home

poweriso6.exe

PowerISO Setup

Power Software Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.presentstockdownload.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Setup

Version:
6.5.0.0

MD5:
b8a6c3efa365c430d76c9b34e031a2dd

SHA-1:
16480f5a6d030a6daf3aad1901107d74d72c4f85

SHA-256:
73ab5c10e0522bdac98ed4be9f62bdeb237566d5335ce2095ab262ad8cb1f043

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
5/4/2024 12:58:50 AM UTC  (today)

File size:
3.6 MB (3,758,992 bytes)

Product version:
6.5.0.0

Copyright:
Copyright(c) 2004-2016

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\poweriso6.exe

Digital Signature
Signed by:
Power Software Limited

Authority:
VeriSign, Inc.

Valid from:
3/27/2014 5:00:00 AM

Valid to:
6/26/2017 4:59:59 AM

Subject:
CN=Power Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
227EFDF22825BA270530FB09D52B32F8

File PE Metadata
Compilation timestamp:
12/6/2009 3:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:DM/VkBGVXTGhAWBM8H7wJJaSv0viJ+MHV:SVXTGhAWBMbiSvpJ+MHV

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9961

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file poweriso6.exe has been seen being distributed by the following 50 URLs.

http://www.presentstockdownload.com/c?x=Luxehr6okK TWNYDzUbWnbgtKuhq4FMww7bxndjbBTU=&c=qQs70MFsNJAvWoaEWh2oLgMCDLbcQWrSSbix8HhUPG C9iQzoK1DG0usTAY41fJtIyzHaTfwutm4CbtjQXTWDUtchyOneijcrFDGFHHb03hHZ8AJjf9xbqjQG3CUuhZ8HDL83xWSaAfK4fIq4QXPw3MzfCBTqr/IRYEbYSLPuEk=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.heartvaulthead.com/c?x=QFPNYcaUIM8FJmExj Ri23YuLWscaAsMPkBk7XPJkCk=&c=/OyRalmCCZ1AkKQahciSy/dmlrznNvexbMaJVFQBb8Z2VkVDIWTNXqu/nv2hstHjHT3Qi64aLZ1WGjgdMZfVleJrqV68s/npoOopl2zYP5 FpNooI1Ba7DKaasV9wA6YBjaL7b89pqAap/0ewowRyA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.conceptstownuniverse.com/c?x=nsyHgrnwTgNJQHI9GHsX8Iyo3ts4u3jfFHAPCZpDRWo=&c=AWgKK8SSOm82wy1yCuvKUE8YWY86C8MIY8sdQdZOUJY JCpBY3YTubvV5Rtg9us1kGdIKk9Ya/ccSzmAtP37zRpBMKVlkUkW8CcVGkrDBCSx0cEr/xfyg6EF2Ig9 Vj0JCeR EbOj3cp5O7cPHRyBA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.centralappssign.com/c?x=wMD3XIj2Jjg/88zaRtOJM2TBm/iMbP4RRB34n0ZhrxI=&c=XBbGCeXiWTu/ hEtwPx3vNOY06N2ZuneNKnUhzKUufI7IB95JFR4Nz2MBkeo 80UX33uhxcUSmeCCIWZCEu94NCUwQmSq6Tkxg2x2zisnvrLU9AqHCWv8TFYfI a0sGHWobjM4W CXdgb09WhBBFtheqhOw9jS8Px15VvEbWe3c=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.signhostingbundle.com/c?x=/F4eGYSCKVNnc jUjFEEZRHQoBGaB3viWClhHyIwZg=&c=9one77k I6xtqBG5Si/5OFXT3P WSz2 NZmP5Tg9pvivLguJhSIyzCbZoYJexAEpscGJUg5sDWS1J CiGbG XpYUojZHdIPZSqTNhoZsojIq7miPbb4xJPXrNcO7Fh/3 /BGb7SJ1Rg3e4hM3AM1VR4zw2/Lgf4UWpJ6Pq4fDU=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.deliveryhostingfiles.com/c?x=oUm/AiqwM/RLMTLgxqBIIdKXnGSOgwHqiMql7VJdBB0=&c=CWlBfpxCgTcTEbcmCVIBCJFm9koQwtPN3l7A