home

CmImpSrv.exe

Chromeleon

Dionex Corporation

It runs as a separate (within the context of its own process) windows Service named “Chromeleon Transaction Agent”.
Publisher:
Dionex Corporation  (signed and verified)

Product:
Chromeleon

Description:
Chromeleon Transaction Agent

Version:
6.80 SR10 Build 2818

MD5:
dd41c2cdd634234783b8f32de320043f

SHA-1:
0293fe2413cc1ee0550ef0febab4a404ce92358a

SHA-256:
03e2a73a44f4290170fd25a930ae25c6541dc8dc1fa7cc0ead89c208f9a8e62a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
7/7/2025 1:27:01 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.W32.Agent.lMVg
2.1.4+

File size:
25.4 KB (25,976 bytes)

Product version:
6.80 SR10 Build 2818

Copyright:
Copyright (c) 1994-2010 Dionex Corporation

Original file name:
CmImpSrv.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Dionex Corporation

Authority:
VeriSign, Inc.

Valid from:
1/26/2010 7:00:00 AM

Valid to:
1/27/2011 6:59:59 AM

Subject:
CN=Dionex Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Dionex Corporation, L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6032C559A92E92412417527C07FE104E

File PE Metadata
Compilation timestamp:
8/2/2010 10:30:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

CTPH (ssdeep):
384:VCjojx6oY5rimW64aX+qdjbFJCPzzQ1YJL+gbC71d:jsoY5eVmKPzzQQLfbCpd

Entry address:
0x1706

Entry point:
55, 8B, EC, 6A, FF, 68, C8, 21, 40, 00, 68, 7A, 18, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 20, 53, 56, 57, 89, 65, E8, 83, 65, FC, 00, 6A, 01, FF, 15, A8, 20, 40, 00, 59, 83, 0D, 84, 32, 40, 00, FF, 83, 0D, 88, 32, 40, 00, FF, FF, 15, AC, 20, 40, 00, 8B, 0D, 7C, 32, 40, 00, 89, 08, FF, 15, B0, 20, 40, 00, 8B, 0D, 78, 32, 40, 00, 89, 08, A1, B4, 20, 40, 00, 8B, 00, A3, 80, 32, 40, 00, E8, F3, 00, 00, 00, 83, 3D, 40, 31, 40, 00, 00, 75, 0C, 68, 64, 18, 40, 00, FF, 15, B8, 20...
 
[+]

Entropy:
3.9678

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
4 KB (4,096 bytes)

Service
Display name:
Chromeleon Transaction Agent

Service name:
CmImpService

Type:
Win32OwnProcess

Depends on:
RPCSS lanmanworkstation


Scan CmImpSrv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.