home

poweriso6-x64.exe

PowerISO Setup

Power Software Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from cdn.powerisopubdelivery.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Setup

Version:
6.3.0.0

MD5:
2e78b332da314dffd7c687775eb4d1f3

SHA-1:
b800227245f7884466362d5be4d500101e9d72b5

SHA-256:
e65c065fc654fd4bc63cfe232fc99850ae9692f62f324780345a8d812d33e96a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/2/2024 9:31:05 AM UTC  (today)

File size:
3 MB (3,114,216 bytes)

Product version:
6.3.0.0

Copyright:
Copyright(c) 2004-2015

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\poweriso\upgrade\poweriso6-x64.exe

Digital Signature
Signed by:
Power Software Limited

Authority:
VeriSign, Inc.

Valid from:
3/26/2014 5:00:00 PM

Valid to:
6/25/2017 4:59:59 PM

Subject:
CN=Power Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
227EFDF22825BA270530FB09D52B32F8

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:FrIdJ7XAC9PXkzEZQXifU1VrEYeOpYUs5gUqJW90X+JNvO1Q2asJVd4YgPCAVurC:hslB5QXisviX5gdJ80X+JNvO9asJAPCa

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9945

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file poweriso6-x64.exe has been seen being distributed by the following 50 URLs.

http://cdn.powerisopubdelivery.com/c?x=M82tKZxE5Qhrdv8eBM4Oq5LgZY2VZSA2iHb3NsrY/1k=&c=qbaMiavxOcu4veAjWuuQXLTYkbxxUF2V5rhkN/PN6FTTPDA//gVvsfLL4mVQjV1dO6qe3L3Yilp4JL /nHJfsV6S9QWZlpvyr2lrNPfZJAihdjDAAUU1WoQrHqRYv4Bt&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=991c3S5DLFn3pQKFz4C0vpusOpD1zD09PeG4/Ur9VBM=&c=vjfKuDgIUpA6DbXHgklaOViHp8ExmypeToz0a/TrLgujzkl3gW8209LIUGlfSDkIBr96pYTfF3AhOEFVGvjs8a0 EhSne7tiaFWGcwDLO6fIR3C0afPbY4SsM2fBKnAx&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=J8qQxmTkq/ cUSf5Uy01C3E2kOUDwb3opLCcuA16XjY=&c=ELadvyPrOMK1ltqsBNIR7xlLXjVbiqsnoygR5NoIcNHpTY1sraU/5znSI1AC9awcv4UokvHEDfob/0vBE 62NgUQIqogrSiOoCL7OBCksA8nXhbxQDH7mNWoC62c83rM&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=G6F598c2GQ RL/VWTggg2Px6uqN2F mYg2 3ya66Goo=&c=eNK6R7Ehny1tmxT2a0uivZ9gKNXCqiENqYvF3 4ORJfjBltuy/8W6hQ356EWwXw66/5TRWBbh0MlRqNHzNAdx4RvSl33oq4SCcs6aujmNXZGTjsQLnPhjbM6yEeOFLfo&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=RPm3DeI y xXEhivrBuiD59udIe12V41yckvcEaWEfk=&c=rPA HH8qn2XMNyhSFVPXHG/I2RUxUXwRog97aedLCGLczGO0uF5y4hNel0cpdy04w60mKSteH93aGfHXMpi4GTkz bWhIHivEfwbcPr0JYJoODzEqdvune3AWcis3drc&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=hF9r5eMtAiwp/xlLuSWtuM2iB3dnUKyj5uTXcXvNKMA=&c=pF VrG4VM8BCame49VdDfxwZFiLR63zfDpHmQXN737O1jupiR wj/hZcJHlBo42JdeylAsS2GKhugsUM3B36aYuwD9VPx5sugFF08agz3B2qdRNJg3C prE j23kj TX&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=ZMqcVXTxzAsn3RwpA5aUNgO6LnGx0ZN38Q4nfxNQzWc=&c=6o9vI6broizoikbtoh/4K3p2llAzsKoOFC5VibwdFQHDG7nk80gkFA5zw6EIsc69uxck4Itu94R6U99AAkrsFbuCNAVWorkeZosaj4ZK8LquouYSP8HRESSWFR1QTXFn&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=qXAbJ3 /ICzb0bXozvk tVeTeTEHoiFjZjmDHdRb2s0=&c=P82ylIv1njclj2CNsm6bRJfENxj70m1jWTSZVZ8AfJg2Sa3Bt3Hnv8PnX/vhDGXJ cnMPt9UPRHrObH1E8U4deJ2XtiMiXKx12VL0eTb6nMUWlBodjE04TlSt/NTEaW9&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=DHzhwDX6vREaA81XxHmxY1RLB0rEMlcJ3Hmi9oUwv9c=&c=sG6PwLdWEMwNV16OUxBYwTbo9kXi5iYyNOSARymLtJYVdffROwvZqiuY4XjWlHW UhdolJzklCXWTI bBFNUXHBegnS8N9IWDBWtnhwf2QdMNVE6vmi9HOifhBdVKRwg&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://www.filepuma.com/file/1449950522c9259/poweriso_64bit_6.3/.../0/

