home

KitOnline.EXE

CEGID Web Access

CEGID

This is a setup program which is used to install the application. This is installed with Cegid Point of Sales device manager (CPOS) (Client WA side). The file has been seen being downloaded from 192.168.1.15.
Publisher:
Cegid SA  (signed by CEGID)

Product:
CEGID Web Access

Description:
CWAS Client Update

Version:
3, 1, 103, 51

MD5:
06cce67acd4a0ef76267b6b0a690f7f7

SHA-1:
68a9054512cf261f10c3a0dbb786f54d1f524d78

SHA-256:
82082fa1bfdd586ec72e26decdf3c1067c229f067c09e9a32b3904a2d0e5e444

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:18:17 PM UTC  (today)

File size:
661.3 KB (677,176 bytes)

Product version:
3, 1, 103, 0

Copyright:
Copyright (C) Cegid 2001-2009

Original file name:
KitOnline.EXE

File type:
Executable application (Win32 EXE)

Language:
Französisch (Frankreich)

Common path:
C:\Program Files\cegid\cegid business\app\mode\kitonline.exe

Digital Signature
Signed by:
CEGID

Authority:
VeriSign, Inc.

Valid from:
9/27/2006 2:00:00 AM

Valid to:
10/26/2009 12:59:59 AM

Subject:
CN=CEGID, OU=DMD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CEGID, L=LYON, S=RHONE, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
15426F3F5973D5896FD887488F987CE3

File PE Metadata
Compilation timestamp:
6/17/2009 1:34:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:QFe4dqZ+NyPlEBkruOY2+c+6LUVdM45h71Tsgyx5m2zgi:QFeL+Kut2OVdMO1INx1x

Entry address:
0x2A91C

Entry point:
55, 8B, EC, 6A, FF, 68, 10, EC, 47, 00, 68, 9C, D6, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 28, A2, 47, 00, 33, D2, 8A, D4, 89, 15, 48, 33, 4A, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 44, 33, 4A, 00, C1, E1, 08, 03, CA, 89, 0D, 40, 33, 4A, 00, C1, E8, 10, A3, 3C, 33, 4A, 00, 6A, 01, E8, 0B, 33, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 80, 2B, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
484 KB (495,616 bytes)

The file KitOnline.EXE has been discovered within the following program.

Cegid Point of Sales device manager (CPOS) (Client WA side)  by Cegid Group
www.Cegid.com
About 9% of users remove it
 
Powered by Should I Remove It?

The file KitOnline.EXE has been seen being distributed by the following URL.

http://192.168.1.15/.../KiteBOS5~192.168.1.15~80.exe

Scan KitOnline.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.