cutewriter.exe

CutePDF Writer

Acro Software Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from download.softpedia.com and multiple other hosts.
Publisher:
Acro Software Inc.   (signed by Acro Software Inc.)

Product:
CutePDF Writer

Description:
CutePDF Writer Setup

Version:
3.0.0.6

MD5:
0ac5d39b93c82bc7dc55037d2f9f1297

SHA-1:
d792999d32739844062335b44ba591f78e82d7ba

SHA-256:
058f6ca087ddd809a525c4f47444c42669ae83eda91eba2d05abc5a5553fd564

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 12:17:15 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
7.9185

File size:
1.9 MB (2,003,672 bytes)

Product version:
3.0.0.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\cutewriter.exe

Digital Signature
Authority:
GoDaddy.com, Inc.

Valid from:
7/23/2013 8:56:41 PM

Valid to:
9/14/2016 4:43:27 PM

Subject:
CN=Acro Software Inc., O=Acro Software Inc., L=Haymarket, S=Virginia, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
07B0F4201FE9F1

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:+a9gZ+moscxucDEl2C9zxVeiPl8TqWs84:f9gh2A9zb98C

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9940

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file cutewriter.exe has been discovered within the following programs.

8% remove it
CutePDF Writer 3.0  by CutePDF.com
Publisher's description - “Portable Document Format (PDF) is the de facto standard for the secure and reliable distribution and exchange of electronic documents and forms around the world. CutePDF Writer (formerly CutePDF Printer) is the free version of commercial PDF creation software.”
6% remove it
 
Powered by Should I Remove It?

The file cutewriter.exe has been seen being distributed by the following 16 URLs.

http://download.softpedia.com/dl/73968b2a4e59ca7b693af8680d8303c9/563b044a/100012692/software/.../CuteWriter.exe

http://cdn.whitepackagescentre.com/c?x=xAJHvNiFc5s9WsKqctPp4jUHSDXbpzt0APDNXQCooEE=&c=flSBMA6 QRv/jjEe07LMXNUBTlwLMf8iNPkqbGDClUtSYZNsjQC2IbTpWREGOKLHflPxgkIt3u0wSQFpZ9O Jg==&fallback_url=http://www.cutepdf.com/products/.../writer.asp

ftp://202.62.80.142:1/.../CuteWriter.exe

http://cdn.goodpackageswarehouse.com/c?x=2AISrTVipWpRSbCIEPJ0ybIgj/EHeIRjGuB/13kIO8E=&c=amxQQBHE1Yzq6T6KfVYf3 hY9Xh7q99Z81gxKNjW/vVc1FuvRu3MBs8XfNVuUvO82J11n8u2CDdE yyo1c/6ZA==&fallback_url=http://www.cutepdf.com/products/.../writer.asp

http://113.171.224.242/.../CuteWriter.exe

Scan cutewriter.exe - Powered by Reason Core Security