home

poweriso6.exe

PowerISO Setup

Power Software Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from cdn.powerisopubdelivery.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Setup

Version:
6.3.0.0

MD5:
cf6bdf295966d82cecf248f471e9c82e

SHA-1:
8abdcfffbf1df74ae911a2dae8d0c199f2cd6c05

SHA-256:
7b3810d42e2de5420e9f577231314d25abbbe30c1f790fe61c3dbd7eeffbfec5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/23/2024 1:36:45 AM UTC  (today)

File size:
3.1 MB (3,205,784 bytes)

Product version:
6.3.0.0

Copyright:
Copyright(c) 2004-2015

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\poweriso6.exe

Digital Signature
Signed by:
Power Software Limited

Authority:
VeriSign, Inc.

Valid from:
3/26/2014 5:00:00 PM

Valid to:
6/25/2017 4:59:59 PM

Subject:
CN=Power Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
227EFDF22825BA270530FB09D52B32F8

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:nF8oZaiwELLbZ4xHcyCoTWjRwwnUs5OjXmOyj:nF8oZXVd34ToUV2n

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9948

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file poweriso6.exe has been seen being distributed by the following 27 URLs.

http://cdn.powerisopubdelivery.com/c?x=vEPcmjaRNjENyUaIVv 3tgXAzq5lIxQZYJ91I3j5VnA=&c=0ouZzqccebNbB/imMISvteadJVvql1FFYa1ZL7ZWSPM J3LikeXj pnFHsT3BalMvKxN8cbbPbNTqYvanXHIWt5jLXkMnfDXYDD4RWIoFtBCYB2IwztB1vYUcnMbMDkk&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=qeK1gGiaac4MFDQttNvrvfhUmCap15YTwLT9Yw3HyX8=&c=KF320xMq LbLO26Na76 e E5Lt9rq2OuvfNGcq6v2saiGlqi JpOLQWaqTj6lAVgg ca/4FXaIEy6SdUXOqOEMdS8tWqWw4KLk80tVzKOgECmwlbgX R5VmFuBzPcYcv&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=HmQn1wWMpuMdNYfRR8zcFkqbw3FnpFQqfCuYaYbZWOc=&c=Zbn0CHuUJ5T BdwILVLJVfbgivxNQE3WnNkdPEYPlKj/PFbztwPfsJmQTqh68iUjHQpOJmOC90wgjIt9hbHcXV kEI/6LHF5kdtMPDRUFZA69c ElGdGaf9F5IPYTxN3&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=7mkH4SAGVUzAuojGC RJmqQcg1OI9Oyftfnig4VjEqk=&c=442TPWg5Uy rDuAcZDp4ZjfA8fSjnGacJkIvYG46ANM9wI3NWTlelJ0C4ZIWoFes9o7C/lfQEakvDh3Z IkiEeIwrwgSdiZofCgzl s8daK1ghWIaWvafHbmpmTL6hF9&fallback_url=http://.../&downloadAs=PowerISO6.exe

https://doc-0s-10-docs.googleusercontent.com/docs/securesc/he3g738fm3fd819o4i4b9bk3o64m813o/9baukc8d2ck9sfqqogti5kbhn7dovqpl/1472594400000/15224284897725670459/.../0B_ai0A1THuuDX3RpdWFoRXlweFk?e=download