FMn1BtqjldcLBqXWjjIAr2 xZ0mBIC77f2MIEwHHQVBuGP4g44ytpqxTGLgtG3YFRT7/sXtIbwArsjBS WKUjWvJrG3gMIdfj/dd7I4tQqV6CEiAw==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.deliveryhostingfiles.com/c?x=VFWHde91H/yD8e3VTsggnZvhtXhmmFKAGQdNjS/bwAA=&c=TdsLb19zHYq7S6VVGuWLv1snZTJIF5ohLn vaMSD/4cCm5zGLDwbs5S efClsJP2MWhigr/ZFhW1uTWV26UO2ok34CT1wNm9eFF3s idpt/X4S7zu7taik/TGOdOyuOUf4mdxAO MC3unCKZu8y2tZB2pkeQSRJ5qwhu FAeY6o=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentstockdownload.com/c?x=DDLXYAvcUadgEplJ2ldcMKjoeDQmk2OgNdVocggShLo=&c=FAgl4OrRNrM2SaZDiNi8TI2lU4/ROEIcHuaiKPSdSaChEitQ3qPsUG1 t6AwkilhgmyQaaZXL0xP5o96NAGq3Y/YjKrAXIc7FjWIH9VgMcIXKCPWQ7T4BRktv eB2Hm5zdfgJPOFKb6R2iehC2SEc2 RScvSZCtfJ2X1WTdl9AY=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.updatedownloadhead.com/c?x=jn3TCGRsewF6JgZV0QpXu4El3u pLie9SF5YIotfjSc=&c=BwpXsdHoVwUa VaZ8PbnPn8Lf8fvcHXvjVCCZvPRYd6gl3cq6t7/00Oj5tcHXpxnCy1t03BsUbTV5CiQWJA9TE7TH5c I9kqShwfZKM/CTKQeH8TARSAASnDmXgU6V94uVHku hyI5rDo0exEXZWO/p YQU4nKU s0Xbri8dz2Y=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.megaheartgift.com/c?x=BWdCvF8gFq56sRUJfMGT70vPuwFnK5FMhNFSxTP7iuc=&c=2ye9t4hwV1FDsuX95ks8TEqHVFOmtpd34 g37odTY47VsDKszneUo mYnlcTOk2tUuW5LPxt2qwgFOJatmpOx/C2GzCKiLOwfE8IS3dfV2mrExRtJhsUEEDWeXZzmpL4FS7E/HrqrMilwYbNmdAShw==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentstockdownload.com/c?x=LsqeQdg K6IkdsTwvCZQybj/Ku2/gi/V69h2wR2Sqq4=&c= wT/64D4MKc7rD7 2NBdSQ2qJXSpUqUvZW4K/bPj/V12VStyqQsE3nvuUS4fOZzE4nmWjpQsOeE2m8E lM9Q0P/YF5WRDGg7XAiMcckKo4CAKY86Gs8gs lxOGmy3ynQVlv4BDfHy4/IgIOCtp2QRJVCuhxBNJdEaLz/b 6Fw1U=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.centralappssign.com/c?x=O4Fa8bemXgAebyAo1qQYDmw2B7e9hZ8O743AzqG/NYM=&c=ZGRgsDoFuMO1o6oeYOtINabLTWT0iPRWPmT 0X2D /6ED7nclhDu9uZFjf4ZY82/ErJX1BdBaC1IzV2c5lPwZG/e1zFQBBr Ze/OVDUwSN2sxzUOG3eHImh277aowtRRdAkUSf9ly9MtxuIBQxFZjA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.deliveryhostingfiles.com/c?x=3hBe08Z/3PEVqF6alwKVv6Z3lrQoCJtQk4581JLpO6I=&c=/NmN/Nbdq2Kg8IRSycV8U4fUfrrmZiNfv/O15YE8faEsYVLaAJI6N769DvVUisM5VGUAdcSheCBkSSHZmbPwJII5p7Kksd5XJjKRj2GyQ7qCa6hc9Xw0wYXX5SSLXDpqB Sr4fGqoyD1wJQ xPu/4A==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.deliveryhostingfiles.com/c?x=SpFz3FG6AH H9ITy4SV74EfUa52AZqS0abjE1jU AAk=&c=TAgSMC/vn/yrpyd5l 3dLlf NbdRDqr8sESjf7 M20uxVFD7Nj68ZGERFMPhmEhma4yfY6oh1XWtg2BbauPu 8Zlfv6kYSCO4ZbSaq8A/qC7ptI1eFrU7rU12JIyLWu0RDpRW/yeheB FYoqTL7K8g==&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.bodymegacycle.com/c?x=x/2AwEldcoX8av/hfUUcU18rfu2PCWdsCAnQMJieQZc=&c=qWDtfx /0rziUML/L5DnF5tSN/PyRqtQzTtRHMLJzzOH7aGIhqg2 jC5EZuLTPmF3P/C89FvJHN WEYv1R7fPQcD/FO8q8 aNcaSFsBFzJPr1uJMRCWMG/VLtQm/cyNLF08opnAY QF6f8UOApCYEYr/C2qEaQbQLYmSYAw7 Qc=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://kuwaiti.co/files/6/.../PowerISO6.exe

