home

poweriso6-x64.exe

PowerISO Setup

Power Software Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.tagappmega.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Setup

Version:
6.4.0.0

MD5:
3a597c78758ecf5612bdd35162b5ddfe

SHA-1:
a4898cbbcb3c3d1089508fc6dadad69b622fc9ce

SHA-256:
228cf245a9bd4bfbd15adee5ecc216e96c299055ba28634515ea0c58f4b91c0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/2/2024 11:28:24 AM UTC  (today)

File size:
3.2 MB (3,376,136 bytes)

Product version:
6.4.0.0

Copyright:
Copyright(c) 2004-2015

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\poweriso6-x64.exe

Digital Signature
Signed by:
Power Software Limited

Authority:
Symantec Corporation

Valid from:
12/17/2015 4:00:00 PM

Valid to:
6/25/2017 4:59:59 PM

Subject:
CN=Power Software Limited, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2E3B3D0363ACEC80699F4CBF1A5F09DD

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:kZT8IgN/0JG7TMOotPvT1DzYt/E/iXRzyPjsIC+zP9IwBI5suXNN/ao/XnFd5g2Y:AT7e/06QOojotdRzqwA9Msud9a6Vd0H/

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9953

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file poweriso6-x64.exe has been seen being distributed by the following 33 URLs.

