home

workspaceinstall.exe

Workspace Native Apps

Starfield Technologies, Inc.

This file is installed with the program Workspace Desktop. The file has been seen being downloaded from na.secureserver.net and multiple other hosts.
Publisher:
Starfield Technologies, Inc.  (signed and verified)

Product:
Workspace Native Apps

Description:
Workspace Installer

Version:
1.0.10.23

MD5:
9aee98f1ea7e20252089bf6c7fc8addf

SHA-1:
0af756021501d28756856dc2936b473ac429acf4

SHA-256:
3f659b1e0d52743e285689c378273629295fc08b4d1cfd9303c2848d2eaa1af1

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 2:14:47 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
TrojWare.Win32.Trojan.Agent.Gen
17821

File size:
1.4 MB (1,465,568 bytes)

Product version:
1.0.10.23

Copyright:
Copyright (C) 2011. All rights reserved.

Original file name:
StarfieldInstall.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\workspace\workspaceinstall.exe

Digital Signature
Signed by:
Starfield Technologies, Inc.

Authority:
Starfield Technologies, Inc.

Valid from:
10/6/2011 2:07:17 PM

Valid to:
10/7/2014 4:58:20 PM

Subject:
CN="Starfield Technologies, Inc.", OU="Starfield Technologies, Inc.", O="Starfield Technologies, Inc.", L=Scottsdale, S=AZ, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
07A2A627C9A92D

File PE Metadata
Compilation timestamp:
4/6/2012 4:18:49 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:3Uj4MTWjhjryyGHFG26sgy2QWvBptQT85UGSfcV+p:3xMs2FWoc5p6T85Un2+p

Entry address:
0x7BFBF

Entry point:
E8, 3E, F6, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, A4, 07, 4E, 00, 75, 02, F3, C3, E9, C5, F6, 00, 00, 8B, FF, 55, 8B, EC, 51, 83, 65, FC, 00, 56, 8D, 45, FC, 50, FF, 75, 0C, FF, 75, 08, E8, B1, F7, 00, 00, 8B, F0, 83, C4, 0C, 85, F6, 75, 18, 39, 45, FC, 74, 13, E8, FA, E3, FF, FF, 85, C0, 74, 0A, E8, F1, E3, FF, FF, 8B, 4D, FC, 89, 08, 8B, C6, 5E, C9, C3, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 75, 0B, FF, 75, 0C, E8, F2, CD, FF, FF, 59, 5D, C3, 56, 8B, 75, 0C, 85, F6, 75, 0D, FF, 75, 08, E8, 5B, C5, FF, FF, 59...
 
[+]

Entropy:
6.1197

Code size:
639.5 KB (654,848 bytes)

The file workspaceinstall.exe has been discovered within the following program.

Workspace Desktop  by Starfield Technologies
Once installed the program creates a shortcut on the desktop called 'Workspace Desktop'.
46% remove it
 
Powered by Should I Remove It?

The file workspaceinstall.exe has been seen being distributed by the following 4 URLs.

http://na.secureserver.net/workspaceinstall_pl.exe

https://ecc.secureserver.net/ecc.php?cmd=dlapp&app=workspaceinstall.exe

https://na.secureserver.net/workspaceinstall.exe

http://na.secureserver.net/workspaceinstall.exe

Scan workspaceinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.