home

poweriso5.exe

Power Software Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Power ISO. The file has been seen being downloaded from download.oldapps.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed and verified)

MD5:
01bd0af2a884e7ee21761bae0821cc2f

SHA-1:
0bda3ced54a2b64c4911f3a25e242eb4be0ac08b

SHA-256:
94e1ba04a805c15ff665f2b19869800d0da136657f460ecd6bdb320cc9c8f3ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:22:23 PM UTC  (today)

File size:
6.2 MB (6,515,112 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\poweriso5.exe

Digital Signature
Signed by:
Power Software Ltd

Authority:
GlobalSign nv-sa

Valid from:
10/28/2011 9:33:03 AM

Valid to:
10/28/2014 8:33:03 AM

Subject:
CN=Power Software Ltd, O=Power Software Ltd, L=香港, S=香港, C=HK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214EC0AA9D4C5C4268811B30352BF16983

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:lXluQqV7sHbBdbUOXaRGY13yJD0IRfTrh3Xm0x7lTr+ikNR5UocrDK4uBSjVaR6g:lu4b4OK8YNmN9nh3Xmm783NodFjEQ52

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file poweriso5.exe has been discovered within the following program.

Power ISO  by Power Software Ltd.
Publisher's description - “PowerISO is a powerful CD / DVD / BD image file processing tool, which allows you to open, extract, burn, create, edit, compress, encrypt, split and convert ISO files, and mount ISO files with internal virtual drive.”
4% remove it
 
Powered by Should I Remove It?

The file poweriso5.exe has been seen being distributed by the following 3 URLs.

http://download.oldapps.com/.../PowerISO5.exe

http://poweriso.software.informer.com/.../

http://software-files-a.cnet.com/s/software/12/41/22/.../PowerISO5.exe

Scan poweriso5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.