home

updatechecker.exe

Honogofut

MICROMAX STUDIO, S.L.

The application updatechecker.exe, “Honogofut Setup ” by MICROMAX STUDIO, S.L has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.bitstagbits.com and multiple other hosts.
Publisher:
MICROMAX STUDIO, S.L.  (signed and verified)

Product:
Honogofut

Description:
Honogofut Setup

Version:
2.3.4.5

MD5:
8ef7dc17a36f906eff97e18101c63b2a

SHA-1:
62112e4499aa00c43e83c68e7f4fbdcbf44fcded

SHA-256:
bc76a27cf983c0627c2007b303c2f7ecba9aa9e2b9a0ebcdbb4c47d3994c1872

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 12:30:39 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MICROMAX.Installer (M)
16.3.31.14

File size:
996.6 KB (1,020,472 bytes)

Product version:
2.8.4

Copyright:
Internet Prog installer

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\updatechecker.exe

Digital Signature
Signed by:
MICROMAX STUDIO, S.L.

Authority:
GoDaddy.com, Inc.

Valid from:
9/1/2015 11:11:38 AM

Valid to:
9/1/2016 11:11:38 AM

Subject:
CN="MICROMAX STUDIO, S.L.", O="MICROMAX STUDIO, S.L.", L=Madrid, C=ES

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
79A6DBFB5606456E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:3CR1EYA3r9ghByL0aD0NFXRA53WVik91zZddj4yrlvFDme4p/c3dB5zX6:3kY79ghByLHrGVb1zHllNDOp/c3p6

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file updatechecker.exe has been seen being distributed by the following 24 URLs.

