home

poweriso6.exe

PowerISO Setup

Power Software Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.hostingcenterranch.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Setup

Version:
6.5.0.0

MD5:
1b6412b50120cdb63eaaf96c7d18c050

SHA-1:
b775b4ad9d3b1ff6422deb688f27a3339217decb

SHA-256:
3e59852fb5681eeeabcba0dfdef3db3d76e40f8475e4413d6b86f29202310e3e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/23/2024 2:18:44 PM UTC  (today)

File size:
3.5 MB (3,640,648 bytes)

Product version:
6.5.0.0

Copyright:
Copyright(c) 2004-2016

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\poweriso6.exe

Digital Signature
Signed by:
Power Software Limited

Authority:
VeriSign, Inc.

Valid from:
3/27/2014 7:00:00 AM

Valid to:
6/26/2017 6:59:59 AM

Subject:
CN=Power Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
227EFDF22825BA270530FB09D52B32F8

File PE Metadata
Compilation timestamp:
4/2/2016 10:20:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:CbvezRNMjUPD7/nWhdDmWm/Ihofkad00+2T:CKmjUbLAdDmWm/IEG0+2T

Entry address:
0x326C

Entry point:
81, EC, 84, 01, 00, 00, 53, 55, 56, 57, 33, DB, 68, 01, 80, 00, 00, 89, 5C, 24, 20, C7, 44, 24, 14, 30, 91, 40, 00, 89, 5C, 24, 1C, C6, 44, 24, 18, 20, FF, 15, B4, 70, 40, 00, FF, 15, B0, 70, 40, 00, 66, 3D, 06, 00, 74, 11, 53, E8, 07, 2E, 00, 00, 3B, C3, 74, 07, 68, 00, 0C, 00, 00, FF, D0, BE, 80, 72, 40, 00, 56, E8, 83, 2D, 00, 00, 56, FF, 15, AC, 70, 40, 00, 8D, 74, 06, 01, 38, 1E, 75, EB, 6A, 0D, E8, DB, 2D, 00, 00, 6A, 0B, E8, D4, 2D, 00, 00, A3, 64, 3F, 42, 00, FF, 15, 38, 70, 40, 00, 53, FF, 15, 6C...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file poweriso6.exe has been seen being distributed by the following 50 URLs.

