home

poweriso6.exe

PowerISO Setup

Power Software Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.cyclesendshare.com and multiple other hosts.
Publisher:
Power Software Ltd  (signed by Power Software Limited)

Product:
PowerISO Setup

Version:
6.6.0.0

MD5:
f86c1867bc03b2f36e7228fb0c45cfbd

SHA-1:
ef609f6bccdeed21476f6501389e8b0c35eba24b

SHA-256:
a933fd38239c1290e53516194a29ef2e1440d802a73890268129f63c4b6cbe05

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/23/2024 5:02:47 AM UTC  (today)

File size:
3.5 MB (3,693,368 bytes)

Product version:
6.6.0.0

Copyright:
Copyright(c) 2004-2016

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\poweriso6.exe

Digital Signature
Signed by:
Power Software Limited

Authority:
VeriSign, Inc.

Valid from:
3/26/2014 5:00:00 PM

Valid to:
6/25/2017 4:59:59 PM

Subject:
CN=Power Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Power Software Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
227EFDF22825BA270530FB09D52B32F8

File PE Metadata
Compilation timestamp:
4/1/2016 8:20:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:k5Fe1vj7aKb1gN9ruxcodD0p8JM7Ji83e2GtaXyuVDi5EjSZ:KFG7uq+NV6col0Ca7Jl3St8Vu2j0

Entry address:
0x326C

Entry point:
81, EC, 84, 01, 00, 00, 53, 55, 56, 57, 33, DB, 68, 01, 80, 00, 00, 89, 5C, 24, 20, C7, 44, 24, 14, 30, 91, 40, 00, 89, 5C, 24, 1C, C6, 44, 24, 18, 20, FF, 15, B4, 70, 40, 00, FF, 15, B0, 70, 40, 00, 66, 3D, 06, 00, 74, 11, 53, E8, 07, 2E, 00, 00, 3B, C3, 74, 07, 68, 00, 0C, 00, 00, FF, D0, BE, 80, 72, 40, 00, 56, E8, 83, 2D, 00, 00, 56, FF, 15, AC, 70, 40, 00, 8D, 74, 06, 01, 38, 1E, 75, EB, 6A, 0D, E8, DB, 2D, 00, 00, 6A, 0B, E8, D4, 2D, 00, 00, A3, 64, 3F, 42, 00, FF, 15, 38, 70, 40, 00, 53, FF, 15, 6C...
 
[+]

Entropy:
7.9958

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file poweriso6.exe has been seen being distributed by the following 50 URLs.

http://www.cyclesendshare.com/2Dz46nO4RgwqeDolGMnKMkB400gUL5m1bpVqPchaFakcvnO E11FagA96np19PWpJucFdwg8erK3 8Sf9_MFQ8t0UHG71l85NehJX4rH7El i7dWVbCn8Hw2MXkK4rB37CWAKq1BtAHrSIgd3n6JEr _gp3Iib5IlFolOQErehJD9Yu3MvI=-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=-e

http://www.deliverystockgift.com/dkzEgdr7Q7AR9tHplrHcQfCtjehJvPE K66ukvxPA9oHvlNBZEQAVEvoeAEPZcXeQJen1wVvIiD3JNShcdf3f9Ivomkuk Jq5Pcl3jtn7nhgNn7FyE3be ELQ6qZa7RomLPzIaA3uH8N08LztVh6TDzSRC4pNiW_0ANnnoNOzV1Ef3BR2jc=-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=-e

http://www.flashworldsign.com/fZ0FAu8qqPDwLgciyVFc8zvT64HXGug9XU4DnA qnEfNJOlxrHE_V3VEOjoK8H8pkl14Ob2Jse2_tE5T2bSKReWUbuTT72yZ3Dco_UeBnXAo9MVT1r7J3wIvRWXNwtt86jjsdCZjxXUbJuo6pmfk_BpfGhFu1xH91OfGfEsSE6DB1Fr7ZEQ=-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=-e

