, E8...
 
[+]

Entropy:
7.9679

Packer / compiler:
PECompact v2

Code size:
912 KB (933,888 bytes)

Mozilla Plugin
Name:
RezaKhakshour.com/BMCStarter


Scan npbmcstarter.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.