http://www.hostingcenterranch.com/c?x=pr8g6yhY7clqRS7kW9gWBUnJJwtHZ/TLCu2d0mcPBIo=&c=XfPla h Y97dDFRk1hj9JPhR1stb0IIawEy6uGhb6k8lBzqHmz8z7DKDttLi1OznemnW9Z7sxTqf Sa3ujeTrwNLpFu5LEM1SNfGB1CK4Tv2s9E6UsJ5a7Fe0ePBIOG2Klwzl7 4yJ9lkBjT0r85fL9h3nrCfb33RA2SMoTHMk=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.capitalcleansafe.com/c?x=01MDZIKGLjCjK8U/rtHJpeBjOwIMCJ6YsConm2Yurwg=&c=78 Ke62K7F 6W A2wR0jNRP5V0hFPP4x8LN3ajr/hgyuStcuy Z8gzBmmL3c6aUJ7KSsZEKQT53IzsKZXuEL0tib7LZRPx1Y8ymtKkI4CC8JeOP9vHwxjJ6088KWPzx1L6a/7T9Tb5 GOICSXxSihI5cLCSfOyZCNuEnnfRRJAw=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.todaycyclebyte.com/c?x=EvvKw GBUQOjvgkwN6mXhXZOAboHMCyjZF0vOLne50c=&c=qPD GPfQIIYhVxg/hqr7Z2ujrOBk0TsSHeSjzPLr50Tmn8xrV79lkrFmu3iqY9jxj4vAWZEdfTdJvJhGu9cOBAeaYlT/tv/eCVGt5qSpdganM2BJa7GbfXX5ZmnMO9vD&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.vaultscontentsigns.com/c?x=xvu80j3Zxjj/4zEWhSoDZtP666U1J5nNwBsAVHMavMU=&c=cNdfcCkPNQCMT 1i3fsOl2Iocy950uI/4T4PDvjnuZMlMnGk3nc7W lylGr Ed1GhzqefHTqYusHlgSRG0n4IK1l6ftaU/Im nOloxM2V9n9xbQ2XtjAvboPe/7jGJgOiFeGl92zZq8drpdm ztxya c WlaTjvXcmuql8PMuwM=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.ranchtowersfactory.com/c?x=Yv3Ns01v7MU OS3cav/Jz6ULT/ilKaVGJA3VN5f5D7Q=&c=TzDC4liuGpxSLx4NC6SrYltNX8oPRTuCbNV1SwNnBXwNTInYMS6TvtbQzLdTeVkfk9Bx6HfkA7utOrMhvXr0ZYlSb8sxCWeOxTVvsw1lsiRAUK017Lrw4/5yDDj6u/R0q4oqHlm9mrJwcKsbb6bnWJCeUNFN0wuvto3xsSIn6cA=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.vaultscontentsigns.com/c?x=wlI7cdc4p22pCN3Soaffr/PKLtadKMOLR zpr1DWypI=&c=szpXTZwaj1uDST29HBRWl0nJVsOc 1QYX47Xcq0aViTGN3IGkph9rptixIe6g7we4TKJo1HRVl4IstPALkoJuECDznMBIhxDRwNr8xlx6WOgl5CjuwKe csYVd5IFaAkkqdN94W9eaYL9mVCFeO 9w==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.softwaresendbundle.com/c?x=VUE/xt 6FlJDN95AOpYYmz3tpILcIJsuw8PdF3wdPME=&c=k8IX8tvqOVlUS5JvH6kTgu7DYPs1ExEUiwXwrlGOuVm/ABpYIPyCSFk5s4bRLxpJcThzTc52VDt6ELYlidP94D zwbp0rl J/n89uuuGIh1r/b3QNgAj/C0XePpG79AKrJuwwsTF4R3ESwmdusnitg==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.downloadvaultfarm.com/c?x=jMGs0dpyGmY0Es09rwwxSdfofd40mhfURB GynY7Fs=&c=vvGPtVor/qQAFKBWSsO1YwGarRG/Dx6EzRHLWdnQRlq2tPYZYr/Y 0k OlNRN9cF9JLatmfhMuK6xHveIn380HOBND8L2GipoB3YPau0cym8o EMZOm5MfCPBgBm5UB3cpGZdIWKyUJLPBB 3CKrsg==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.centraltowershare.com/c?x=fbjDxLhzEtt ibcqgCBcFDiHckw8vblPjbNPq6xXp70=&c=O2DupKGbdv2wy n6YAa0Y4eu7RsH8lmaVsr1uYwY4Srn7Vt8bILcca9iHzmrPkA7UXKE1wHVrGDnvwJv7K8Iu65tIIcUhqIZ8FaNR9fDSZ7TOmT9mVqnfJUQaxAeteHKT9ZAJCt5vO9kswM4yMNabQqfaagxazdEV7Py 9OkaKM=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.flashpresenttours.com/c?x=dyjk4AK5pgweE/t/KGoP3Vl9GCHBBHIMdPIDPHfx5Ts=&c=If3MB0qHnmw7vRdxzHh6dyXGYQpgUj1ZWUwByamdYWiZc 05MhrYzCPqc1FZN/eoXiEWdMQUMnuvREhqUszr/SNHp2piiGQp5J/EuYhHUY5RkH4id1kX5hE9ND34gp6pgod0wdNB4d8iWoxEmV/IV0GO/ayqIrb6uLuRoHRLro4=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentgiftbest.com/c?x=nqR/Y