home

ServiceProvider.exe

KMPFaster

myGoya GmbH

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
MyGoya  (signed by myGoya GmbH)

Product:
KMPFaster

Description:
KMPFaster Tray (Service Provider)

Version:
2.4.1.1066

MD5:
155856ef8157fe557614eb610cce27b3

SHA-1:
8eb9e0e4e6ed9e05aa24eeaa646fd72949d37810

SHA-256:
2e86a4f013da2873491ed9c834b0d70ddec62406df7c7bd9b5401c826d514549

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/28/2024 2:13:25 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Floxif.H virus
6.3.12010.0

F-Prot
W32/Floxif.B
4.6.5.141

File size:
980.6 KB (1,004,103 bytes)

Product version:
2.4.1.1066

Copyright:
Copyright (C) MyGoya

Original file name:
ServiceProvider.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mygoya\kmpfaster\serviceprovider.exe

Digital Signature
Signed by:
myGoya GmbH

Authority:
DigiCert Inc

Valid from:
1/6/2016 8:00:00 AM

Valid to:
3/10/2017 8:00:00 PM

Subject:
CN=myGoya GmbH, O=myGoya GmbH, L=Zossen, C=DE

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0AC30BD03E3AB5CEF88F7397F09F3FBD

File PE Metadata
Compilation timestamp:
3/10/2016 10:44:50 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x8AC7B

Entry point:
E9, FC, D8, FB, FF, E9, 03, FE, FF, FF, CC, FF, 25, 9C, 04, 4A, 00, 83, 3D, F0, 9A, 4C, 00, 00, 74, 03, 33, C0, C3, 56, 6A, 04, 6A, 20, FF, 15, EC, 03, 4A, 00, 59, 59, 8B, F0, 56, FF, 15, B4, 01, 4A, 00, A3, F0, 9A, 4C, 00, A3, EC, 9A, 4C, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 14, 68, B0, 1A, 4C, 00, E8, AC, 09, 00, 00, 83, 65, DC, 00, FF, 35, F0, 9A, 4C, 00, 8B, 35, 6C, 03, 4A, 00, FF, D6, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, E4, 03, 4A, 00, 59, EB, 65, 6A...
 
[+]

Entropy:
6.5566

Packer / compiler:
Xtreme-Protector v1.05

Code size:
633 KB (648,192 bytes)

Scheduled Task
Task name:
KMPFaster (Tray)

Trigger:
Logon (Runs on logon)

Description:
KMPFaster (Tray)


Scan ServiceProvider.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.