» stage_primary.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

stage_primary.exe

Stage

Unlimited Realities Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DellStage’.

File name:

stage_primary.exe

Publisher:

Unlimited Realities Limited (signed and verified)

Product:

Stage

Description:

Desktop software organizer and launcher

Version:

2.5.1320.6169

MD5:

78a72c1c7aa2a658043ca567ab8d8ba4

SHA-1:

ac14a3f2d595f514b02a71272b66dcd2e01de552

SHA-256:

2e2d33519ef46c35a7603fb8b000e5a1d61463c2b2e45b821e6a906f3e792c08

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 12:20:28 PM UTC (today)

File size:

4.5 MB (4,723,464 bytes)

Product version:

2.5.1320.6169

Original file name:

stage.exe

File type:

Executable application (Win32 EXE)

Language:

English (New Zealand)

Common path:

C:\Program Files\dell stage\dell stage\stage_primary.exe

Digital Signature

Signed by:

Unlimited Realities Limited

Authority:

The USERTRUST Network

Valid from:

4/23/2008 8:00:00 PM

Valid to:

4/24/2011 7:59:59 PM

Subject:

CN=Unlimited Realities Limited, O=Unlimited Realities Limited, STREET=1st Floor, STREET=267 Broadway Avenue, L=Palmerston North, S=Manawatu, PostalCode=5301, C=NZ

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00C95AF6374C7C10B597AECA547BEAD2F4

File PE Metadata

Compilation timestamp:

9/9/2010 10:04:49 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

98304:TVp43ATrXVuS4sQZso3vSqhP7z8ezz9+IOUVmv014r619c:ufsQZkQJHCn0Scm

Entry address:

0x1092900

Entry point:

60, BE, 00, 70, 02, 01, 8D, BE, 00, A0, 3D, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Entropy:

7.9237

Packer / compiler:

UPX 2.90LZMA

Code size:

4.4 MB (4,636,672 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

DellStage

Command:

"C:\Program Files\dell stage\dell stage\stage_primary.exe" "C:\Program Files\dell stage\dell stage\start.umj"

The file stage_primary.exe has been discovered within the following program.

Dell Stage by Dell Inc.

Publisher's description - “Stage delivers photos, videos, music, Web pages and more right to your fingertips, with your most recent content always front and center. You’ll effortlessly toggle between photos, videos, music, Web pages and more.”

www.dell.com/us/p/stage/pd

22% remove it

Scan stage_primary.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.