home

poweriso6-x64.exe

PowerISO Setup

Power Software Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.currenttodaysigns.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Setup

Version:
6.4.0.0

MD5:
ccbdca493f1134adddbb90d3676e9871

SHA-1:
b67798917c90ea1c7d87546f39c9bd00696a4afb

SHA-256:
906f01249cff7ec668dae9048ac7e17fc1788dcf0f355ebbb044393879775256

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/23/2024 6:10:15 AM UTC  (today)

File size:
3.2 MB (3,360,288 bytes)

Product version:
6.4.0.0

Copyright:
Copyright(c) 2004-2015

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\poweriso6-x64.exe

Digital Signature
Signed by:
Power Software Limited

Authority:
VeriSign, Inc.

Valid from:
3/27/2014 2:00:00 AM

Valid to:
6/26/2017 1:59:59 AM

Subject:
CN=Power Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
227EFDF22825BA270530FB09D52B32F8

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:+jZhGpxyPA8QS24nzd8BtPpbsm+sW+IN7:+jTgxy48QS2UzaHPGm+sWd7

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9951

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file poweriso6-x64.exe has been seen being distributed by the following 50 URLs.

http://www.currenttodaysigns.com/c?x=KOPbD/X5smnnRYjXd7oKk6wLMXJDklcsS6AK8B1gt3I=&c=TovXPykTtIayJXCj9YzrQ/tdplAJxd7EFYRXO81K7yQSnjQK6ibmROMLWhDj7x1GHfMDDxIOAssEvsD0bDTj51n6fsVWJQ4xke SEyl7our/E O1vHnLySwNTlW2ez5u7Jbt9I0Z1MA8WTPom7toJogFtqISSHgFlATKxcGxmNc=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundleapplicationspresent.com/c?x=srhpAmRLjwo45KPbifPAdTIk88eKjfhW5Xw01wFotts=&c=FbRL9pClrS/vMMBzYgUw82sZnp9cAV0USERqdkSQreqq71YT7/Of E5HkLJyei WCI6mvFv/oa2JAUp56ZdDknOPNxzYZ8qrbz ZLmdZ/Uu9QnJDzVAB2EkK3bR2UEyzeTjabpl0ZS9w4iJI/aF/GQ05A0p J8eUduRk8FlybaHKcftmeVBzyDVlAOf9ns4v&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://dlsw.baidu.com/sw-search-sp/soft/ed/.../PowerISO6_x64_6.4.0.0.1454572543.exe

http://www.deliverypackagesend.com/c?x=jZ020qQqen3ZeKTQG jTTCfRB8FJU7OARy13hPtPUGI=&c=oEKQQ3su22lTGK13L2XRp8QnSOus4711Vjy4vGiHeG9jiOzqUoq2TEMivv6JkOHWG/S9ak6BbcT/o CTeMidb7n48BGt rUA 6ePtKjtr P6yq34CyVgsoRx/N0yzzr9LtKviwr34dNnyB92ABQErwqNNefr/CAo0i3BAkcYpZo=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bestmegaapp.com/c?x=Ti/YY4E67vCq5hy6mZVk63agtymyUmltK7iAuIC/SWw=&c=fzR3AhVNEQ3PdA89CGl3eFsp7hNsEPbSEli5sWqpLSwWWq3fRqSF0kQv72uNGu7kLimCIgzR8eh1RFPa4KryBw/N7OtwadYTmgwXNZlHaaMG1/K3M0FGUYGQJZGO6hjb&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://dl.fileeagle.com/files/2015/.../PowerISO6-x64.exe