http://cdn.powerisopubdelivery.com/c?x=5AWZukkVbYA5kzg9jKiWcFcbHf6hLTjFB6EIIkSMBQA=&c=BffroYFFN LaZEDYxYCuciQ6oah RMOIZ9RUY9SW2lA8WfT6Log3TLW7czq96THytihzyqStu7IGVKKhqPAjS0o48IhDlpWpaAt4hBlChJX3G NV72ZyhkjWBSiBUFRB&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=Z0FZuVPQGJWn4YwzvlnjqtCbHOCwmJYcJubczDchVYI=&c=ey9w0HiIUJ2VNV/QxxNzVpDyTb4JyOnuQTVewVvaN YwGhzPRlbZE7qBeJu6KFlLQzQIJF2xYp4CQIsUkZxZnpD9bR5puScGdTpzh4SSIer8Dh9KdGvFLkqe9uuTbICW&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=6kSFCdyYL5ZmhDZLvA v32cDVYJ WKKvDLxP59Yo9vg=&c=7MqkgoIzBamZvvM95v0R2moJ5q0gScrVJtsKL09IJB h7SSHWZ hP/s MXEuWzikW/gWIPX96B2oZba9JnpeJZ5 1PnHZMptcwQ1Asw64h4AFXsNZwV1M03T5YuCvUuy&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=4yi9TQBepJ0WipbYjOi8x3Y3CXATADuE3XxJSyWtuvs=&c=HD2qfzkuGpxAMXDHA9WPxnHGyZUVC3r188ZW1XRAmRbYZpKdo5Ndd8gPnaB DtxMUgbYg40c6ju9kFr/9b4Djs7ENCAIhXhHHFK6YsRdfh9/DGf4XOyjFe3Mf90riWkY&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=EZoZ/oaUVL 6Qqa8RuvJDweADnA9xDbVRHoa4s4Z GI=&c=P00zIOo/brklMKAtclFNPhNMymUs0NG9srJAd9enexmlBY8Xrk0chFGUZ71Uf20RF3o6qwhuBM6SSqKPenaaM4TfjHHDPCM7PieCwvZ9g2bogRwsEhEnrhP/puCRQ1yy&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=/6YoBHsnRhRUNdGp1sMAGgSKDTg3CfqgEt5qHOVWIh8=&c=YDTs1ulhjij WiKrzmxikstbullOG6sD7xddgRPKHXE6zr9DlULyyDvaOJBzfXMBvmiIwIqIqyrh70xvUcIgj52X d2tiXdrjYU7yoHCXpQvQJ/nCzgBCUruKofLXigq&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=MdSuidLhJbRD0LCHOJwESisRmuxeikUqgEOVeNTtw38=&c=1Sp0oim8EK6GbWUSXDlmJ2Qii4uUAa9Pi526 QygDMxnLRXtJKLxDdiUuep3cEf5I6pON2VJ9qShF8VyVXRAzaRl5XyG9TYwXH6btlhw05MEavpJiwxN/Xm1WardzjBj&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=aNRRoxfL ODJjgTbH 5T8G9TNURQv8GW/HWZgfdxOVM=&c=zqJ1ITSjWvZ1FDNkimryg4JW4Z69bcI6 LRrBwl1dcsH4sdFNnpTxMRdzUk3AK0AKYozeIopmOfnU7Cj1/iVJ5Iq5g/KSLMeByMDCsz6 dd RHW028PikzvWLMwjOgHe&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=Bo6OQEt3mem9VKu0VNqfKMn3ncVfcqQGpPo/iWue4OQ=&c=E7YggUatdmexaf ngS4TP1WsXbtTiexD4MiUP0YqRDIspN3QraxjL5FuYfA7YYKi/0zv3yclnttBRGlYmv2eiEbytl29oGFLc9/INF hwJjdWS/RjfSOizSqmCMA6KzF&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=Kg6fzELAm6RUhVyQ5 eYEoO5w8IseDvXJCVZOJnY70=&c=CXuV/R2i3DQhAxECUKbyhER7JGGSOT7ssHr10Ywhz77ZDC1f3JENCfeYngDd9Hbd2F4lUNotMKCEAXoRUhvnuC/n6RRIBJjK98WcOmtgi1Z1/VkisNbJ15A2ggVZs/6W&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=qJQO3Ls4zA4Stv6TQKKcFbsXUyZ8b2TYEasqgEnK7cA=&c=EsZnLKR7AUb1OCDHLssKkVMx4oR7rzBNfcXxCAQXcrRMJUm/hhuT69SIiNNzl2g5HrvyTry9ulU3njCNctncK534bUoV3VCNehZENQdjpL6ktcAjI5fjqQhF/WS8UywB&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://dpcdn-s02.pl/.../PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=J7VCqxWB48 