Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegSetValueExA, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA

kernel32.dll

Sleep, IsBadReadPtr, HeapFree, CreateFileA, DuplicateHandle, GetCurrentThread, GetCurrentProcess, lstrcatA, HeapAlloc, GetProcessHeap, GetTickCount, lstrcmpiA, lstrcpyA, lstrlenA, WaitForSingleObject, Process32Next, Process32First, CreateToolhelp32Snapshot, WaitForMultipleObjects, CreateMutexA, GetWindowsDirectoryA, GetFullPathNameA, GetModuleFileNameA, GetVersionExA, GetExitCodeProcess, CreateProcessA, ResetEvent, SetEvent, CreateEventA, GetLastError, OpenProcess, CloseHandle, GetStartupInfoA

ksproxy.ax

KsSynchronousDeviceControl

msvcrt.dll

DllMain

setupapi.dll

SetupDiEnumDeviceInterfaces, SetupDiGetDeviceRegistryPropertyA, SetupDiGetClassDevsExA, SetupDiEnumDeviceInfo, SetupDiGetClassDevsA, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceInterfaceDetailA, SetupDiOpenDevRegKey

shlwapi.dll

StrStrIA

user32.dll

PostQuitMessage, GetWindowLongA, DispatchMessageA, TranslateMessage, IsDialogMessageA, IsWindow, GetMessageA, CreateDialogParamA, BroadcastSystemMessageA, RegisterWindowMessageA, DestroyWindow, PostMessageA, SetWindowLongA

OEM02Mon.exe

By Creative Technology Ltd

Remove OEM02Mon.exe

Version:	1.01.01.00
MD5:	23242fd6c7d4c61807e84fd3a79248c4
SHA1:	3214ff50dc3f98ba8fcebcdc8854f770e8ea0bbe
SHA256:	6e53d0815b4552a05a0ec28871e5e9f0d14815fb52fcdd612c96050b7093493c

Overview

oem02mon.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine).

Details

File name:	oem02mon.exe
Publisher:	Creative Technology Ltd.
Description:	Live! Cam Console Auto Launcher
Typical file path:	C:\windows\oem02mon.exe
File version:	1.01.01.00
Size:	36 KB (36,864 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'OEM02Mon.exe' → C:\Windows\OEM02Mon.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00755579%	0.028634%
Kernel CPU:	0.00441146%	0.013761%
User CPU:	0.00314433%	0.014873%
Kernel CPU time:	7,519 ms/min	100,923,805ms/min
Context switches:	3/sec	284/sec
Memory
Private memory:	1.34 MB	21.59 MB
Private (maximum):	4.66 MB
Private (minimum):	4.64 MB
Non-paged memory:	1.34 MB	21.59 MB
Virtual memory:	54.02 MB	140.96 MB
Virtual memory (peak):	56.38 MB	169.69 MB
Working set:	4.65 MB	18.61 MB
Working set (peak):	4.78 MB	37.95 MB
Resource allocations
Threads:	3	12
Handles:	80	600
GUI GDI count:	14	103
GUI GDI peak:	16	142
GUI USER count:	8	49
GUI USER peak:	10	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\windows\oem02mon.exe"
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads

Averages

OEM02Mon.exe (main module)
Total CPU:	0.06036912%	0.272967%
Kernel CPU:	0.04940605%	0.107585%
User CPU:	0.01096308%	0.165382%
CPU cycles:	1,758,766/sec	5,741,424/sec
Context switches:	1/sec	79/sec
Memory:	36 KB	1.16 MB
msvcrt.dll
Total CPU:	0.03098018%
Kernel CPU:	0.02850607%
User CPU:	0.00247411%
CPU cycles:	2,221,282/sec
Memory:	688 KB

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate	50.00%
Windows 8.1 Pro	25.00%
Windows 8 Release Preview	25.00%

Distribution by country

India installs about 50.00% of oem02mon.exe.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	100.00%

Remove Adware and Spyware Programs, FREE Download!