Check the size and dates of the prov-kix32.exe, I bet it's the same as either kix32.exe or wkix32.exe. They probably just made a copy and renamed it for fun.