http://www.tagappmega.com/c?x=D0oaC 66RwHI65p497B93/7j9uxHmGcL7q3ENdE0GnA=&c=0Frwxf0i xRqvReoLKyryU8UQNOvB8JDiFqFPrzCHqtBxnxz3Hv5iiKYSbOATqPSKxuE0eaRzwZYf96TpFKNDFuUjdvqLFvDkvaBFARY09y8To 5nDk85/4fLNyX4hvWBbGjZhe OYqj9/hD1K6alA==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.conecptfuntowers.com/c?x=iPddr6mxsvqFD/c4gKOmtU5B0m 4CxOpOcTP/GEJvyQ=&c=Gj7q3C8B9S5WDHnRCi nSQ1x1r8qCzfSeKt/rvAiK6SuxRqhV8hYE 8bbpUVaIop/WfNVJAwD3jNXnCz7HXfqOOqVVuVtZSTuHM61bvdSnjTEh1VnG64mX6A9f5Do8K1QEch9X/GcJXVmJwO4xPfeQ==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.laboratorycleanapps.com/c?x=ARIa1u2g3r uk0xd8Cd8marDxnjLvI4AyifNZyhD5Gc=&c=B 91Mgfvcju791MnqcZKX9unehYR4 cF /Wem9YnXMDJDhWBr mn5rRtwzGMiYhmAsVoxLmNvqB1wOAUXs0lBCR Blk9TxzxzdjDMwLnqiP0Ec1aouriT4dUrfBKsZFpUrVGmQHAFea613ZzlYwsBZGGkOnbYAHds9RiJvlxnYk=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bitsranchconecpt.com/c?x=RbH9Q/F6haFxtHe21YD98nABrIp14Oljs5PQS0UVS8c=&c=kC2kZVMEjW8IWzYkgn0Tg0PR1f8E8jPNfvaePr6CTRlRG 5bi/P48WJ1eVb5MSSbndLIwizUf5ZuOLE4Rlu89JhpRmln4nV3dINUOjAsIHm yw61mU4rS1hjalsUgm1g8fW3hWnhOPohbSFxZZXRMJuQteNPjHUaLhEKefLSYec=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.laboratorycleanapps.com/c?x=n59CSrsZItEHtfbDkXQUBpHt0iHViz12j6ClSr0w6HY=&c=7JzkJ/N6CJyNXRmiiC6 L6qEOcrUZLLu7xQYv2SX0nN1UsZqoiqwc h76mgQsU6P/GPnIsemWNGcpbaz/gq0ehZ44FeNzdJq6kl2TdG5nq1/cW3xwd2bU8sBciYDqHdWpm/V9F7rEecdlu2YMYUnpBO5SY2IYii9sg4ysZ7e9bk=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bytebulknew.com/c?x=8QkeZG fJtbXuYHRKPvyvOG4MpcXR3i0hwc1oEq6qKw=&c=K0nAe9KoommqW/yZB8UmxlxrqFSXpWycirSpT32NxeaAyz6GLPSfwlD48bmRudi RUtoHZNd//k4c1Y58UpQDZ0uzjvGY93k2UAFFz4hDNUbA70EGNhXCsuZ7TRUcfFp&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.townupdatenew.com/c?x=tHuufNjzxYbvXZiA5rT4mF9t/Fz07JO9F7BkElOrxcE=&c=D3jsOoHd9RdQJ4Hxx1N4Ah/Wc9BoIRsm7sfCWkIfyFPtbRUNd4niQig3sjnMg goLH4oO5oj2iN0hdGIs393fHuaCj8Zz7g6GA8n06VxnBZwwGjh1RhwpRgs8riJQO4M&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.conecptfuntowers.com/c?x=nek9hOsJVKeDmCq41HX4u7goec2Keuyrpbnnc7O/ruM=&c=Ychywoh7od93MfLf8F2u1HUVIfSOEu0m97SOCEC36B303ZGFfk7lYRx52ljd2irugYS6qZwkh0hXHcUZ561xxEOs3/CYKaw0xReyLhKxiZIJzvG278GevqOrOPQpiBXm&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.besttodayhosting.com/c?x=hUgNuewl1XNzv2UaKwxdKHl18 ZWMAjX5qH6cEzMlqg=&c=4tjGSKTHBQ1p GTiHmIInYQ/7pD Joy6NxQ ZLx8Jz0W6EpVulUo699NAIdJHQln2Fi/980HaymkRNvb9bLdppnSUJpgLqLTFqEoWK CCac3OY1Gwo h7NJCtTHnuxZKG1WCJombXjKB11H/DyjPHg==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.deliverypackagesend.com/c?x=uYvxht70hPB9AQkyGESUFEfYWaJXFwniES5Xcnfnhsw=&c=wwKV0 zVsRtPTzHtCt24Oy1 H5koNWPzxcz5WafVFNsBZkNEHjgEnxp1lCNZytt4n7uTPcQ/jV7hbM7P/t8AGg6uwmeQ9MLGEEfQeXZ47kzuw8OYtTqCtSrC1jFIMXQFGlejBbkEk5Uf/UokuS9rUA==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.contenttourgrab.com/c?x=zEJ9T8ZcpErA5A dJR/UeETtMq6c2pgQyhgaT7lL8GY=&c=ivSypAK7GWnsKJuOKcWk4VGmdsulZ zL/nUa1sngcCUsh iuqAznKcwPXIVXLXDY0Yj Yb/MVEIYdFkvx8PSMMcXWZxQy1op5MlBOm9ecWzg38vmiv83n9bg5pn U5HxJUxBiNz9I 