http://www.sharenewconecpt.com/c?x=JzlPyhrMgcE0kE0wlOTqkFn/ZUKqBnr4F4xKSZg uh8=&c=Nu2NMLARF5w/kvljkbHkEmBWj8brxTs9wvP9/tX5EdVwRsKng52A6ySQmFyweRoZu1A5mJfe6PO0OOmXvp58e1MCPT3J9rxnHTOSDEtF9O1Bu9DH FqJ9jKUQ6GUsWR/Rr0uUbaikSdP7PrZ5wGnM0GfFyhDQTWe2uSJF0Fd fE=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.conecptfuntowers.com/c?x=T/kLHpIazHsT1zJ4oYAhETK8XmqnwPtfUST3LVkMJ54=&c=Dcgb5edmMyJHWp7L7NKi4k/G 1TbylLEju2UMOb4IydHrqWfSZHQufEPoaXWULHk6LFXyR2Uh2huhNFSVq1KYE/caSP3tbo7JcoR2Q06BXsIpdxhU4lYHiLupDBhPR9lzqmAL4dqoocAfIvLWXx43Q==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.laboratorycleanapps.com/c?x=H6cUnHSP2GlRxwpmQ9dXw5 ZOEdd8rb9kVr2QSqzHP0=&c=Cfp/dfTJk6ZaHK1/pDR5ahrrGyEfWGT4oCw03JB5BryHH HMhvIfPrIVB2vzABiySQj8sndXigsloy4DPF6AimOnLTgR/KPgQ s6vHtcP98kHjh nilj4xjjziZKygvTO1bBj3QseeHN5KcIKLQ6NQriCqfztqeV5E6DhvB 0OU=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundleapplicationspresent.com/c?x=TaCVEQHVloR897WazdUkQ5i8J/2m7VFre/ 51xNeMgA=&c=c2BzufIJ4CS81YYJjIlOOQQYBJml1t0ZhrPv6ThcjpOcE4EOwJXIWVJGmd9gffFJCpI2mgXrkQHDukc/J5qyR7u1WxFBKO2Ev78WmE3JFMW5aL2X sQ cXiSvuVIQr8hYUYt2hNdvSbCYxH4/41FyaWZBTC/HXFP MpBjh0YUwn A/FfUYSHwAfw uqjMxsr&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://s212.kbagi.com/download?e=huqJW20wSTIvp3CN8QLcoQuyna-OWijDEBkpQto2Dp7vMeYzC_MyrS4jQHzQfSPOeIGyJltzbWjg6Qcsxu-PzTh6rurcL_arOmXBKX1bxi2D89o16oLlvCYNJn_u8xGI7kalWV49YqTFKhD87nrdi_xP21yh5VCNNQ06Wmfg7n6X6j1Q2t4yxg9YemXbHf-UGehWy7q00FqQeoJS51IaRQ

http://www.deliverypackagesend.com/c?x=H1UKDgGA1yL386h7UBr76JJivBGab70xLEHh2eqaoeU=&c=ekTc3NtfVcbTdwZBRVdj8yBHMVoU 8RNjaUjnKSQOmxvuofblzBY9rj7vBjktVdfaNB8uFA1tDsLrf2MjXvMqBoC6crz/218rJg9xi3zZR/XGSDaRfphk8KZsy3IwhSynxuTn/hFpe5w5I7N/3K5ZA==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

about:internet

http://www.bulkbestfarm.com/c?x=BjOJKbvv6rTzYt4XFnURCuLffc44Jmb2/zjAIopbY7s=&c=WVad5nAc1DMFut2ATENSfFclQHdAOEK04mzNewPR3Zky6lPAKtXvWIz0x2g9lUH7L9StycA443U/xqpxJxJzqC2ZmP6/Kx2MUy3hV6UvkBlPE73Ic5PIlBAWO9SCQSPoXL/MB50qKGqc4mpAnrfETw==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.sharenewconecpt.com/c?x=EpEL7UdlMYTkqOJxbIl55nBROJ4IJCEPfgwezMYseOk=&c=EstMCEDN3lHw6uHRMp5BhTUbMjunTIx3YwAovSyCoAwT4pzdKLvu5JOHc4HjYkq6tJZYMjXXoDjeRcF XWmJ4AniuaWfDCKkflMBbIspF8f0pSWvLQNPR/7hQLLCMcnRs4/ymTTbUfP6ogEer/LwdfolPxnFB9wIEDvn3/2vQgQ=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundleapplicationspresent.com/c?x=IV9Y3pWECtPehiG3ZEK YzHqwpfYuOiBXWDw0PNwWyw=&c=OqK/mIyBL9bc11CLs2PuBML9KJFxWMGHhMp8ZZplnG6Kqws8NLjoQGLbeLoRbB57 6n2B5BeDxPihJ1Zk42msoukCHxRJIva2FNbyzHYo WQemoe6EQ2HIz6jfFkggyk5UV5WRyLrimB5y09rulYJt1u87Axipz1yEilWKTQjeJ BMslTgQ7qxGm4dBkZu1k&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://download1793.mediafire.com/8y51huawv80g/.../poweriso-bit-64.exe