https://doc-0o-10-docs.googleusercontent.com/docs/securesc/he3g738fm3fd819o4i4b9bk3o64m813o/3v8s2mlnaqh7pn83r4dpg46k00aojvvs/1472594400000/15224284897725670459/.../0B_ai0A1THuuDU0psR2VRcWtXcFU?e=download

http://cdn.powerisopubdelivery.com/c?x=ZOvT/GyDb/QbA8he1LprWIV4w6sYs8w Ma5VzKHk75o=&c=iDIeq/AjQ8/lsRheMZxfUWbo5i79pcbOh1hdolNw tiaHAPRQ6L/Gn2bfCqCkRx4CgVY9KQnnafUxlHNNWg I5riMqxoqiALLWimGmtCFwCeqHtb/oaLn7KP4/ywAUBK&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=t0slB0vYUkOUmKfSP/uIb43eQ/vE KS844yeNX fpHk=&c=ioQ1tvVOaTr65Q0iZ8erkj6cDf0u1RFUruoq8OA7eBEWoHnUslqR 4ske4Mn2AUswbs6hBGNDAW1sBHm/wYK99m5PzgHJRGFIo0pJzzhGn7ZETy/vrzhreUaDaeEnWoo&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=3MD/G6d11gK9UvIkcGuqcaR1DGYK 7EMK6o 8 V4rmQ=&c=Gjs8RftFqOFHuGP RYAd1y2gIEKyrvWCb3tLVFnCBbLaf2C1bkdnNuD UofW8EuNV8iQKe0uJPaJ/p 3Zrt4kDkNBjknBFqBy2 5ZdirxRLi5StkLRDy7gtPLlrwCmLm&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=J2yBMaojcUeyWgiC5XlgP4f7TFB6ld/oZfkZV4IBzrc=&c=5ZDrKkFbbgR6mDx8aKv9ku1vBgJlV/gCu9vppybPZDxDhqSb5/Spsxaq5FOFk1kDRnZ47ccgf6dspFMm2N YEUhwm0C8BJ8uojkpqMh5acOX1IYD 1xE4 bCAbqGV8oK&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=ODHRpO7BohhfCvAXnk6ZfrgJ1rzXR j g/a0QJscgPw=&c=Dm4mL5nt6Az6UKfB1eVT7avb4fq1hLCxetuGc0dLqcs96ZAxClynNE0FURBkSd0JwXMt6elaJk7dkGA2UnE6Gm5d6C4UiVGNw8UWO2oPdhVS1BNKXudoBjcOMoyTeSk8&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=ltgxEv5i2IxGat5P 8b2/7qFNnUDOtq2Yg b48ceD4U=&c=Oo UU3TaVrn13UcmF2Nb5AkXlne7kutm8HIQI ifBJMeKrBD36WvKuL LRjOzBZ2M/rb9CGAdhHEoabY0P SNRyIKkWqG2DqubLfi11E9pjNvBoaTXUaN3BAzXwBbqMT&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=FZxp2WAYnj20tvfqQr3eZxW25V0g5uI8ZyO8CCuyB38=&c=Gw/mUj/JeZB2JLQASAH ghOvrrxYTR6 qWOgNKSxk0LQyMqr23NDIBQAMdOv 3CqDOKDnJqdaohbE0to2r/X0JnA2Qs30UEPSbUSMaes1mbvJz2NnzsgKGVf9hkcYyW9&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=dVOTcYg9xjzugZqMT2UDgMrVXIshQh7tONbHfygaOiY=&c=bfEojjnopxiLJb/RaeSjJFoST1qGbh5LA8/51GNNhPZuMpmeF3NzGi2zuqpUyCrfFqrQDW4bJul4DhbhIOatAswDd21C0QpRwJFCHXvlO2sagtrC87GXO6aJAw7bfuLw&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=cQjxIyjtgC523Ymgs4Dg69Fkcu8fupn8GfD/CF3hM/Y=&c=739XOE6cyCjg1DSLWplcfUNZ/o9PiS2EebHPx/jYmmsHGRqYEzfCaejEOjLFMcFzMH4c7Kzfmm9jqyn7TmiwzlamooqOI3CMl6GzGLYsILXMWWH4PRn3diKbtO8pi61i&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=m7RoBB/e