4dzFEvVxBeNA==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.nowcapitalbits.com/c?x=bVQcskeWyHBYMmrHjrOf0ZaDCPofVxV14WEGymWT8lc=&c=yrVpkJ3Nm1VXlakxRnZCKWyDtb9NkB5XXvQRVao1Nf40NIAIylxiIHDjfeh1sx5uKSb7ZZo0NhFK/r5jM0A49eo4Conf5hcJknmeHtGOD6jQHb8n1vmAq KMiOq7vxENJzm2gLte5UOt1zKp9jENPg==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bestmegaapp.com/c?x=eSDNoSCjlE2b8yMSk/cVU6vHtemWgy3kwEwscK9IOwg=&c=08OYZYNeMZes1XKyuE9kGVHJO2nORvygXUxZ/n0WyqTIAJ5rV/mwTEL/z35i9Vfr4impVKQeZgShILUTAn86YKqU1vS6Q/ZCAnwRer qc07AM0em3W 1Ik04qrUDIZ1q&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundlesendshare.com/c?x=mFwzUPTbMdyJsSiN9WWqlGTb3HVEUWWzVcd88wD9/s4=&c=hfsHg0CNRHyGl 7mKtULMhis9kb7VnmzidzCCQ0PPqViKYsK S6ElzIZMNyAH3QCAC6U0PGUoa1Bj6taAceXSzT7PgMwVz1sOXQX2AOxYQfXUd3Rj/flkG4YN8VlYVO9eOhrfj/YgIAu/sbYDIrJZjEx0 hGtfiA5SZoRHN4Jv4=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bulkbestfarm.com/c?x=OGsoDyi0/UOw8Us33wjNum4X/tGJrJhVAnXw1ibZu M=&c=aSyrYp49j5YrJ2yZTimtd zG8YHikbdijbUYST0TSETjJQvXIErYrpvkynqnSON3EGeiDAYPJ6ljEpK5pI5GJcx5HFz3pPQh56wn8UuTjN/NwHbhqybzWfOWYxqIVpRk9z2yaNkcJI2wXdzltPt9A==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.filescentralhost.com/c?x=KdAfwx17Ry8n5Vb6BF1PVXp6Vs2jJLC2K5 US8hgRqM=&c=tE88KHB c9pHjojomFmUdXG3RlH5ApOr7fE kmuEkC53HeiUGGkbNFrHeeUEhBCfUPapJNn73Rp7L u95U4ef1efAa8aqCHuZtTWBtWe08KnP2A0k5Nq2ARGB tqoPIj&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.metafunclean.com/c?x=JxLleR0liT4JM4Lv OvoKdaBzuqtFI6YylOczpnCmHw=&c=Lz4TumDaTniaGMGnzKMZgTdckahUSPVhSOGXHjC0tLBDxE5 a4RvUpedPrAr5KlN0lxC4F2cj2Y54XIJXEQ9V7CsG/w n8B5XFHFuBSnRAYqqUeR758h/WWE6umUsJSR&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundlesendshare.com/c?x=JcmtB6Jwz2QQbnovoI4W/Wu27EfUi9Z/87n1t/lntEk=&c=H ysJeoUJa958RwZoMrmLhgS2G5Jmgk1xgjY55IhXNp1T3K1TeK2H0G2gtCIF22lXKl0CvPKlDT033UNPqzRmvNs2ndj6qylPD sJZXxmImbtPs9MY/WctX6d9xqga/b&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.nowsoftwarepresent.com/c?x=g HfozD9e0Laii26WKjzORFX9ewFYsmqTEYJlB0O5Jo=&c=uH64TQP5R3gQCctzcuiIXoeIpCBhTzQhy87XB8 RLBMNA5fwPdDiXllN2Zwq1kPghHcNKTL xX4JO9Zn3vt CvqlYd5RdvaVHdgq77XJor41s0/HU6AAhSpv9wv4pwvL&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.downloadshostpresent.com/c?x=YVZ8YPunqwRt 2SZq3x6/p9wm0Aeyhj/6b/xIMZGIRI=&c=uTW4nN1 vUOXbYDzE5Wr6tNbY4qLKhpfq/VQr9oL5/sIxSWl1tZ7Aq7qsA3CiSDbn8001LzgPysUEJ8I6tOYsNpKGPJkxooNQQZ6T/q j6cI7wFH2MDZ1jjgdrG8curkPJGESxAzDQsCCq7YUFGonA==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.laboratorycleanapps.com/c?x=Z9raNd3JuwiaRcZV/WIm47wAqhnZKCRv5mn8aa0ChRY=&c=ds9qI4C3/rm/ai QViUQOlULGC57y N1TZOdve4HugQBM3UPjMkz6pkokZMWs0M7zUlztWAuyuMNr0UwlMlL3Zr7UhZ5kU/YTT8y1p0PkmXtIbil8KotfOxnZmiMNDtL&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.conceptsbinariesnow.com/c?x=D QKEdChb35/xKKVXVpu3uMRDcKNGAp9 CMYif/Gczw=&c=DucQaMoLZHz/G601Ix19yt/0idgxcIPbA8z/SeHFDe5Qun5aG5b3YoaM/pnFKZ0a9tJ4fTvDpEtAhqpAzMgDVy1MBL7rFsz777MrzjLL2azXCkwpq042Rx5CnjoTydq0vj1Ias/yRW1o3A6 zsronwWpptQjnvI6s5dpLtYo//U=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1;

