Overwolf.exe
Overwolf by Overwolf Ltd (Signed)
Overview
There are 2 versions of overwolf.exe in the wild, the latest version being 0.45.266.19608. overwolf.exe is run as a standard windows process with the logged in user's account privileges. The process displays a GUI (graphical user interface) which allows the user to interact with it as well as displays a notification icon in the taskbar. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 34.43 KB. The file is a digitally signed and issued to Overwolf Ltd by COMODO CA Limited. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0010% including both foreground and background operations, the average private memory consumption is about 130.76 MB.
 Details
|
| File name: | overwolf.exe |
| Publisher: | Overwolf |
| Product name: | Overwolf |
| Typical file path: | C:\Program Files\overwolf\overwolf.exe |
| Certificate |
| Issued to: | Overwolf Ltd |
| Authority (CA): | COMODO CA Limited |
| Effective date: | Sunday, December 25, 2011 |
| Expiration date: | Monday, February 10, 2014 |
Behaviors
(Note, the behaviors below are for all versions of overwolf.exe, select a unique version for details.)
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Overwolf' → C:\Program Files\Overwolf\Overwolf.exe -silent
All file variations of overwolf.exe