http://www.sharecurrentbits.com/9V620oJ6Nx5p7LQ38MoFlltYVU_7mzqUI DRcr7tiHl41QLhjWDbw7iWxeGHNwXRWRraMKiMbO2I6bxYa0z5kTm HksvjKgGDbk_xnUFGnYtQWwBgAYBHE65DDr7CEbNFPSXCagsktjJhYf Ndmssb6RjL4i7mJl0bpoBLaAld4rcSJsl2lbJs3jh0bC4_kTz6Hs Roq-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.presentappstown.com/ikBjwZgJFDOZvzNQFKn gu2PhSZ9NXTRTyLnBaSm aP3_k_kQx9H1wo9t6gStEISjMZLSvNQOanYm32YlrMoawQNNTc4z99gOB18mi6J4KeF711e8Sujhc5_hRn5SC6d6u5DsoLw6q89hLVnBXvNQ xuQspmiQ Bi06JFuaNPEf3M84rhiX9ou76pB4K3Z1S3mUNtkPa-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.sharecurrentbits.com/rUeUgJxFpDV22wo_64zNkQ0frowTDDig sD3UGxd7eqZW7kh1PJBz6GbCjJO6TpyaRPEGlrLiK2k0mPgG3zsicb9U4K_DyEvhDDaAaLXKcIlta7GOTh4XekrQ8RGdBazHt2BQPcKHWkd51 f08vOUcJYfaOL57hAO6BJnbAeNTj9lq_6r0AOLTMLqsMM69qF8N38oUnT-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.towntagfactory.com/B8BSopWEMrXkxAR40txIjQBW2fZqE2QiLw0 ZWvWhQfWEhPWmm0i3vTiZqkbQ2z_34fpgAjzUoqWXqabDebeA4p2CClhSH08HPYC0Al5oUA_34Mk4lFU3avUpvrfmOf2n0Z9dccqQVjQA8wYq4KMtfND8ude7_SyQtsPClW vzv6scbiIoMIOTDIDWw6FMpSmtWqlr6f-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.cityquickdownloads.com/c?x=O4hVxTlxRaDQ Xp7RY66dXztgbTuKp7DBnedqPn5vYI=&c=YnB1MkbK/YoM/21GMQin7dxGh N5RY2NBPxrS2tUPCKw7ThanVMMRURALoNGmiZvE7PNES9KWrF2te1NDwd5DJsShC6HPjaE/ORroa4M1sw/kx49X0PGT/xsqP7VmlN7jLbua3 dnNzjmVp2eic2CA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.downloadflashtour.com/c?x=6mMJ4l4iAndl3Kt9opbXMc3/JYLOUsNoesLeq7vzcGs=&c=Oh72l7wxiM1JOCj3USp7QBGzZgg9m4c4va1kyJrwJMoBfraU6ksJ1w8PrtC7yjkMJe3FrGEJka8MvC sVz4hSvjLVCgWJrET9YkzKROAvTDTiqHwNYyUf2C4EloGEXWs3XoSk0DME6wbO0pkEKLJNA==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.bodyhostingflash.com/c?x=xiEIcLBZw7JV1qbuKu88Mbm30N/XJxVfR06so6TkeJs=&c=VsWhYBugosXWf82QcC6fV2rdFCkxm9qM2fZmrf5wbdq2Sr2/DytZPLAvXjCUMrUzzxLGYf3qqakdwCYxATsMlIZ2c2cvr57v3I868GYxglqI /rIT3dGkqtcKCnEMe6OseJu3SkWfO 9L7WeyqFeaw==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.conceptssignhosting.com/c?x=RrNiMstFfgejWmOVwmOGWXlCbnuO9 D9wXoEnWyx4WY=&c=qgF6ff7pgctQD01wCnfyv5C5jc/CLwV21YabRshrMDkJWEQrEzh26TItkXxCsSZyf6ZsKbcfgG8GKxL3/zw/64dd2SxWLYLvlgxQQ4w/8xALd9OBEYEY9DK9pdm4IODonWIEIUs2 5/ogesVXet9hdsU NjtK1ExQevD2nLmNlQ=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.townbinariespresent.com/yLekHj1HtESuW_WdWqwU_jrBy4sfzq2xLy9gI4CMNN3NBgVNQiNnilqulpiYFSnl2vuDiflU7JgT47oPLPr3eVs3a6Nu94GjV1tz9r4MaaFNPd5r0Y2wpJhFy6M8Bjd1CLTp zq0I_c6Zvs iu0dxOV_zS1bVefN98WChpnPodPrHoBHomQJTT93vdNoGpAv31QPICp_-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.bodyranchbinaries.com/i6RQnVI8Q2KcrlK7hsvYJMsnDTBTM77AlMojZ2yTr2OtpLW8SZS4oOeg6VP_2BLxYh9l_HrSkJAw dwYEdyI5jFSitR47etEZCcmR9O8PycLZVoPH72byvh upw40Kw7oP7IdPmfTjh275DBbiQJjnoe149bHR5a7Gtr2QO2z l3Ir0OY4=-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=-e

