home

_workspaceinstall.exe_

Workspace Native Apps

Starfield Technologies, Inc.

This is installed with Workspace Desktop. The file has been seen being downloaded from dl-mail.ymail.com and multiple other hosts.
Publisher:
Starfield Technologies, Inc.  (signed and verified)

Product:
Workspace Native Apps

Description:
Workspace Installer

Version:
1.0.7.15

MD5:
ab1f3915817693afc792de46b2d255c3

SHA-1:
907596e691a3236a3c5657ea17140f5c62ec0293

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/1/2026 10:34:18 AM UTC  (today)

File size:
1.4 MB (1,487,040 bytes)

Product version:
1.0.7.15

Copyright:
Copyright (C) 2011. All rights reserved.

Original file name:
StarfieldInstall.exe

Language:
English (United States)

Common path:
C:\Program Files\workspace\_workspaceinstall.exe_

Digital Signature
Signed by:
Starfield Technologies, Inc.

Authority:
Starfield Technologies, Inc.

Valid from:
10/8/2008 1:16:07 PM

Valid to:
10/7/2011 1:58:20 PM

Subject:
CN="Starfield Technologies, Inc.", OU=MIS, O="Starfield Technologies, Inc.", L=Scottsdale, S=AZ, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00E032E8

File PE Metadata
Compilation timestamp:
8/25/2011 2:21:33 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:Prg+2i47oa6NhCoxbuz1UmGN/RFMJnw5dF5pPCTl1dv2usP:za6gz1rEmw5P5p6Tl1duusP

Entry address:
0x76A1B

Entry point:
E8, CB, 10, 01, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 83, 65, FC, 00, 56, 8D, 45, FC, 50, FF, 75, 0C, FF, 75, 08, E8, 42, 11, 01, 00, 8B, F0, 83, C4, 0C, 85, F6, 75, 18, 39, 45, FC, 74, 13, E8, A6, E3, FF, FF, 85, C0, 74, 0A, E8, 9D, E3, FF, FF, 8B, 4D, FC, 89, 08, 8B, C6, 5E, C9, C3, 6A, 10, 68, A8, 6C, 4D, 00, E8, 6B, 71, 00, 00, 8B, 5D, 08, 85, DB, 75, 0E, FF, 75, 0C, E8, B8, CC, FF, FF, 59, E9, CC, 01, 00, 00, 8B, 75, 0C, 85, F6, 75, 0C, 53, E8, F7, C2, FF, FF, 59, E9, B7, 01, 00, 00, 83, 3D...
 
[+]

Entropy:
6.1285

Code size:
665 KB (680,960 bytes)

The file _workspaceinstall.exe_ has been discovered within the following program.

Workspace Desktop  by Starfield Technologies
Once installed the program creates a shortcut on the desktop called 'Workspace Desktop'.
46% remove it
 
Powered by Should I Remove It?

The file _workspaceinstall.exe_ has been seen being distributed by the following 2 URLs.

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-43LOs1vpVixbn6-cDtK6lczpVPcplpzzbdbouhx_Ey_baHWfMnNWuOy-8GK-883P/messages/@.id==AOPbi2IAAQtzTsu2IAE8cRt2mNk/content/parts/@.id==2/raw?appid=YahooMailNeo&token=zitEzqOML3j84e6ealFTT5U7-km5qEQF52lp7AcCuBbZ2vDNlChOObUceIYRSGFZyZNdBf65C38bG6fpuZV_7A&error=https://ca-mg4.mail.yahoo.com/.../iframemsg?id=d7395af9-4739-98cd-70f6-67a43cc418f0&ymreqid=b874dcab-3c0a-96c4-01f5-130020010000

http://na.secureserver.net/workspaceinstall.exe

Scan _workspaceinstall.exe_ - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.