eMM4NEU9Fk6Q2q8Sb8ahzI8bmEHqXw18ttE6Q=&c=fMSPE9phP4iiBpENAH2mIB2GFCmlcxqF4Eq83U8K UVmBpbWbqT2wiJUL icqyYKP1LheJAz6lFh/6ZWBNuDt08cuNq9Rh U3CsLpzdh1spMijsIwJbaYwVTSaQZR9AJ0W17KOa9rQG7SX63rA5YTPppAR48NFjO MtNw82I18Y=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.contenttoursoftware.com/c?x=mmJCAPR/C8Y/4/X5OTVN6qKdc6T/vF/dVtsddkdVV1M=&c=et3vK06AhgTrMHECLIZVhnqZulrES VlPXh 8L27zLmaqcgefqpq1SraZw/3J3a8RKRx0B7mNaYMlHc dbB dq0z2YZ9LomyZaLNoaZd0 meeTmkdDJMjWTEkJd9bYBZh9fKkBf02OndjreENcG2AQ62KzkqSTVmpY9NI7wY21g=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.tournowmeta.com/c?x=T6ZqE N3SvGPNnA0LkZFft/tk5ehwF37PAaUW3u9RTk=&c=Al2nkjr/1XelETvA2aiQL4iM6n2rOCDt/JALesqnBlb2gC7Kl2TAY25Pw4D4rWydSwOXldGiQqMYYLX/7/H/3VtV02OWomDNmyeepT6d26j1Uvrv0h7sGqp4oXwukw3Ch8AfH0u BsxHmrAQwj387w==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.safecleansend.com/c?x=h/wn/ifsnRWhPp3SUfBMfgvSGP/Sb5NNMCRmSulsBRs=&c=jYtIZkkUu12BkpGoTIQ2jy2mtCTYBXVcXO 20yWqMbmqcpqENrVec8lE4Cuaqa43f4iz vA/p8tcdxOMQ4396qP2n7kUtHsIx1OYpVJ/u175JRUz2CQWkj6PDJiugQkW8hGVGdmTvmOddNyiA9vhMadg3QqN/Yn5jeIVEhBazi8=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.cleanapplicationscycle.com/c?x=GhjYR/EksM4fj zl8paoQIz22yV0NLxipzgh2ai2FNI=&c=DdCzh4PouETym3cjFyfxi28rbRFBlpUkD5LJL97TIe qu99nwEsBl0Jv4WJ3ZNBPObLkYF8UxS2y7 9p3TKQ 0fiAUzlxyTJvuKvNcfCIY3DbTyEILdw9xJo4Kf2L9iU7JC1JUknVqpsdvRDNx8Z6U D2Ky1GN1nq0Keb4OtBQg=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.nowconecptheart.com/c?x=SW5wD6aZIbRiNu1ZlmGsCJ7LEN18mNp7D2ad1uVksB0=&c=pFltR13Rv5mY/rlfS1JHqlePiggzIhGjc4bR22vq827Qf2GjNzN hBed9cA7K7i6u3Wd GanUyQDRvVfi1AbSBcNx7zV6BqTXBKoM0uoN9KBWtHqkX4ZacYctu3Pi8FpvvBPHPKa1ZvR7EWr293oczDL5IKmz5qCxecL8LPSZA8=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentgrabflash.com/c?x=7phGFLY56eIagm 6t0mcZ/ tKeYX9Tv9xHLSOsmhpXQ=&c=EsLdSDGJGbnQMM7ezUC3pSdY/iZQjHoWoF9SAUSHoV5ZuhzS143c1lBOYtjZSEjeMyxfgVDZGZtE3u0kmSWqFg0 bd0wgvQLxDSrWcFTOdsvvHOW6/g86XpO5tLT9cRVMzyxfgrCxsDx7hCoWEBbCzs wnPRsXHaJVEqJDzTPco=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.vaultscontentdelivery.com/c?x=lDgrcmRIFvfcvigblWDEAgU8/E/BXdkFM3efQ3fjHZg=&c=JEcZkAOc lUE7t3YLeoJBEzhpSO/J4b9r1dOjCDf8yYfkqM62jVhrI7JxzQ1Kkh9GBjwHXcLzrgjILZ6kgD6E9pE/mO3UYfxQ3IjWXS6sUiGdM5aVa5KqGoNQ8eGu5pTd8NG VCWljJ6nTr9bxMzMnzHEiSZvo4mr394WmZBii4=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.centraltowershare.com/c?x=4Xu8ajTXwatyAIjsHMbfbD86cOzbXI8qMZqiH9mfk0Q=&c=TzLFgDQMRVTOxCD7QszAJ/XdrbWJIJg oDu/q78xpX/D0MeJ7oRlz58PkGaI4/q agn/nv93 O4DrHYW9eenuS gDVrRomgWYvAiX/rp6bFMTfruCAyy2MNH39YFO6zk7TH016e2cjZkLyfNrOSIWA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentgrabflash.com/c?x=kcpcoJbsdHV4fKHBBFt/7/HGBd06NQG5ST/k5vbzBzs=&c=TGF0bM US C3GZDyRqKoSDXuDDDpekH91ehOin45HVUoAq0WwyORpyMoJzkDS V44Q69cOFNv3KTS4Z1WFcK6mHqAeXyydAN0dQ0518DGxwI3762TgxjIj9ico3IdgEGvYmEqFSM09SIZlR9dJJGrj6uUrNilnVwyfxvKEbzY7Q=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.binariescenterpackage.com/c?x=S9Q7BBxcBq2rI0Xs1xJ7PQwcJd8y67zgG2ZR3jCHBis=&c=3i5yJ6Vx 