http://www.bundlesendshare.com/c?x=DWGcw Gol1CH9hdiDpE7EuSu13UsIjXy9VegeC9N06U=&c=ZeiUi5pbT4 J1SMm7D/efZwOII/Inte8g210rqrjs6r8tqpKwE1Lr2HR1tcgIb448hHzBCgQfkGXh3 Jr1hfL5 rK9v9VMHSttz6kiyDA9fHPwp2Bkhw/JYI52ekAyVY&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bytebulknew.com/c?x=DSY1Bg8g0TOiYVD7v8gghLzFVR8m5XRr2oH LN9QDNU=&c=Pjk12dguUFS5bYFba5SmY2kBIFlm9nKwCZHz5jT2ug8 lhNDTVSo3z3Ca2SInkCm8BS6UlYxjPzduPbjrrCJ6RQIrfEb/K20oiX/K s7MhVEh7wX Xf7lp/zFNRu CJFkE1zti7qnyE cbOfuGsag==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.hostsafeapplications.com/c?x=Dvt701p29W3Bv6eaiXbkV6kfg5edoTT0NoIa4Er8c9o=&c=UvchB15s5Ra79ndKQQS4g7dcghTpjGy/jJE6W NxbpjCWhTnHLjbM5BRbZfjLVx4I7rie8A9l8CBt435NCebJoQdld00FX2155ysDSQe70vaDbSYW9P2eKBGzKTZaodh&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.universedeliverysign.com/c?x=XGxu4qMSHbh1b/OJ2xcWqCv19OvKiZ 3HAtnty3Msfs=&c=t3Iq5RAn7bK9Bpw liJkr1NG5SaTjgsNm jPVft2Vevpp8l4PwAWc4XLgdpbRbZhfXZr22JetDxBWgqLK1eYfiZuovQR31KHl9KDYSvmkbE8cK 7aD46HxuzHL/AMO95&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.farmtowercenter.com/c?x=rGWTzGlqWIEEIcCH5faWDamgHsbZUv TLCCV7FLOKsk=&c=4c9nVERYc86E0j3DbHAVuOENivcLkeBHyo4HJ/PSHJpqr wWhdwNLrfHqIuXFYIHD2TepymlWFR0hmZ6nOpZFMzlcQP0XAnPGVNk5NEC4R0lfwIwzULstdUl7hriBYLbvK 2ItwNkA3EX4eF H6JsA==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.farmtowercenter.com/c?x=/ITqifS4Ou9zXiII6MGaNHECvR9 4W55t VWMVel VQ=&c=3lubsX9SL75T6/GK6/lR2aeZkKSAhRCRrNr4U82EoAAoHVbTKDu6AbqO9FCzMxhrwresr7qkPU7koLItbRJ3A cgIUT/B949x2R8kQUaZ0F8J/9ye7GiJZ7zZhMfPg84nXMy0eVuxQBJcraC6LxsFQ==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundlegifttour.com/c?x=Vw/I12ueF IFsJlKI9zqXsqg25LxLs0UaBjIeDZohcY=&c=AeNMwlWo 0M5KTIpqm6gsi57IxJ4qtwI2jhCFBFIXA8decPrCwIK420punwXfGtxfV/hRuakBeimt0H9IpVqo84JmfYUmzdge6Nf4sbRZByu88H2gNUxPsCJWorQsEtZUrjfHR4UXI94Yu3bwKa8Kw==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.appsbyteconecpt.com/c?x=2PlLz0TNfBw6 feMHb7c7R 2ciP4uwQSy053rwQGg/w=&c=VEXrRWJtBYNONS7jAuW9lT5qf4BkimV7vJQAnApWygF Iv0DC/kTA99qKoNLxono3dgFEKEE8Hk1FcUB9OV7i7Y7ZxeC5PmV5LdoHEWDT K086Yl jmiulFw51XtoQ8mVHl4gqPKFEUlZPiFqv5Zug==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

Latest 30 of 33 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.