cirap.exe

ITECIR Filter Application for RCMM Protocol

ITE Tech. Inc.

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
ITE Tech. Inc.  (signed and verified)

Product:
ITECIR Filter Application for RCMM Protocol

Version:
1.3.1.0

MD5:
cbde95d1122fc04af029f2bde36d9484

SHA-1:
f271439dd85b08155ebbc031c0fa7919e90843ec

SHA-256:
295a9c9676d57314c245375fcc94094b3bcfdfbe91966613b162116bc850885c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:42:36 PM UTC  (today)

File size:
589.6 KB (603,752 bytes)

Product version:
1.3

Copyright:
2011

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ite\ite infrared transceiver\cirap.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
5/25/2010 1:00:00 AM

Valid to:
8/6/2013 12:59:59 AM

Subject:
CN=ITE Tech. Inc., OU=Software Design Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ITE Tech. Inc., L="Hsinchu ", S="Hsinchu ", C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F2480274DC6E960E83F26FE3ED1D401

File PE Metadata
Compilation timestamp:
7/28/2011 9:57:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
12288:xRsx7JuJ+QXlqOk3fLW1PQbj2jLthtHNrfDOHaLb02:nsmdXnk3fLW2m3thtR66n02

Entry address:
0x136C

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, B0, 47, 00, A1, 8B, B0, 47, 00, C1, E0, 02, A3, 8F, B0, 47, 00, 52, 6A, 00, E8, 5D, 90, 07, 00, 8B, D0, E8, BE, E0, 06, 00, 5A, E8, 1C, E0, 06, 00, E8, F3, E0, 06, 00, 6A, 00, E8, F8, F4, 06, 00, 59, 68, 34, B0, 47, 00, 6A, 00, E8, 37, 90, 07, 00, A3, 93, B0, 47, 00, 6A, 00, E9, F7, 49, 07, 00, E9, 26, F5, 06, 00, 33, C0, A0, 7D, B0, 47, 00, C3, A1, 93, B0, 47, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, B4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
488 KB (499,712 bytes)

Scheduled Task
Task name:
ITECIR Filter Application for RCMM

Trigger:
Logon (Runs on logon)


The file cirap.exe has been discovered within the following program.

Publisher's description - “This is the driver for the ITE device which is capable of both sending and receiving infrared data. These devices are most commonly seen in use in communications, although they have other applications as well.”
www.ITE.com.tw
About 9% of users remove it
 
Powered by Should I Remove It?

Scan cirap.exe - Powered by Reason Core Security