home

nuuveminstaller.exe

Overwolf Installer

Overwolf Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from download.overwolf.com.
Publisher:
Overwolf  (signed by Overwolf Ltd)

Product:
Overwolf Installer

Version:
1.30.4693.31587

MD5:
d773e1057fb33061868171dea535ccfc

SHA-1:
06407b91a1a309d1e3c1d9cf2162539322f85429

SHA-256:
9645cb0395264f911720dccf3eef8ae454776f1fbea1806e60290e09e8ac4bde

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:29:30 AM UTC  (today)

File size:
992.4 KB (1,016,248 bytes)

Product version:
1.30.4693.31587

Copyright:
Copyright © Overwolf 2011

Original file name:
OWInstaller.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\nuuveminstaller.exe

Digital Signature
Signed by:
Overwolf Ltd

Authority:
COMODO CA Limited

Valid from:
12/25/2011 10:00:00 PM

Valid to:
2/10/2014 9:59:59 PM

Subject:
CN=Overwolf Ltd, O=Overwolf Ltd, STREET=Halechi 27 st., L=Bnei Berak, S=Tel Aviv, PostalCode=51200, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
02E4635116A814330262E360005D60EB

File PE Metadata
Compilation timestamp:
11/6/2012 3:37:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:ScoWS36tMqxNe3i/Godeep1rmfZh/wzLvd+Y0irjU/urmhxw8/klqxNePD:GWSIk3TUrSh/wzLvd+Y0irg/dtk+kPD

Entry address:
0xEB246

Entry point:
FF, 25, 54, B2, 4E, 00, 00, 00, 00, 00, 00, 00, 00, 00, 28, B2, 0E, 00, 00, 00, 00, 00, 00, 00, 00, 00, D1, 4A, 99, 50, 00, 00, 00, 00, 02, 00, 00, 00, 84, 00, 00, 00, 78, B2, 0E, 00, 78, 94, 0E, 00, 52, 53, 44, 53, 38, 09, 81, FA, E0, 59, 72, 40, 92, 33, 77, E0, BD, ED, 18, 62, 01, 00, 00, 00, 43, 3A, 5C, 4F, 76, 65, 72, 77, 6F, 6C, 66, 5C, 53, 6F, 75, 72, 63, 65, 5C, 4F, 76, 65, 72, 77, 6F, 6C, 66, 5C, 49, 6E, 73, 74, 61, 6C, 6C, 65, 72, 4E, 65, 78, 74, 56, 65, 72, 5C, 53, 6F, 75, 72, 63, 65, 5C, 4F, 57...
 
[+]

Code size:
933 KB (955,392 bytes)

The file nuuveminstaller.exe has been seen being distributed by the following URL.

http://download.overwolf.com/NuuvemInstaller.exe

Scan nuuveminstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.