http://www.bytequicktowers.com/c?x=w69bAyD7j5tU 3f6d1qRLomSLvLj5jwQ61Akpa6Blbk=&c=ugrgMmwWwp1KYne2QZUOoq4QgESVHA1isVvtgGrG6EJBLMsb8zr8D/fFhU5zs3ivWq6RVtypGEO5LwBHm6KWghLML/6gMZCSn aYH2LuGdtzkfFzGeklwpfp5yu l8x4&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundlesendshare.com/c?x=DzTp8DVPZjCJgpBe1fPcGYlWMcgju3zVGoCQ5Mj58Os=&c=lQxPgJHsIrYIQMwTqT8dMjTnq78mUaxtJrFXsD9tQOHdZgeWTvMyOPJ2so/0zCe0Q18bzC1klwoQTKtjahdcK4n860UWJeZlQgRifVsSwdFc3/em5RKFE6DtnYxNNK8AbX4JqIM0HAJovVsRwGdmd5mLzWbfAJx7rznXLoUdiJE=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.laboratorycleanapps.com/c?x=Ih386S8KrI8R/4JXQ P1fR/MXJ1AP366TTbPrVw/70M=&c=NwU4XFtbVSfZqbG5rigmwvhxMjegTqGbtZop Q f7toqzAIDv/pP878iH9vN/q5gG2v2BZXzr2WlyesIzdW11tCg/uDS7fiINK26I4CsTs3haRUwQRNeSOAQH aX89G9cmzZroAx3UAxZtd0G77a3i8QIpH1y/8TuqOsZkXWCN1J8STjpkxC3YlQD3uHch2G&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.hostsafeapplications.com/c?x=7HEJqAlf7KO9UIkTWMLKlV5TJ/mlt4zZnVDSLvPP Zk=&c=mKRThSK3hkuhOe71S5NYTRFQ94t3n800nSk6eArjCMTrSlqtvFPGXYq1TrfSGj24UbN40YQwGdHHalOVEO4fqieyb5nRL5mfS4F4D5cgyeumzjgrZxUTJ7HwQyY8pd8hu18BJihBOQ/uSxqc8A3dTA==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.vaultmetasign.com/c?x=UD4m9OPSUZOeSs8EcRG25H HYWS1iZGs1XslhkPsxUw=&c=UlevzIpADsSXDhEUd8DHDSR1drQSp9dWLJzp2rVkbYqeIlJ1N3g zjFLRWfT7O0Q/PhOdOS6D39ODlQyU1pjqdJakFZwqmzM/b6xtMfcyFXYppKkIkzRP9OyZxMhCmo7ZBKNKWhronY7EQ8sOy/Ezw==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bulkbestfarm.com/c?x=GzjC8O3dJAJZhD16VxSyamm1hskK2C5kKx32qQSaVVQ=&c=aqZU016IRzM6JjUOpEiIWhsBgwQHvZONbUnBXVKp0dzcATtAnf4Zp3UgVYcgflVsgFyDwvR8qZ/2lCwyG9e1meG5MoLB3fdovdITR8Ew6tdshURB/Fib8TBNjVLkE0QU31QiNVmll2QAfiRLPhtM6g==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.bundleapplicationspresent.com/c?x=vpYhlU DkogSWJH9Qqp3WZY9azbD4oXy9lL Xr1pljA=&c=dT8YBHZGOnb2v lVRZ9PHU5gJvUY/Gawa6Y6M17371DGaeiMDLx1XwdMQmV101NS1Dv3SFOO63bpos1/J9gjWkX7LO3u/5pj4mEdsm5FQUP2r2ySkRD1qTVG4/p8gx/R/Vl6 OCVh7cz5Q/9CsCfFWHjR TAO8Sy9FgZF4w YSphuq5gwOSVt4grWFGqeVVM&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.vaultheadsend.com/c?x=gUPin7KNpvPtdx8pu4nC 5/Dz3XmkJnm7jGtZtoGig8=&c=AffkV0aHI86vrK5xNqeTenGQMduwCjL3WWvt/FF4xhWFi1xbCnM7J YfYjO40xd76eXak2x3APUhK3a7U5n2h0DnLuB05mFyvXOcPspBIZ3rlxNIXoXY8Jtcuk2EIxDOJSN /7rG70/rFPerwlpGLw==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