http://www.conecptstockapps.com/c?x=mt4DbM5V5CMi5QCpve2ThmuBCo1eRyJQSPOelABRgLE=&c=Xgo1vMdrMhsZF10HJEBm9/kUB/AugBS4tN17UGDO 0Zs707CrGvcdKe5Q71TLs cRQdYWopqepxNOvuev1EHOhEnv3UzQ7EnZ9tKiXtzX3/7kBXG3B5zt9Km9CxV/S8YWb5oe6v8OjukP8QEBVs1GA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.binariesapplicationsshare.com/c?x=1NBOtLUCncQOQg0QZTs/2/A0a66oHuWt6QhjpIjBi48=&c=J9wam0HCLHEoqYKhLTzTzd2atbAY7F9wyPWn/O5StdB3rTJ6rvAczjEvZbar4AuWvR7jvV5KLAaXlYkKML7cXSz Hxgr0z4zQyrTc3ZvZU8DOcI/saw3298YAhtMcepcryOG/48JpqguMAgMmWlRRydcnT61VIUarWiE/aQmPw=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.giftworldfiles.com/c?x=T3kNxcXTbwvawN /t4Ps7IX2eyLCwbET1DtL FICcd4=&c=BNBAfhF8O2GrAtIgWBEJNcCcyjKmeYm5TgP458Rgx8eJkQgKl47e0jWWxSpYxu0zLTqTp2SS NgPf0P9jqOL81YZK7YyirQseJt4Jh9IWZLMbjMckEvbu6WqdVUmEUACtNbc/fyHswC9iImjxj5GAQ==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.centralappssign.com/c?x=NouGMELbLUck2/0l mGWNiDh9xWSYaOaM8OeGdb2zzo=&c=5t5WHef1lR8KJiLkKnTdTG2LmOadlIcwgHS1 ifV/UwKLpPd37OJWE/L/2P1NG9TnwxD9T8R92hPcDJJBSlV T27omkxyfrg/CmABs BDjFFvDr940eKKpvPVbvOy h5HZ5oas62219jsSObW1 PPtpe5LZ0XTGlA4fW0rM/djI=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.binariesapplicationsshare.com/c?x=AtPGcdtZhms56B7FsjAA1DhRh8xrF758gjSZFucBk/w=&c=DzXXuRd7dZ80dzunLiGeNM2K5RDU4QwZ6eRDAfolpN03KYfUay2Mf6p4VG25L7buu6mN/SnSTJelAfpN86yf8UXezCvITFFsdCFsSyWCOI2pgdtbmQGnF4f1sGl2zNW65tDclYXe36pLOh07U0XPnQ==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.bodymegacycle.com/c?x=UGYEy3JIy9eFUQsumFwcSTtoj4LTXNMbNMTjawMdX14=&c=kXqR0vM3rTWM05 9 PXegqwB9hlRZ5lV4wX63BerkHfReif79VDv3X/Ng0Eg/PWmu1QHqq DtyYeJi8fvSOO3IpSsofGVTMmUjFJ4G7eNOxvsXqUTX4IAI56f8VjdSXDc213yYI/pQ5/aF1Q6UTkvEXjzVsaIiVVxwV7BcCgieE=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.deliveryhostingfiles.com/c?x=Yg68RyR3VJcqsS vJNk0wKuS7/NKz0LsmOtIitRfvN4=&c=50cQAa