Overwolf.exe
Overwolf by Overwolf Ltd (Signed)
Overview
There are 3 versions of overwolf.exe in the wild, the latest version being 0.76.1.0. overwolf.exe is run as a standard windows process with the logged in user's account privileges. The process displays a GUI (graphical user interface) which allows the user to interact with it as well as displays a notification icon in the taskbar. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 37.94 KB. The file is a digitally signed and issued to Overwolf Ltd by VeriSign. Some variations of the file have been seen to be installed with the program Overwolf from Overwolf Ltd.. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0002% including both foreground and background operations, the average private memory consumption is about 98.11 MB. Addionally, typically read and write I/O disk operations is about 18.16 KB per minute for reads and 638 Bytes per minute for writes.
 Details
|
| File name: | overwolf.exe |
| Publisher: | Overwolf LTD |
| Product name: | Overwolf |
| Typical file path: | C:\Program Files\overwolf\overwolf.exe |
| Certificate |
| Issued to: | Overwolf Ltd |
| Authority (CA): | VeriSign |
Programs installed in
(Note, the programs listed below are for all versions of Overwolf.)
Behaviors
(Note, the behaviors below are for all versions of overwolf.exe, select a unique version for details.)
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Overwolf' → C:\Program Files\Overwolf\Overwolf.exe -silent
All file variations of overwolf.exe
