Additional versions

2, 0, 0, 6	75.00%
2,0,0,0	25.00%

Parent process

Related files

Warning 4 antivirus scanners has detected malware.

goforfilesdl.exe is malware that executes as a process with the local user's privileges typically within the context of its parent goforfiles.exe (GoforFiles Application by Righway Technologies). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including GoforFiles published by Righway Technologies, Inc, GoforFiles from Righway Technologies, Inc and GoforFiles by Righway Technologies, Inc.

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.

CPU
Total CPU:	0.00419980%	0.028634%
Kernel CPU:	0.00216890%	0.013761%
User CPU:	0.00203090%	0.014873%
Kernel CPU time:	1,075,527,335 ms/min	100,923,805ms/min
CPU cycles:	21,561,664/sec	17,470,203/sec
Memory
Private memory:	34.49 MB	21.59 MB
Private (maximum):	40.09 MB
Private (minimum):	31.88 MB
Non-paged memory:	34.49 MB	21.59 MB
Virtual memory:	136.6 MB	140.96 MB
Virtual memory (peak):	147.79 MB	169.69 MB
Working set:	39.81 MB	18.61 MB
Working set (peak):	40.19 MB	37.95 MB
Page faults:	262,846/min	2,039/min
I/O
I/O read transfer:	25.3 MB/sec	1.02 MB/min
I/O read operations:	1,636/sec	343/min
I/O write transfer:	8.29 MB/sec	274.99 KB/min
I/O write operations:	615/sec	227/min
I/O other transfer:	6 MB/sec	448.09 KB/min
I/O other operations:	5,868/sec	1,671/min
Resource allocations
Threads:	10	12
Handles:	245	600
GUI GDI count:	54	103
GUI GDI peak:	65	142
GUI USER count:	12	49
GUI USER peak:	30	71

goforfilesdl.exe (main module)
Total CPU:	0.44292680%	0.272967%
Kernel CPU:	0.21423998%	0.107585%
User CPU:	0.22868682%	0.165382%
CPU cycles:	9,755,578/sec	5,741,424/sec
Memory:	4.42 MB	1.16 MB
WINMM.dll
Total CPU:	0.00031032%
Kernel CPU:	0.00031032%
User CPU:	0.00000000%
CPU cycles:	1,641/sec
Memory:	200 KB