heQC2hwMn IhLqasOPSzqBS5YX/W4qjCMc=&c=taw7o2LCKKjvCmSg7M0UeE8Sv9yXwWOnvqFzu0kws7QMGEnudFOCXrwiQ1RYYVDn7Ls8FDx VbcAI0hYcoN8EP8piU6COkUkNPLOJuBH/Q5d53aZCQeVAxuhV0Onlriq&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=Z9PhUy1TZ dyu NXFDqT2qmockZRRZCGnLIHPzHJx2s=&c=wdzI3Njk3sf7o9v67TdfLgOv53S22A6GL23Ula70bxUWBlo9yLqPIW dCTAlTAi1r 5jTvosq aImheF4pLaiFn5o2LxrUUK3So163nEAPPie8//9OPyomX9/J2Nm1yM&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=BsGhNlMWzXHwij26UCmoWcPkwifzPu758uXvdFKgsYM=&c=MVLOajvP0Eo5rliLqGzfplSTvjbT9pdrcT2IukJKQJjGCeHas5WfOM54ZePcPDf1jZaJfHQkDfXhNZ4ifTLxPXlhbPKpQqyFhrXZIWTlVDOIBo4KWRmO6J1o83XExInR&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=rny3LrhFbBTvEh80H ja9Z4ybSIQfVLLYPCzw1x2yZA=&c=bHc1bV2nlyeggZF/0BfmaF1lZJfuGQ6aba j0djWuxhQLhcmUrGbaSyJahXNZkESKURiMmOCNUoMypnOb13Ay37HL6wBuz6zU8mmkSAiP42yelUmkq0xFSvuTmL5rqjQ&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=vjeOtIjFJkIkOUyGYNjM8gRb16cPi04l1yFn2kmXFlk=&c=whT7RA/obFPwli7FW22rH9RgpRwN3sHbWjplURRPQFkBGLzmuHIvhnnOzJSCge3S83lplNT bm4QBxDyMR4tFpp7NHmtg4ACCFgEsptTDqstPwttlYXby OJxDEIdemI&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=qRscPtdRH5gYLYPQplyQ TLMwR/e4JpS 68 tZJ1K9I=&c=23KB9ufYktDLybZlqjuLIXy7zkDoniiYtPolMC5owHTQJJyuYlrB5Oxl5rXqkKXiwFFVwNoejuaT4DzY2NhiZ53T4T9KxyR/HpSb 8GfwscnP/eS0UrQjO8tzfiNSJlN&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=jnyrRtW/1Tg0/KVT I0neo6ftUQbqjogA9nxIFm57xA=&c=SLrVm2oeQLnkwCXTM8QjqlDcMqhdPGPCFwDl0hWYYzt4PBvoG4fYUpt27lduliGHo/U7NrFpfU4m/cHCDbj7ED mEEfkneW7F8i/HDUBCrDNkCYYPMHRm4NZAl1py1j3&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=ej2I2 gyp/ILF CN0hCoFT93WAOps/ogEqEZSt4NsDI=&c=/09q/PEUGwcGDK0Tjfjb9EYFKrUwzI/9UguAhxAq09i4UVqV7cOed9pP7QLJAHjeOn0UUDsDiivYrGUrEGsfBki7kc ZaJ2FVgiw0hjm68SAnEDL1aglpD Egkq3Xxh3&fallback_url=http://.../&downloadAs=PowerISO6-x64.exe

http://dpcdn-s05.pl/.../PowerISO6-x64.exe

http://cdn.powerisopubdelivery.com/c?x=psrpl9kcb8revYkrlG8G7cy9qcrpQrraENjo575Ubv0=&c=d8t3KkBtj jXZQj j/LoT7pfFDtacvN11d/BdosbIJlE1hsMJ9LavJ khUYPAWTQPsCQsheYHFH5VaQEZVoy2k7M0VpZds63kYnDXZYS9ZM0pVAY89YS3GbyZfuEEbYR&downloadAs=PowerISO6-x64.exe&fallback_url=http://.../

Latest 30 of 59 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.