Should I block it?
60% of PCs block this file from running.
Possible reason:
Performance resource utilization
Additional versions
(Note, Righway Technologies publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
Parent process
Related files
 PE file structure
|
Show functions |
Import table
advapi32.dll
GetTokenInformation
htmlayout.dll
HTMLayoutUpdateWindow
kernel32.dll
GetVersion, InterlockedIncrement, GetModuleFileNameW, GetModuleHandleA, LoadLibraryA, LocalAlloc, LocalFree, GetModuleFileNameA, ExitProcess
ole32.dll
CoUninitialize
shell32.dll
ShellExecuteW
shlwapi.dll
StrStrIW
user32.dll
FindWindowExA
userenv.dll
DestroyEnvironmentBlock
wininet.dll
HttpOpenRequestW
wtsapi32.dll
WTSQueryUserToken
gffupdater.exe
GoforFiles Application by Righway Technologies (Signed)
| Version: | 3, 0, 0, 1 |
| MD5: | 10c7f833d6d01bb643e3a8f17c4ad144 |
| SHA1: | 1b894063f467f3edac65261e3ad1e0c2509d70c3 |
Overview
gffupdater.exe executes as a process with the local user's privileges typically within the context of its parent
services.exe (Services and Controller app by Microsoft). It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). It is installed with a couple of know programs including GoforFiles published by Righway Technologies, Inc, GoforFiles from Righway Technologies, Inc and GoforFiles by Righway Technologies, Inc.
Details
| File name: | gffupdater.exe |
| Publisher: | http://goforfiles.com/ |
| Product name: | GoforFiles Application |
| Description: | GoforFiles Updater Application |
| Typical file path: | C:\Program Files\goforfiles\gffupdater.exe |
| Original name: | GoforFiles.exe |
| File version: | 3, 0, 0, 1 |
| Product version: | 3,0,0,0 |
| Size: | 962 KB (985,088 bytes) |
| Build date: | 9/20/2013 2:14 AM |
| Certificate |
| Issued to: | Righway Technologies |
| Authority (CA): | COMODO CA Limited |
| Expiration date: | Sunday, August 23, 2015 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“It's totally unique. Very simple interface is specifically designed for each and everyone. GoforFiles does not require any specific knowledge to operate it, but combines powerful programming techniques and smart design with functional features. Here is everything to ensure maximum comfort and superb speed with minimum effort. It's all-in-one product. Easy-to-use instant built-in search tool sorts your results according to relevance. Wit...”
|
Righway Technologies, Inc |
|
GoforFiles bundles various adware toolbars including the Delta Search Toolbar (an adware toolbar that modifies the user's web browser home page, search settings and other settings).
Behaviors
Scheduled tasks
- The job 'GoforFilesUpdate' runs on logon in the path '\GoforFilesUpdate'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\GoforFilesUpdate'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| Memory |
| Private memory: | 8.41 MB | |
| Private (maximum): | 1.7 MB | |
| Private (minimum): | 1012 KB | |
| Non-paged memory: | 8.41 MB | |
| Virtual memory: | 86.19 MB | |
| Virtual memory (peak): | 89.2 MB | |
| Working set: | 968 KB | |
| Working set (peak): | 13.02 MB | |
| Resource allocations |
| Threads: | 3 | |
| Handles: | 178 | |
| GUI GDI count: | 28 | |
| GUI GDI peak: | 30 | |
| GUI USER count: | 6 | |
| GUI USER peak: | 8 | |
Process properties
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 Pro Preview |
40.00% |
|
| Windows 7 Ultimate |
40.00% |
|
| Windows 8 Pro |
20.00% |
|
Distribution by country
Saudi Arabia installs about 40.00% of GoforFiles Application.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
66.67% |
|
| Alienware |
33.33% |
|
