home

npoff64.dll

Online Storage plug-in

Starfield Technologies, LLC

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘@starfield.com/off64’.
Publisher:
Starfield Technologies, LLC.  (signed by Starfield Technologies, LLC)

Product:
Online Storage plug-in

Description:
Plug-in for <i>Workspace</i> utilities

Version:
1.0.28.40

MD5:
d98d6d9726a18e31385dae3ddae35953

SHA-1:
c4d6380f8e105a7cc99f62cbbd8c25938f627207

SHA-256:
080e1c1885e4a09f2ad6e8a77270668df899dd9436a36274206ba7c79a6b4dab

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 4:50:53 AM UTC  (today)

File size:
965.4 KB (988,560 bytes)

Product version:
1.0.28.40

Copyright:
Copyright © 2007-2012. All rights reserved.

Original file name:
GDeditwrapperNP.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\mozilla\plugins\npoff64.dll

Digital Signature
Signed by:
Starfield Technologies, LLC

Authority:
GoDaddy.com, Inc.

Valid from:
10/15/2014 2:58:31 PM

Valid to:
10/15/2017 2:58:31 PM

Subject:
CN="Starfield Technologies, LLC", O="Starfield Technologies, LLC", L=Scottsdale, S=Arizona, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4B8980545ADB1E

File PE Metadata
Compilation timestamp:
10/20/2014 1:05:00 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:E/p/Wdd1w7Zukm4oa3kWDqkj7PRcJfIDyEEcqDaDi2:Eud1UukfOlfI2h

Entry address:
0x39C24

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, DB, 9F, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 7C, 24, 18, 55, 48, 8B, EC, 48, 83, EC, 60, 48, 8B, FA, 48, 8B, D9, 48, 8D, 4D, C0, 48, 8D, 15, 79, 9D, 05, 00, 41, B8, 40, 00, 00, 00, E8, 3E, DE, FF, FF, 48, 8D, 55, 10, 48, 8B, CF, 48, 89, 5D, E8, 48, 89, 7D, F0, E8, 5E, F7...
 
[+]

Entropy:
6.4941

Code size:
582.5 KB (596,480 bytes)

Mozilla Plugin
Name:
@starfield.com/off64


Scan npoff64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.