0ASLnQ0N7bSF2zwuDHYzz538GqcmihVOwPKQMu/QJQ/ljS1BQ DgtVzG69j6HAZy7VlnY8zu6ZHs0Rw2Ei56j4YQeEH3o8nhiWSrKJHlPnNfbx7y08MJZdYkH8FzN2j7SLPijdW660kvfUbjLCDytxgcysb2FFJr/E=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.safecleansend.com/c?x=ma1xk4FSuyeaK0MMt1EImNPphu7krJzjrNKGSiHUiDo=&c=jvPszruG59X9YmN6Doq6UOUkTh2x5WauUpkH3gPoQ4ObR/o19GfHCfrzFAlXc0VhGdZh5ZUtSartvJjJf/tmB3ZfQyNrNPsz3wvIPuSwsKohyNAKv057ErSpUeHD3QhI7/o8xcmjsXKk 1GtT3iCxS6l/l7Q1R7MhJDl6sIFavk=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentgrabflash.com/c?x=OgHkxpS8nepXao7CP OK11N/jKR7vVHFV1TPqYVMxtE=&c=2 1nRrlfuS0IuwAVGzUS6UWACQaFH2gQYKj/oALOpTdFWGNrh1Bl1Is6zgArv3wNiY/7y3nUMVJwhbnZ330mq1iW3tDlTrBEeRILbBIinZs5cD2AME9bPvAHSflm69SXGniN58q73GIQeMpKOcSbBFhURgu8r1ANWj/m95OBX1U=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.softwaresendbundle.com/c?x=JXi5FrM8nEaJ8Vhz6wUOCqxrjhqzjoosyzRRVprxfnQ=&c=2Rkx8e48joLANyQ0X06MSlPsePOV9C7g1ln7IqmMuqt9p8D syEcZ5xcXHdlcZveMr DfGH0s84UdMAjm9Rl9vhPfikfwoKyCc8wy85WMapA/l5jP7qaznm6ANcvchs482m TCwSvxdXgG7 b4x1nNcHhpqvNb9e0ioBoicsWHw=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentgiftbest.com/c?x=sDAV30l7qP/859fEuhpn8sCddXb0bFpJ4mz7ih2l3/k=&c=DX6110hj9eRORxmOgRaD2aw8uTq95cyjvtpXl5Ad4MXIQ/w0tN7TvJOTQpCQKV0Nl42l3B7oFPWzEZcRV1oLsgTNa8MNDuDCKE/5jX9j7WwEuopQg8ypJ9ToQnOnGxmObHhx8WyLx8B3RBfKoaK1DZxD/A62TBJGs4woa8FK2/M=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.vaultscontentsigns.com/c?x=d6kIAYZHW14PATv sMWSAOg9U6hqAsB4D8ywpSeCyz4=&c=M5Qf/twv8wVIfsuL939JsiyGmvwIhJMYsr2V4UgIAXSs1ZyPMJo6xfAxWqYPyGeMUwNKjxccpSxxbe6uDWoAhGUZwd0RCP LMSGZ84T4NwhRUPEcT/qYXK7meiEY7UwmKc7iemK/iv2b2oNExGrBJdEXiEHvZPOxc8KKrf/OdO8=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.cleartowerbundles.com/c?x=wLRhEc5FE6jgkbXc8Z9C3tu/thoNgzAsU05HnFDP2WI=&c=7WCsuThBIbvOwXoKiSdlOxe2dxXBeKb7HAUhXgC7gEGFiIkj4F1OaNOYsIJhUstUZ1 3VaCTQzmsIQSjYnqIrgyLDC6mwqFjxpI10HcahFtXJTjWrHp8K78cYsQ0wNEtNViPDJthH1cNWi6SnTmRzg==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.bulkfunpresent.com/c?x=zk0O0j3l9cSk7z4qyOrHFyPi/7jtE4B1eQm1VrWpLX4=&c=17u6b8tRkDcoYY42E4JjoX7H VA92QSLDROsFcKHW7ONkPFPLQNPck4k6hHiq1N3ISBCi7FwrJwFAopc8IlWvGq1to47pv8RPvMCe/cYogmKNm8gy/4f2CPunDMBDuKuHgJysfTawOCDP/eq 1o3/1WIYjSjQB4KLAFT92uH IE=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.hostingcenterranch.com/c?x=nQikFNylP3vErK7a//Kc0qtkfvMZlDWlqq98DgTug/E=&c=IXIqkbwcW86IRAac 91BTBSZXW/gUAlxhYgr1tTD7/RQRXZlmzMmjgeVzAhnzG0OkxTv5W3lWIMkQZaUHACrTkfA6eRpddSEhPkTYuwFLOs6ips7h7GwnKOzFAoc09aWTgEAY3c6OfDQd9AI/mUFuw==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.flashpresenttours.com/c?x=azaUUj2 rmPGCoufL/ulVHo9W/TGk WGmNqJLi6zsR4=&c=2Of4I9MOMTBHtrVF 1PTZdnV9ddh3spRFEAd5tsNzEElqdApKTFSbjA4AxOlQyPFZo7MPlFR5xjaljXQPml5WgMe1Nycg0jG2qQtav/yh9PUysSF7YU7kpHNlbEUOIloF/J9dhTdci8dym0pEJ6UbOsWS0Wo1oe37ZcvRyU1O00=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

Latest 30 of 1,732 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.