https://doc-0o-2g-docs.googleusercontent.com/docs/securesc/ut24a56u7682nr2asi8r9ipg6erbi1ot/4m55dc99fgp1qjhc1oc4a453gvhosotm/1467151200000/.../13499601957017353331/0B86cd__smR_FeFI2MDRqNmlCejQ?e=download

http://www.bulkbestfarm.com/c?x=UpSZDsx09GpFxoOgOnqyObs9m1f0svEDkWRgf1id8iI=&c=crUNbVIP3QDBK/wpIaIiDW5iqCurqKnf6aGsYFuh/oQ/5nVWtwuIi3WVCcgZ68U3CWHgiQslwzOfKcqQDgUnhwpjZU9IYzVFN7gyfQicuO6ZXQ7zMetYDnDHrbSoXjJeOrPvpPCJEwsuKHTRVSWQVuBfSrp1srQK0IWnn7k80nk=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.deliverypackagesend.com/c?x=A6ASJffzOnjVqKI6jImzJbOoH2lqXPdb6uMmyIV3NOE=&c=TLg5VFIGTr8mGf027TnItmYI6srh/epqc6LGy3X1UkobzPOlkjho/2pgYt7D33MNrliDNQ7/4hjNg2n2Nj2TKIakIEPhBxPrAz4YKyDgcwcNJsCakG5TlD/uwk PQrA9UV6flpvgngv2z7uu80CORiGgD4yzbJhdpBxnD6GutLY=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.laboratoryheadcenter.com/c?x=3onFt6dDQ4G3fm4SDZfPXTcQgPBJA8hCOWcfSQZmqsI=&c=z8L3w9w0DfBP14bysj2ubrpT80kdIPzzyvk7PXTpEmxglOeU8uxBbALpPBpo7xoEa8z/rFCfFCKzHnG7CcYLsa6gM0KYyAm9X/TOzuMODlA1pFa/eQ6IkLAbtxlqWeuoGRZrOL43tvLiYW76LUlSpg==&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

http://www.currenttodaysigns.com/c?x=Bqb5cXGYXXo1Cf5WS9jS3WFciTzInW5CSdv6qnLuo8E=&c=8D1menkM0V5BSSxYO25CWOMu3zepaz7xT2 WfWHuUFcBifQdrx6tCumx/1HfxYFcCXV1NbBEqJcy2llGwBnOYZvC/hBQAFC8Zo1DsjbBaEBbxRXX7ynOr8HwShuDD5e8gMgOTNf D2/9HzzAOiAXB70sd3juDxRl L5oKhZw2R0=&downloadAs=PowerISO6-x64.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-76116067.html?hasJs=n&hlndr=1

Latest 30 of 133 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.