http://www.bitstagbits.com/c?x=HDkHuIH/Wkd4k6IfV2EdX/ePsEfJp7oEkggzbVNpzeM=&c=j6dE3kWpU7l6oL 9amnXtjj3V5z0qdTcpbFGGbF59g3gjlmTD74VHrgbSqERXWuRA7PFcklZvEJE6HaiJP kwJawmhvxrhaqO193P/2/cUA2 M9q8IZFGj3ciHKqe/Cf331tPqPl1A jawUGCdK5E6zr4O64AHwRAZ192T IExM=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=9NVzzRK09ysyznRbydcokA4K7QH E1jBx4EW0vJdQUw=&c=8Y0E8oxDKrtVj7ZGovO/rQ957NZuoai24APdena0ev0q7dnRB93RLdZK/tmLUem62GMYmm1hyWbdIw5lLChTnmSgUgNDOldwklyV7U1xw0kF0/D00Wpyu5h3L2lQkeGQM90UaK8k9mvcag8sAuV7LOsimCQIXYOISO3cMuLCOhw=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bundlescontentchuckle.com/c?x=sIZFyrq/VFm5ncZ5NyLHzMxRRfDwlm90OMncPnnQgPs=&c=S/stOTY0JBl/Ck13khrK38wm058IXzN5SOaWWpAmQNnhuo4x9gKfWpOLIr/JJ67UoiqNCNCNDIhjfU4aba/WcssBSVBbKZEOmHHtiwpFkiPVNBigjCcbl9rjzqbe1H3n2Sc75JKxAHvs2QDdXf7A0aOSdqkroDnsXH9U lc9ZC0=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.factoryhostchuckle.com/c?x=5HDpdIU su3 g81WVtAJGpOE9docNUhwSnRrtbyS8Jg=&c=sSyG0T4Ey2VCJ4xWfVX2bpnBvpx770tP2PDrhk4TpF/RigjQA3zuTvGjWdv0N/l961UGowp4XZr8tAKRUJJXT3KxBTyqyD17Ba6sHo5Cv TqvtTu5pzQh3MpzmFiol05am5LWFQZy1w6xtBVCW uOU0uVbMCM9N4hRINNEHpP2s=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.factoryhostchuckle.com/c?x=Fr4RLZ/5t48CEUX5cCuc/KA1FPjRLRwpScVye5ALYUQ=&c=OaiXuirdiK8BcdxLqBtXvO1v/ADnnXMcVZo5ZFXU3Drw41UArhPpNoEtL0f39izOPIH3AQC/DiX3LZysANdgfL3JYI6xj4ZdMrIHQMkiM1cWQhxbu0wu32j8XtiPBkTnuZd0hI1 yBcJ7CAmPIs3US9EMCkFQJBy2pa1FTmD/mpkmAvLce5hhlMZYzbhOL/3&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.worldbitstower.com/c?x=RMmLJrHXJ//tIV1GmIop ciywEZrJ/qM Wr7WAKPxhk=&c=3YFwBksahPJd6O7dxUGJBMbPT686cJyOJEqcrgwnFQwc2xwfFvAbAiXquJusYXvKSPO35ceWSBffeV26g4EPDZ9 /dfDnNuER3IXeh3r4 E1Ai2UbmqRC4ytNe8NlcxVaBfxsUnrNcUQ8EiWXnkOdkUqYGW2 4lGH4CA4pkK9g=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.worldbitstower.com/c?x=eEQFi yleCcsZpjzjO13ExCrs2jh0to/nRcJrEt4azc=&c=P6eVO35qcDkE3U4e3FxXdOUqYGHlwVX2EpMmUphWlKGtD4sHiQXNJ/fe4uZ91ha1BAbjsNwVLXHLarO3xPSFJmkdtTVndQTJzRfNuE VRLJcpHylXPooF5L3PiV YjaU623C 4YnAWFpFBaXwykJGP/mvqCsDGtEko30su7HGts=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=qd87fgbCoFF8i//kY6oHq9syuiWSxS6TmuQ/8SpFEd0=&c=Lr9LCJDPxmqCkgRYhKvqpZTw6bR8Az5fSQP7sMVDs1BIxBaTCHtV6iJX1Jh80irHOIUNibBjDxR BXAnT7RU2L2Jw2QjZ0NPjZbJWcAxzpca1lqTJ14GT145O5AI8b 2WS dMvrVrW7YFF5bP9zQEpR5wOJz TsHkkgOIPNjEJE=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.cyclenowfun.com/c?x=LVfV5jsSGAe6YAXqMxvbVboUOStCohxzkFsd9T1jjE8=&c=Yg7jkKjb8l3sqhidH3dcqUOJnuZ9v7 ACrBqmzfIIwSMDmqGoDYoCvwFUf91IJYdrOG/CjLLOXuMsb1CeahLMcupscPr4HwBSiBYpHzDsv2bqISj8vlW81g6xcLH5f0tpEfjP55reCbLad7lKiY/pTLVTcmhWvUgT/53FuW5zA0=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.factoryhostchuckle.com/c?x=lJNL6R/N/A/TyXZENk imGgnPk0qeMkZg4FyFIAvmqg=&c=6o5fZZXOWyD4SOp6izQfmkvozWl0XnIu3EukgYB6wHvAJG0V7gVLZ724I9OzGVXlrc/dzAmfWLCsumJLU96dpAGEP63kfxNvPH0tDUdjEQOlARnmhAs/cLzZOmIpDtf21kJMrkJZY2h6fx7ch ru6q6Gu4UlW6OJURifotDlrFs=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=Cd/QD 3/lrR3QoDLO1d2sysW139F0e8GPXGyZE5hKxc=&c=Zw31z2acMFzWIci/sYO1HvT3Xwzaf0rdMZxJ4TrCt8E sEZaSq3fiwBEC LJUIOgYY75hkbIzijIL9SMIAIUyfsu9RAXCHil7g/RzOybF7QUzUJpfXBE/XjZbXzimR292w nQbv/nDNHDrdxyOzFdDnUAB/SiCiTkI3vGbR8f8g=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.newfunbundle.com/c?x=hBq 9pVezKadOQVhYl5rRgoqWBEFzaUNrmL05p0eEvA=&c=lo2hLQAt7/l14dqvAONTxsqsCcRT2SjtM1VxY/kAmL2shlq/aXy2 EhJyIgPA9L6Ovq/9O46Y1ZE7ENHYZIRlZHw9rC6ncoEb8TkexR/ TmxVkjD/Mn3PF tWdceYTIoL342n1MyPtYDY6BBUZQS Ewsw xCSIwnKdiVWqIdUWNVPhQdAcAxz01q4goFibMh&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.farmsoftwarebulk.com/c?x=ZK7gPn9VgF6zloVU avCMep9EZuasDagaxHf84Cdo/Y=&c=sfljEAYlGgaYA MwCWly5Uy9dmmyAo7Bc8YI 8g5YQJqDLFuxn/oP22I874nKxbG3MVM0ESdOPeBrk5AOu5p7Z W ozyzqcMeL2cVXVWT3 yHTuNFd09oWPHOe8Hv5XNz2IixDAO94t4/WaMNvhCkgclMqewW4cqOE876O/GipM=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bundlescontentchuckle.com/c?x=1kp0Rg2V0VR6pc iJrMOB3KGaczpd5FrykD7RVl2fDA=&c=si5knfnRQmVCMco7cA60ha6a2Q8IjeAH4v0lJz2roNhJtb1oOwd/9MA3ARzkROSzvFDqNpQHgMrciLGulgUn3UbG72Tp9XSSy8B5HfzRTn0gWcLDLZdqr40gVR447DsKVYPJLXDItE3J3kOCGmfVX4qA7B3ASym4khCwn4IvSOY=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.farmsoftwarebulk.com/c?x=f5nTBEsHe7DI6g/Ia42M5yCGhNbNWS qy559BqjdTdo=&c=wJw l8T1tf meTvlshQxXX3l475wMyXE7tIiIz06TBkZAfKMpBMeGCi nzJ7AiK/ChLUhvJjR jR5IwFKXbKWxM0eTrWhnFJ498ci5u1Hl3MoEqmIzUalKoGoJMBh5cyPXVFzqfVKVf455T E9YyXhEBbUoZlJfd7EOW1UxtCKT BXtIKKDz4Xcy2jY/68Fa&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.farmsoftwarebulk.com/c?x=fB6Zy7sEEg13mZbpC8/yORYuswJWiSN7hpTxDgcgLlM=&c=ORqu6GEQh/gMRKvu Mt1XwJ698U5H8CKUnukpfrN6LMgrvWrzWoWoJBgJY5YwJEB5BgH3 kY3EujtRI1/RXyfEaVOD/VEH5UwyXe C5PVvRLZQWVzqbg5IFnOoYss3M8rDYcsBLSWXHosoPztyOyaQaP InSgcVWSOteFFsZQpM=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=F8 jBTYjcG8luYdf7 TShnxdTmqStjOzOd8KsCgT1zU=&c=wjKELR7DTrBPjXyTLjLHU1XvSDkJdkr8mpPiZamg7AQWjEA7066fDO/sr JdY7qSqAx8rRshWDvFq5MOW1O9ucB GjFTOMRDimcX/Ryw3y5prs0vxK24uPqBxQdQ3pbIH52YrWUWqzbkYTh51PXS4l4TH8YkRvKIKzvn64KE8bc=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.newfunbundle.com/c?x=u8rBbO/7LwZTpX yThEoOohM3gJpCzPVn0wZPA La6I=&c=JCLbMp6S5IfrLlHyqQLYJNQSoeUehYZ4a6Q ilmfqZDOgx5y1KxWhGTWEGx8QbfuVKInZCRSTp6GgltxoPYkeV5ludyB/6p/saJ3DpFvTl2 t6w89MxnptlPoAncxf9WSNb58JcahWNhDBOrJWwnzPRy11rSi7V1zt GIaBHxCg=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=cKXYFRUXPXl2siPhZAabCKuUIgbgXbnQ2YHmqTukrWM=&c=B23ZbzsbSbyzxaONyNhWagig9ZzWFw5B PpLE9TMcBGVKWqRtyuVN96lBK9j8wQg27gTwCu0c3jOGzqxCUpQ/AOIjuzYIGMn6slkIJZE9sZ9MmWtlw7sRieHJyU ZstwA7up2zoR4TRdfGBDViNv05lX0TdF6GaYqHF3sn8iMTc=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=zsKEOGULa3LBKtZ8YbiwBoPZTU9bwhAcZ9xsV5G2GGY=&c=EiuXk0uP9GdxSA9Al18WchbweIGaK WEwxFDty7xRmE1KVGbobakFkxNGEqEN8amC7AJzya0XcVL0swh lZo5j9H7binwJEBpD xA IW YmHWQJUGP3x XCrfYq7f4OUzVkWVSStdY00jx9XxYVuhDn FKaKzB78zAkFgXH7PA=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=oXhTqDg kNI7MtXvWugaKkCUqS6T62L8h/2c4Uj3UTM=&c=z W6AgZ5Z2sy747f47oB0E16Nn/cOea6Otf4BkdL42dKEEoruGnH8Xh3XdbfdzJ75der0IWjrWsyLMqECMkYOXOJu8vdyRP800eW/ts6VFdX2MM6vqQMtg/QlaSgpInr37ceiSmkWwseXa4g7RlfPY37DXK71 YzwoE7BjGD7I=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.farmsoftwarebulk.com/c?x=L7vv5JRShLMndNV3BSJQSuIJzDGdnVD3wg XJKGqnLI=&c=rg004nRdy ixA10m7iQFT qktTjvQJssaN4gvrtFU1eNgqQU5H9wSdX/DDSdHfHsuODfR8U K0sT9H7GhaGUv8kgSqzmbl6eCkMgXeqhXHhNkTXfXEqKjgzhOLpivH6Sa4uca6H8gonaSYVjNiyCxoT 8EzDBIIkHCUvkcm867o=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=dAWLwDf1U0cYKTGWwjHVp6cBms84qoQw0xkHMwISQn0=&c=3ke02dlzuab 515V7jellp2bXLfpv8KEMHUk83dUIlUiRglZsxnPbTL2lXsCs2oGOzGJ/u6UhfX7NhUPA7kIjjVxMZ1efMACPTpa7iiO8HhuYp4 thRXE73tAJ/21j4uUJTUrwhAiIBNxsnAqmH09cR/Iro5/gzG9kEcTgqz2YAOip4rUT8INZogMycxH8S7&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

http://www.bitstagbits.com/c?x=1MMqxwFvRXS8bgIxuY26Sdi 5dE9YYTRvogiPSubYR0=&c=pcXwSPiTsd1AJE/JeE4tdfIzw30ialRptuGTZfnrgmhjD/GT64ivq2Ri1/GfFgAqMYJg/tIVCbumn iKul7TCEyoeA3 tEXK4evCM5Vkk01 tjsc2kzU5zhhQ4ztsZsg09PIc7i9ixHr3RS7EyTC9isQFYl6YGTMCd2NREhl05w=&e=1&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe

Remove updatechecker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.