iminentsetup.exe

InstallerDlg

Iminent Technology SRL

This is the SIEN AppScion Installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application iminentsetup.exe by Iminent Technology SRL has been detected as a potentially unwanted program by 8 anti-malware scanners. The program is a setup application that uses the SIEN SuperInstall installer. The file has been seen being downloaded from ustapi.iminent.com a web site host known to distribute potentially unwanted software operated by SIEN S.A..
Publisher:
I.M.I.N.E.N.T  (signed by Iminent Technology SRL)

Product:
InstallerDlg

Version:
8.8.3.3

MD5:
87fe64b7a7db9abf11a0750f4c8e17a7

SHA-1:
38aa9f44a01ec996e25ab539b9569bf294e59b63

SHA-256:
2e7537670f33bca931c7cb69e30b9c4ce9396af632c4244531d3a797ce589151

Scanner detections:
8 / 68

Status:
Potentially unwanted

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/25/2024 1:00:35 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.Iminent
2015.05.27

Avira AntiVirus
ADWARE/Iminent.Gen
8.3.1.6

AVG
Generic
2016.0.3097

Dr.Web
Adware.Iminent.48, Adware.Downware.9850
9.0.1.05190

ESET NOD32
Win32/Toolbar.Iminent.K potentially unwanted application
7.0.302.0

IKARUS anti.virus
PUA.Toolbar.Iminent
t3scan.1.9.2.0

Malwarebytes
PUP.Optional.Iminent.A
v2015.05.27.10

Reason Heuristics
PUP.Installer.IminentTechnologySRL
15.5.27.6

File size:
663.6 KB (679,576 bytes)

Product version:
8.8.3.3

Copyright:
S.I.E.N.

Original file name:
InstallerDlg.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
SIEN SuperInstall

Language:
English (United States)

Common path:
C:\users\{user}\downloads\iminentsetup.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
1/27/2015 4:57:08 PM

Valid to:
1/28/2016 4:57:08 PM

Subject:
CN=Iminent Technology SRL, O=Iminent Technology SRL, L=Bucuresti, C=RO

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121CF423BE77B3AE7537B1BCE9F96A3C3E5

File PE Metadata
Compilation timestamp:
2/18/2015 7:45:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:7g1s9aiFcJUqCUGcJG+Ckc5gdIcQUIrNfkbEV5hs2t0Q+0Yf8vecaF1rrLJU+:k1s9qJt6cJaid7M5cbWf+FEveNF1rrdL

Entry address:
0x3C0EC

Entry point:
E8, 21, 84, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, F0, B9, 47, 00, 75, 02, F3, C3, E9, 5C, 22, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 6D, 8B, 45, 08, 85, C0, 75, 13, E8, AB, 35, 00, 00, 6A, 16, 5E, 89, 30, E8, C7, 8A, 00, 00, 8B, C6, EB, 53, 57, 8B, 7D, 10, 85, FF, 74, 14, 39, 75, 0C, 72, 0F, 56, 57, 50, E8, ED, 8A, 00, 00, 83, C4, 0C, 33, C0, EB, 36, FF, 75, 0C, 6A, 00, 50, E8, 1B, 2B, 00, 00, 83, C4, 0C, 85, FF, 75, 09, E8, 6A, 35, 00, 00, 6A, 16, EB, 0C, 39, 75, 0C, 73, 13, E8, 5C...
 
[+]

Code size:
373.5 KB (382,464 bytes)

The file iminentsetup.exe has been seen being distributed by the following URL.

Remove iminentsetup.exe - Powered by Reason Core Security