Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegSetValueExA, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA

kernel32.dll

Sleep, IsBadReadPtr, HeapFree, CreateFileA, DuplicateHandle, GetCurrentThread, GetCurrentProcess, lstrcatA, HeapAlloc, GetProcessHeap, GetTickCount, lstrcmpiA, lstrcpyA, lstrlenA, WaitForSingleObject, Process32Next, Process32First, CreateToolhelp32Snapshot, WaitForMultipleObjects, CreateMutexA, GetWindowsDirectoryA, GetFullPathNameA, GetModuleFileNameA, GetVersionExA, GetExitCodeProcess, CreateProcessA, ResetEvent, SetEvent, CreateEventA, GetLastError, OpenProcess, CloseHandle, GetStartupInfoA

ksproxy.ax

KsSynchronousDeviceControl

msvcrt.dll

DllMain

setupapi.dll

SetupDiEnumDeviceInterfaces, SetupDiGetDeviceRegistryPropertyA, SetupDiGetClassDevsExA, SetupDiEnumDeviceInfo, SetupDiGetClassDevsA, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceInterfaceDetailA, SetupDiOpenDevRegKey

shlwapi.dll

StrStrIA

user32.dll

PostQuitMessage, GetWindowLongA, DispatchMessageA, TranslateMessage, IsDialogMessageA, IsWindow, GetMessageA, CreateDialogParamA, BroadcastSystemMessageA, RegisterWindowMessageA, DestroyWindow, PostMessageA, SetWindowLongA

OEM07Mon.exe

By Creative Technology Ltd

Remove OEM07Mon.exe

Version:	1.00.01.00
MD5:	2bf266a4c8c0fa743d0967eebbe38d0a
SHA1:	6ca40747922ba79e9dfcd6bb40f34408bea5465d
SHA256:	5f51ccb3b1f8de9b24858f1f1a6ae1fd0aebca4815d53c2e7f72e1b9c0391716

Overview

oem07mon.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

Details

File name:	oem07mon.exe
Publisher:	Creative Technology Ltd.
Description:	Live! Cam Console Auto Launcher
Typical file path:	C:\windows\oem07mon.exe
File version:	1.00.01.00
Size:	36 KB (36,864 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'OEM07Mon.exe' → C:\Windows\OEM07Mon.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00037269%	0.028634%
Kernel CPU:	0.00013072%	0.013761%
User CPU:	0.00024197%	0.014873%
Kernel CPU time:	338,631 ms/min	100,923,805ms/min
CPU cycles:	5,001,138/sec	17,470,203/sec
Memory
Private memory:	1.21 MB	21.59 MB
Private (maximum):	4.49 MB
Private (minimum):	2.1 MB
Non-paged memory:	1.21 MB	21.59 MB
Virtual memory:	55.56 MB	140.96 MB
Virtual memory (peak):	55.7 MB	169.69 MB
Working set:	2.2 MB	18.61 MB
Working set (peak):	4.62 MB	37.95 MB
Page faults:	59,343,007/min	2,039/min
I/O
I/O read transfer:	25 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	3.01 KB/sec	448.09 KB/min
I/O other operations:	193/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	81	600
GUI GDI count:	14	103
GUI GDI peak:	17	142
GUI USER count:	7	49
GUI USER peak:	9	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\windows\oem07mon.exe"
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads