home

workspaceupdate.exe

Workspace Update

Starfield Technologies, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Starfield Updater’. This is installed with Workspace Desktop.
Publisher:
Starfield Technologies  (signed by Starfield Technologies, Inc.)

Product:
Workspace Update

Description:
Workspace Updater

Version:
1.0.10.12

MD5:
8bbdbebcf62898d56ab584a373a461e7

SHA-1:
1a602c0e6c3f049f1e177608f88721e7478813bc

SHA-256:
627f24c96576c51255794dcd4dfaa39c0f0334f5e1ef69ec552de357c2c16228

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 9:38:32 AM UTC  (today)

File size:
34.2 KB (35,008 bytes)

Product version:
1.0.10.12

Copyright:
Copyright (C) 2013 Starfield Technologies

Original file name:
StarfieldUpdate.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\workspace\workspaceupdate.exe

Digital Signature
Signed by:
Starfield Technologies, Inc.

Authority:
Starfield Technologies, Inc.

Valid from:
10/6/2011 2:07:17 PM

Valid to:
10/7/2014 4:58:20 PM

Subject:
CN="Starfield Technologies, Inc.", OU="Starfield Technologies, Inc.", O="Starfield Technologies, Inc.", L=Scottsdale, S=AZ, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
07A2A627C9A92D

File PE Metadata
Compilation timestamp:
4/9/2013 3:14:20 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
384:zTUdwKZmqkP0B1KzzPapy/eFyvz9PsfYK9REB87YZI3a5SMiSnhPLVktL8d:n2wZqkPYKPPas/Yy790f4B8uXiSTkG

Entry address:
0x211A

Entry point:
55, 8B, EC, 6A, FF, 68, 30, 31, 40, 00, 68, A0, 22, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 70, 30, 40, 00, 59, 83, 0D, A8, 4D, 40, 00, FF, 83, 0D, AC, 4D, 40, 00, FF, FF, 15, 74, 30, 40, 00, 8B, 0D, 4C, 40, 40, 00, 89, 08, FF, 15, 78, 30, 40, 00, 8B, 0D, 48, 40, 40, 00, 89, 08, A1, 7C, 30, 40, 00, 8B, 00, A3, B0, 4D, 40, 00, E8, 10, 01, 00, 00, 39, 1D, 10, 40, 40, 00, 75, 0C, 68, 96, 22, 40, 00, FF, 15, 84, 30...
 
[+]

Entropy:
6.4497

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
5 KB (5,120 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Starfield Updater

Command:
"C:\users\{user}\appdata\local\workspace\workspaceupdate.exe"


The file workspaceupdate.exe has been discovered within the following program.

Workspace Desktop  by Starfield Technologies
Once installed the program creates a shortcut on the desktop called 'Workspace Desktop'.
46% remove it
 
Powered by Should I Remove It?

Scan workspaceupdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.