explorer.exe

Windows File Explorer helps users find, open, organize, and manage files and folders in Windows 10 and 11. ESET Research documented an InvisiMole sample whose wrapper DLL masqueraded as mpr.dll, was placed in the Windows folder alongside explorer.exe, and loaded during startup into Windows Explorer instead of the legitimate library in %windir%\system32. This sample-specific persistence and evasion example is consistent with Windows DLL search order; the sources do not substantiate generic explorer.exe <binary> payload execution, arbitrary DLL loading from any chosen directory, or process injection by Explorer.