home

cirap.exe

ITECIR Filter Application for RCMM Protocol

ITE Tech. Inc.

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
ITE Tech. Inc.  (signed and verified)

Product:
ITECIR Filter Application for RCMM Protocol

Version:
1.3.2.0

MD5:
3f8dd1ad2510cb0062ba0752470ec349

SHA-1:
f7cdc370ffa1b43ea0dd1251cccd9a5603fc3c6d

SHA-256:
03ef9f6d052b0d68993e4ded6572953d0597d0065f5e377baf79cdf4412c295e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:21:32 AM UTC  (today)

File size:
589.6 KB (603,752 bytes)

Product version:
1.3

Copyright:
2011

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ite\ite infrared transceiver\cirap.exe

Digital Signature
Signed by:
ITE Tech. Inc.

Authority:
VeriSign, Inc.

Valid from:
5/25/2010 2:00:00 AM

Valid to:
8/6/2013 1:59:59 AM

Subject:
CN=ITE Tech. Inc., OU=Software Design Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ITE Tech. Inc., L="Hsinchu ", S="Hsinchu ", C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F2480274DC6E960E83F26FE3ED1D401

File PE Metadata
Compilation timestamp:
8/3/2011 10:05:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
12288:uLfcQPKc4Diy1TggeCXPGhyJSYnfCv/gp0EBZXDjK/F6SB:ufbovgxCFSMo4p06g6SB

Entry address:
0x136C

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, B0, 47, 00, A1, 8B, B0, 47, 00, C1, E0, 02, A3, 8F, B0, 47, 00, 52, 6A, 00, E8, 19, 91, 07, 00, 8B, D0, E8, 7A, E1, 06, 00, 5A, E8, D8, E0, 06, 00, E8, AF, E1, 06, 00, 6A, 00, E8, B4, F5, 06, 00, 59, 68, 34, B0, 47, 00, 6A, 00, E8, F3, 90, 07, 00, A3, 93, B0, 47, 00, 6A, 00, E9, B3, 4A, 07, 00, E9, E2, F5, 06, 00, 33, C0, A0, 7D, B0, 47, 00, C3, A1, 93, B0, 47, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, B4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
488 KB (499,712 bytes)

Scheduled Task
Task name:
ITECIR Filter Application for RCMM

Trigger:
Logon (Runs on logon)


The file cirap.exe has been discovered within the following program.

ITE Infrared Transceiver  by ITE
Publisher's description - “This is the driver for the ITE device which is capable of both sending and receiving infrared data. These devices are most commonly seen in use in communications, although they have other applications as well.”
www.ITE.com.tw
About 9% of users remove it
 
Powered by Should I Remove It?

Scan cirap.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.