home

stage_primary.exe

stage_primary

Unlimited Realities

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DellStage’.
Publisher:
Unlimited Realities  (signed and verified)

Product:
stage_primary

Description:
Dell Stage

Version:
1.5.420.0

MD5:
8e1bb39c377f70829184217bbbd0dfed

SHA-1:
5f57dd9c0fbd44018607fd9818cc3b917b91848c

SHA-256:
17ea6bdfb73f7af14c8d691390fe5cf6448e0a1350a59372251b65eedb2d0b90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:56:04 AM UTC  (today)

File size:
2 MB (2,055,816 bytes)

Product version:
1.5.420.0

Copyright:
Copyright (C) Unlimited Realities 2005-2010

Original file name:
stage_primary

File type:
Executable application (Win32 EXE)

Language:
English (New Zealand)

Common path:
C:\Program Files\dell stage\dell stage\stage_primary.exe

Digital Signature
Signed by:
Unlimited Realities

Authority:
VeriSign, Inc.

Valid from:
7/29/2010 8:00:00 PM

Valid to:
7/30/2011 7:59:59 PM

Subject:
CN=Unlimited Realities, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Unlimited Realities, L=Palmerston North, S=Manawatu, C=NZ

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
387BC7CCCD6C464B23E294928D7AEF77

File PE Metadata
Compilation timestamp:
5/29/2011 6:27:44 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:iIxRTz9zWBnqzAgI9P1NI5lGxqaRI8XsMB1el10Z0V84:thz9qBnqzAgI9P1NI5lGxqaRpXsMB1CD

Entry address:
0x13A2D4

Entry point:
E8, 7F, 04, 00, 00, E9, 36, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 98, 5C, 56, 00, 89, 0D, 94, 5C, 56, 00, 89, 15, 90, 5C, 56, 00, 89, 1D, 8C, 5C, 56, 00, 89, 35, 88, 5C, 56, 00, 89, 3D, 84, 5C, 56, 00, 66, 8C, 15, B0, 5C, 56, 00, 66, 8C, 0D, A4, 5C, 56, 00, 66, 8C, 1D, 80, 5C, 56, 00, 66, 8C, 05, 7C, 5C, 56, 00, 66, 8C, 25, 78, 5C, 56, 00, 66, 8C, 2D, 74, 5C, 56, 00, 9C, 8F, 05, A8, 5C, 56, 00, 8B, 45, 00, A3, 9C, 5C, 56, 00, 8B, 45, 04, A3, A0, 5C, 56, 00, 8D, 45, 08, A3, AC, 5C, 56...
 
[+]

Entropy:
6.0619

Code size:
1.2 MB (1,284,608 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DellStage

Command:
"C:\Program Files\dell stage\dell stage\stage_primary.exe" "C:\Program Files\dell stage\dell stage\start.umj" --startup


The file stage_primary.exe has been discovered within the following programs.

Dell Palcoscenico  by Dell Inc.
www.dell.com
10% remove it
Dell Stage  by Dell Inc.
Publisher's description - “Stage delivers photos, videos, music, Web pages and more right to your fingertips, with your most recent content always front and center. You’ll effortlessly toggle between photos, videos, music, Web pages and more.”
www.dell.com/us/p/stage/pd
22% remove it
Palco Dell  by Dell Inc.
11% remove it
 
Powered by Should I Remove It?

Scan stage_primary.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.