RzOvlMon.exe
RzOvlMon by Razer Inc. (Signed)
Overview
There are 2 versions of rzovlmon.exe in the wild, the latest version being 1.0.1.65. It is started as a Windows Service called 'Razer Overlay Subsystem Emergency Service' with the name 'RzOvlMon'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 32.19 KB. The file is a digitally signed and issued to Razer Inc. by VeriSign. Numerous variations of rzovlmon.exe have been installed with both Razer Synapse 2.0 and Razer Core. During the process's lifecycle, the typical CPU resource utilization is about 0.0000% including both foreground and background operations, the average private memory consumption is about 736 KB with the maximum memory reaching around 2.02 MB.
Details |
File name: | rzovlmon.exe |
Publisher: | Razer, Inc. |
Product name: | RzOvlMon |
Description: | Monitor Razer Overlay Driver Service |
Typical file path: | C:\Program Files\razer\core\64bit\rzovlmon.exe |
Certificate |
Issued to: | Razer Inc. |
Authority (CA): | VeriSign |
Effective date: | Thursday, September 12, 2013 |
Expiration date: | Tuesday, August 2, 2016 |
Windows Service |
Service name: | RzOvlMon |
Display name: | Razer Overlay Subsystem Emergency Service |
Type: | Win32OwnProcess |
Programs installed in
(Note, the programs listed below are for all versions of RzOvlMon.)
“Set-up instantly from the cloud with the world’s first cloud-based setting network for gamers. With Razer Synapse 2.0, your gaming preferences for all your Razer devices are locked and loaded anywhere...”
Behaviors
(Note, the behaviors below are for all versions of rzovlmon.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'RzOvlMon' (Razer Overlay Subsystem Emergency Service)
All file variations of rzovlmon.exe