home

cirap.exe

ITECIR Filter Application for RCMM Protocol

ITE Tech. Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CIRAP’.
Publisher:
ITE Tech. Inc.  (signed and verified)

Product:
ITECIR Filter Application for RCMM Protocol

Version:
2.0.0.1

MD5:
c65b7fa0cf8e53e1d5d1697d0ca08acb

SHA-1:
5fff6f70e3e06dbf877d8ebaa9ec16ea37677282

SHA-256:
c46328a9a2064e164b617ea1dab023365858df815be859ab5402479547235117

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 3:41:56 PM UTC  (today)

File size:
590.1 KB (604,304 bytes)

Product version:
2.0

Copyright:
2012

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ite\ite infrared transceiver\cirap.exe

Digital Signature
Signed by:
ITE Tech. Inc.

Authority:
VeriSign, Inc.

Valid from:
5/25/2010 2:00:00 AM

Valid to:
8/6/2013 1:59:59 AM

Subject:
CN=ITE Tech. Inc., OU=Software Design Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ITE Tech. Inc., L="Hsinchu ", S="Hsinchu ", C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F2480274DC6E960E83F26FE3ED1D401

File PE Metadata
Compilation timestamp:
7/6/2012 11:11:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
12288:cWROnr+1eejqf/XJlLliMPAcekqeNAb5UKihWsg:cWROr+OvXliSAOp2bXx

Entry address:
0x136C

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, B0, 47, 00, A1, 8B, B0, 47, 00, C1, E0, 02, A3, 8F, B0, 47, 00, 52, 6A, 00, E8, 89, 91, 07, 00, 8B, D0, E8, EA, E1, 06, 00, 5A, E8, 48, E1, 06, 00, E8, 1F, E2, 06, 00, 6A, 00, E8, 24, F6, 06, 00, 59, 68, 34, B0, 47, 00, 6A, 00, E8, 63, 91, 07, 00, A3, 93, B0, 47, 00, 6A, 00, E9, 23, 4B, 07, 00, E9, 52, F6, 06, 00, 33, C0, A0, 7D, B0, 47, 00, C3, A1, 93, B0, 47, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, B4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
488 KB (499,712 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CIRAP

Command:
C:\Program Files\ite\ite infrared transceiver\cirap.exe


The file cirap.exe has been discovered within the following programs.

ITE Infrared Transceiver  by ITE
Publisher's description - “This is the driver for the ITE device which is capable of both sending and receiving infrared data. These devices are most commonly seen in use in communications, although they have other applications as well.”
www.ITE.com.tw
About 9% of users remove it
 
Powered by Should I Remove It?

Scan cirap.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.