home

cutewriter.exe

CutePDF Writer

Acro Software Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from localhost and multiple other hosts.
Publisher:
Acro Software Inc.   (signed by Acro Software Inc.)

Product:
CutePDF Writer

Description:
CutePDF Writer Setup

Version:
3.1.0.3

MD5:
29d141bf592697122d87e16c1db673a5

SHA-1:
9a05658b5cf732b86c5671231620a343f93ce868

SHA-256:
96b4d770c86ea397d56bec1c6a015c1559ecbc8e4a436cd48cf2bc32e258a977

Scanner detections:
2 / 68

Status:
Inconclusive  (probably just false positive detections)

Analysis date:
12/26/2024 1:41:26 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask.G potentially unsafe application
7.0.302.0

Reason Heuristics
PUP.Ask.Toolbar.Bundled (M)
16.4.15.17

File size:
2.5 MB (2,570,096 bytes)

Product version:
3.1.0.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\cutewriter.exe

Digital Signature
Signed by:
Acro Software Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
1/19/2016 7:16:38 PM

Valid to:
9/14/2016 11:43:27 AM

Subject:
CN=Acro Software Inc., O=Acro Software Inc., L=Haymarket, S=Virginia, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00E05E54F053CF00A5

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:e9TV1BFBLja5NL1/8lTxzP9NAdbdtI9zEGJgovs0+L83rag4:4B1xja5d10lrydu9zEGqi2g4

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9962

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file cutewriter.exe has been seen being distributed by the following 29 URLs.

http://localhost:37848/continue?TiCredToken=7772&Source=WTP&URL=http://www.cutepdf.com/.../CuteWriter.exe

http://www.filepuma.com/file/1465703800c11481/cutepdf_writer_3.1/.../0/

http://filehippo.com/download/file/.../

http://dl.cdn.chip.de/downloads/.../CuteWriter_3.1.exe

http://down.filepuma.com/files/office-suites/.../CutePDF_Writer_v3.1.exe

http://lb.cdn.m6web.fr/d/c/a/e8818d1e36b4edb61101a98664c95bc0/5839334b/soft/.../cutepdf-writer_3-1_fr_26715.exe

http://www.filepuma.com/file/1467226164c11481/cutepdf_writer_3.1/.../0/

http://lb.cdn.m6web.fr/d/c/a/226ae0649710d98d2b70d0c0522b5211/57ceeeb0/soft/.../cutepdf-writer_3-1_fr_26715.exe

http://www.filepuma.com/file/1480322652c11481/cutepdf_writer_3.1/.../0/

http://d110.cdn.m6web.fr/soft/.../cutepdf-writer_3-1_fr_26715.exe

http://www.filepuma.com/file/1472925285c11481/cutepdf_writer_3.1/.../0/

http://lb.cdn.m6web.fr/d/c/a/70b9e6891caa9247e178ed91c627a412/5808fba9/soft/.../cutepdf-writer_3-1_fr_26715.exe

http://indir.gezginler.net/i/2263/.../

http://localhost:37848/continue?TiCredToken=443&Source=WTP&URL=http://www.cutepdf.com/.../CuteWriter.exe&Permanent=1

http://www.techtudo.com.br/_/software/.../download

http://www.filehorse.com/download/file/.../

http://www.filepuma.com/file/1464707393c11481/cutepdf_writer_3.1/.../0/

http://indir.gezginler.net/i/2263/.../

http://www.vins.co.il/.../cutepdf

http://113.171.224.216/.../CuteWriter.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=bc7692a73ac7bdd63853782c4e4b0ee2&file=1

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/ba2ba7695e061ffb2aa330ece99a3d51/5743757b/soft/.../cutepdf-writer_3-1_fr_26715.exe

http://lb.cdn.m6web.fr/d/c/a/cc2a98755ff3d5083172badd576be908/56e69e65/soft/.../cutepdf-writer_3-1_fr_26715.exe

http://download.cutepdf.com/.../CuteWriter.exe

http://www.acrosoftware.com/.../CuteWriter.exe

http://cutepdf.com/.../CuteWriter.exe

http://software.thaiware.com/download_url.php?id=9533

http://www.cutepdf.com/.../CuteWriter.exe

Scan cutewriter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.