zeDIpsoBe18UG2bNGXc8DfgWtc rZc0eKa1xK48ZMDJW1qktTvIbt9jXrMOvdEznMH6Dl8RO/7yFBqyHZuQjnMyMCYnyIb0XJAYkD3Twf8YOdaSnI83it fANCAympH/2XCjY8ER7wdizeQ==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.bitscontentapplication.com/c?x=9l3wqLuFod64277 jPQG5CuLz8mwrVI4ctC3Ztcfefs=&c=6gZXAVnNuk6hH3lPrxIhM9PlyInJlG6nQbT1PDTU fFH8IG FJkJSPVbuG5eeXUDFt14K5UlKtaFUVBTkM1iI90QsyypeJSxfU8xueAcuwDUdhsQ 3vPGy8qiUPyC2/ibrZvJAeufKP pXwLpMWrCA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.conceptstownuniverse.com/c?x=ttYZhorvfsja9kzD87OHfoQwirRbCqTALyMuWigUY74=&c=kfGnNzbgcbtshTp0cQ6fpxi4PJGGHqkJZRVt2M4Xj1li7LyX553TkS9m2uJMXRHyjcWuWMOb/pr9 Z5UR0RMZjwvVtS WD05 2DpT2A6uqGBa3TgS452fF7Yty3l3yjgH6EHXao5NG0XTYRStkEpg==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.cleandlvault.com/c?x=dDeDC/M7h0v1KyNWqAZD3eNHgmCSLptbxWKzx5M5k/0=&c=XtFYuKrEVJ6OqWtF8LRgNK dToc2WKoQn6IGmkEalktRRSdQAM21PsckdhK3pMwoAPrMDK4UpZkDkWHqV7na0rtjQ8wrk13KtBuVXwXfykRGlLqLe87ZdWIdNXDca0eOwz3 hoXDSCThyvgnlbz0bjWNDDnl/4TxDntbGNnDhJg=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.cleandlvault.com/c?x=169vrPJX4o/ 6zZLgbcuAAg1e8Mcd085IxgcqGY6imA=&c=AbisdrM/lQ rhZ9S6iPwW8oMNQCeZUVXYm6DyM2jvWYmA8Nw6nCoSLqg8ySoSuOVLH2/HbAq OSF0DyROJt/jLCxrnw3t5 0heKugu9nYmR N2PqLlxj AObcF5EibfOuGK9QSPmg8ckH4CZjMuT6JdK 8XTw5jAQzvMmvXM9M=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.contentsigncurrent.com/c?x=zfN88OI5x0ETbWYUjSdUFaEgVrewvU6ReWX2cY8P Ds=&c=tytLVJJw1Mmi0Lr0KA29v3uFtyAT879fKukgq4nx5Omz5yX5x2zSjSMga2/aAmnc0c097hBj2hLcpeU55fw h2aEULMP7Nev1fVN Ba5Acq4leV/k2bA6s vOzI7nqOe1AwNgUcnV/Qs7MdmqRMMcsYPuWo6YX22gC0prla0QBg=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://kuwaiti.co/files/5/.../PowerISO6.exe

http://download1511.mediafire.com/1e104ozokwsg/.../PowerISO6.exe

Latest 30 of 3,349 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.