http://www.conecptnowapp.com/yt6LsN1nx9gY55oAAo3_VRKlNepRSbdalGq7Jxt29p6wgMwr98RgRtyq9tDOJEk9rhe1PieIBpccg4F2xVwUDPkKYGfosBpxH3qktWupTPA78nb0mZ6x7ouWCPtjAEWd7F6e1kpoWpJ9uTCRu4Xm t1BBpYqkpqoJUaTZQtdZ1YJbwlPyMqpbNw7yhXIEb1WAD8FVLRm-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.quickcurrentfarm.com/c?x=BpXo05dPM2k8UGdFpgws/R0CBwDMpFeIRUJz/O9UqOA=&c=NUBslsUUwNVYHPd4WMZhajMKlg67YR6X2tvtxvtrrmlwO/9qevVDy0J H/zPzpSNVh6k/csBepT4ptgvNRfm16LWxFoeBvpSy ydf7vdBZAKv1tm Hj6ZT NAVJr1DgT2Fgad20NzoEsL/BY9DkKuQ==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.downloadflashtour.com/c?x=ZXeIYqavMfQucDb9AdfCZx3Wi4xi8bzypcn3GZb8skQ=&c=v2w7/W1BhtBM95c U AKItPqP3XySQwNS6f9/RoRULY1fHYsrLxDO7nIBij5G93NUguzpCcrHSYM4VCx OfYZreEIcApBkEUtCDrbnupaqyJXJyyQD6cxQ/msJOkVwAXPzjGgWN37UqUV2Y5Yed1Q34wu/HfAo20 w9FecWD8I0=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.conecptnowapp.com/vLhGq xq4C9Xmcu_tN8gWQKuUj0Gh1_aFZTSrjokMOKKzJM1xXe3RCdOkW_0NXfXRCYAViqoBmLQgJKmXo7ZyslkqnonBfSlcmtqlWaPxsw sO5minXEA1xYlDdmr4SNwd02fEut0f3JGoRSsygr6PXcI8CRiBsfiyT5WoTDr8jhZy7JTRI=-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.conecptnowapp.com/nVN_Z9f7OchQqcWJFxuaws rji_BTyMwLOD8ghB601YplTucPTZham6hcpv0xUElJwxE3y2qVwoYdH83DmJ1sh89WDNyz51VNLzn2MuwgTfyEWr3Iy8FumLK_nv6uHN6hEYCIApjz1ZDlonGhANtZt78XxFgvCy6iyyJoD8ZAkexmPxPqwg9NStD4Qm6 169LSfrJRv2-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.applicationranchbyte.com/c?x=JlcEAMyEk27F6HYYSyMk1m8PKW1qmCjhxdDU8n7stmo=&c=KN7Yg7CCZPZEiKAoIOQnOGoohlJmaDOQRSg4JhZEUF00KZM/xWLeIoqzQy7lJlxcb 6fV9vkJXllxabM1K8ft3F1/M hOuPrQoNGP3I5wmDMYGtvhpFYqj8xflXLfooTkusA0hrfkYdsI2WRICDhU3nVLcRrAwIeEhsC GMrmMY=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.presentappstown.com/aWIdW6SHd4GkIMXTza1n495cm7Jq7iW S_9Ufg6SkZinSvX2l45q2VcI5GkPYs6FlHX9hHbfKUz1gGcOkxpoAgw3Tho67GRHsqVH32Zszx5HWJu0EeOjBi1kGA9N6BKzOZzXvL1nxAbPEHTYEUYlFnLMhdwgPsMM3LdF H kLu3sfWynPJ_E8CwIJbbr1Vvf7o5GS4ph-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.updatebitsapplication.com/EPxsAbOPEepZ_nzp1VRPOnG2HJSeMAKa_zmUjbaGUQTaLOEOfCTpfR6MV5DhJtZGRML1SWNPkLzhWhRdunvCKwxt5Q1y3UaJif0LwkU3NhpV4X 60bUEWTZdSyFIBIrU1TzPJljLVxM06ILjqk8pVMR6JIO3 WJ4M_nekW2_akm468YkPcY=-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=-e