CGuNN3pbqlUEq 8DED4z1BobTepOMA48=&c=HxqWYRt0e9dUJ0AnXQ5huSW9yNiOAlsJY/o0gG7tvruD7IbkqBshaht4PDwGI70GlgGQnqxmp8pdoU1GJ fI06PyEc6KY DyXmgxRXy/TXca Ni2PsaHfiRA4qenx/3s&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=bGOtw1B79QA/3lQ1pHcIbiEi0Xrx3Z85CxCUbs3X7Rw=&c=KzIUj2M21SNv/e0ALwmb8VVB3JPvR5B7YYq5oGd BrjsbVSXYP3KBfLRjESKP/TXFZwmEJB4YhMoltv8VdOQjNyS4IKAuer/O kKMaouUS0rYZQx635Cob jEB4iWvvk&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=T47FYv9 eS/ay5vFIv3Mj3wJtUmnjkRa56PnoAsWcis=&c=KtrJNsQJy4KAqg3b089E7CSK33lrcr7Asg1LNhSIX9eVKcnRbJGd1kVfhgMqf1cv31DcxK34Vg2s15gcAZgQod0c/b7ROs9pyqAOUxQTtA4jSxHMm rwMj8KDTKfygfc&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=PuOmYlugKXLfWNdPtOEl3SKWC/6i5aPuk9i/fazI250=&c=7x GEyxMQJFk2cRYpeZ8FoGmNpdE7EbznYjMHv8CUuRV3i6bzm6bcS8BwcIVPptSF6zMXEryH5K1hXK3HKwYWr0Q4UB8agIJD/9SHzXEsqxICYBDsVZKR9sk9LAnGTE&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=/l6XeHyJEFI7Kgl/u1XmPsSeojS6x3G/bJR3xPettDI=&c=R8exfqTpkRC43Vme15NtiZn7a7GjkBZo tAT36Tk9pCXNWouN5gXp90ufv4mWFUFg6oiQpQouEU0jHNpwwVPbGmMc3q7e0dJ1t/Mc5Dwwx3OwTCDwmdKKQaMJblQVbQSCDWNnUJPqv1cB9gZcTPtUw==&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://dpcdn-s05.pl/.../PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=U3GEOrwlQcnrzQD83bRZdBnr866MoLZp154ik3WM82E=&c=KEm2hpXHdTKKDkbh2Y y81W/9nkEXAUeHJSS39xs1NbLpMV12JReM/SYFKDfgCLS1kg6XQnSKZcL7GXwMqN3eSmHundxP3wlnSkTQ9bQh6UWh1hPWxmogRoZJooByuCv&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=pPP41fkfdBB4eGM2eTwhNxbCGFv1Ybt jYfNwC0 Iac=&c=tAI/QbApWISp 2Mv/jH0nc6ddITaa2g6Wlsmqgfp7VSBHKmiVHl4AVCtPP4EVF2CDuqS1u0h ZA/cmu718jfr0dXzJF/T1G6kBL8h8UUajE0XF 6br4ZRyDbt8cZDiwT&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=gtcxkqQG70/pC3Ota 4WxoY2NH4BqAZqWn1wiolvjf4=&c=XfIZ67d6g9DdsuJq6s6gsOnuaCsQH3grSexH5bEqR1UkJuBNnGXSOXuQyWup3gtQttzwwtyfTpRbWv0cb1MfANcIpml4uNFR1pEQhhcLBoGVwFx4mQIcA2uDfRmJVC8c&fallback_url=http://.../&downloadAs=PowerISO6.exe

http://cdn.powerisopubdelivery.com/c?x=b/Fm31 qB0KK3pKa8V1Y99eLSoLLM78h6whoFzKpcTM=&c=TuS/t8pbaApPpimNaSNk0WrLskpoaBZAfeA/kjV3xM9iTPEpk1X5WVJ6BRoZ2HOH1IoNUpNw8JmZw9a3nG8yclJbY5WPcZGmmSPPp/RZyqVohGQTQ62csz54DxsGktNI&fallback_url=http://.../&downloadAs=PowerISO6.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.