http://www.sendchuckleguard.com/7rfn3dqYJMCy 9N3uoq7Se7 OIdml_NcaGbfv9kaWGF49GI79LWZlR3Re XSF3T3ITPDq5jVy86X7Meq0X6yJLxY2Ol jQBJ7W 61rG1oD1tnWy8RpQkucVG8g5iORqivFXuWxTbLHGzFhNq98RLtFrp7uj0cF v9HDkxAWk FCIuIB KwuH3w1YFbHjv1YraJQr0Ot -G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.heartpackagecontent.com/MM_GiokN4QaGr_dA9VkR1pqx5YevX8OoQxTerctVrlhhMxc83eoI4J5x1wXhmWoLfaEaWpcidgVQ a1SsZfDrH0_M13uOd9nPqr8K7CXqaah 8V9PnWMC4Ph_bQxQC1ulLZz6DU9UWv7b_soaFlLbnx_sgu1YfK1zBUMq4JDat3Cye8Wli9n0ODen3gDCn854QTqXAUK-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.bestdownloadsbyte.com/c?x=VYUCsCBD38VWUMq3ZAma9zv/sf1zJZeOvLU96fSjgfc=&c=e5Q1wmxttMU7aWKcWV6yYoYGIkrQXhzEwDBoKEWdlJoZllYtO9tfmkuoNOGv0v83HTDohYIp0LyQe4jPoBZH3V6EUoJ2H0xCmBVuFF7BISXIJSW5r aDN J srU3WMs0hANoqq60V40ViCZp3o/3Kg==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.signcurrenttour.com/c?x=HlbpPq4ao2vZ9fl/smTBoWWgO9lahXJR0BZjuJgJ188=&c=K5GwZnRr69l86hYu5t3uLvpH8GRufimA2huqvbhHsNQQPCsqPQ2u8nsVn9uiODinFqsRYR3JzKm4kWLkm A4 /JbHfg oiVDcSQ6cRi3ouw2LM4E1wWqG0e3YfB8jJAFPluBhqaUPWk8Q341ReyCLQ==&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.heartcurrentpresent.com/c?x=KIagK3S88 4HJfMIEwpPkfu5iMjqcCqpteuSgqZ8E1o=&c=Mu bQScVdhGhaCMfZaN0c1ZS/8rDuEej0aaS/L8U0 pQv/x6xv3nyr9l34QW0H32IXbJUEDX4p2hdL45qfkEXdVPUsqc0LUyHDaPmc1U9aYBePFYPNvgyYxzoqz/yGUwCMmbPUq/sBYtO5Ttg0wNgfyrTw0FJ0FOhOijUpMwe8s=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.applicationranchbyte.com/c?x=Y61BefCddCB1KvW0tDN g5slsvFJaVwlsQYAiadsNGM=&c=AKSQlY/QW1Ht/n RhTSOB/0qBRMEgFmd8rwTvGkcaGbYXFR3IvMJIJblJDXvyu9Qr16cHS/9FeRmILUABKA5LRE6UWWgBs yZNN6QpcSWsBCKJkEA8l1 TIjx1/MWuP4rQLVpBkHa2ZI77o7usAsU/wHs7u9H zogC7nhAvDhN4=&e=0&downloadAs=PowerISO6.exe&fallback_url=http://download.cnet.com/.../3001-2646_4-10439118.html?hasJs=n&hlndr=1

http://www.bodyranchbinaries.com/Qo2fHc9pDSaycXzxhZsZo1D0PAJNC2BkJDhNwUpJGXqR3N2eP0znQPKe8tzjzt1YNq7mCHKE_7IE2bMEtOntU7nRl3ABr4wbH_ui4LASBiV6x2qlpo DnNWW0h4nW_zhO2ITqgMr2R0rDT23sJNfFBnRYMzh7bOhQQM9CZW47h981CxnTmczwY4Qe8r3qoGg273ewfM_-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

http://www.downloadvaultstower.com/LaxhxePpgoKdOrtlyhtZostSxScV4Cnp_sKq8Mi Gwlg9IySfNH3sPiLx Fkz6I4pE0BwIpaeI0MN9A5bs8i2wB VLt3UjVZs8O OyyR_tBgdNu0OjWs4GYMJGspKIQKP6mw1b86BFDPP_TDYIszV9GkhlGjzXJvYG9w_7tnjHxC6pg2HUU=-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=-e

http://www.signdldownloads.com/TiAbTi309nfkpPm1tv6ta7ZrcKO6UQAjpxAC_L_fcM48 hnEppoE0B7RmdbmZC4SOiVfTP4CtjLcHcO0tC2t0tIFDUv2RH5 HIc7vYeLNMrBsqdN9jzHjN3IUJhS7qgtp8wE47rICXixdmTnajABm JVZAcYUv d5hAn0bsKHrvAuRLrWMrL4ylo7lxOSk21UCyWraFe-G0oAAGRsXWvX4IeysG7DBhw4lUlAtuOwMXau4HEXNRYU6s7hF KO241fppgTQiFTQlUCUiK4Qam UmB6c_MFn3OCeT_716E=

Latest 30 of 1,897 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.