Additional versions

2, 0, 0, 171	12.50%
2, 0, 0, 69	25.00%
2, 0, 0, 23	25.00%
2, 0, 0, 23	12.50%
2, 0, 0, 2	25.00%

Parent process

Child process

Related files

goforfiles.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including GoforFiles published by Righway Technologies, Inc and GoforFiles published by Righway Technologies, Inc. The file is digitally signed by Righway Technologies which was issued by the COMODO CA Limited certificate authority (CA).

CPU
Total CPU:	0.00371291%	0.028634%
Kernel CPU:	0.00246548%	0.013761%
User CPU:	0.00124743%	0.014873%
Kernel CPU time:	321,327 ms/min	100,923,805ms/min
CPU cycles:	12,298,919/sec	17,470,203/sec
Memory
Private memory:	20.48 MB	21.59 MB
Private (maximum):	23.48 MB
Private (minimum):	7.65 MB
Non-paged memory:	20.48 MB	21.59 MB
Virtual memory:	121.77 MB	140.96 MB
Virtual memory (peak):	129.94 MB	169.69 MB
Working set:	7.76 MB	18.61 MB
Working set (peak):	32.08 MB	37.95 MB
Page faults:	3,468,384/min	2,039/min
I/O
I/O read transfer:	1.15 MB/sec	1.02 MB/min
I/O read operations:	159/sec	343/min
I/O write transfer:	313.24 KB/sec	274.99 KB/min
I/O write operations:	157/sec	227/min
I/O other transfer:	192 Bytes/sec	448.09 KB/min
I/O other operations:	1,118/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	270	600
GUI GDI count:	123	103
GUI GDI peak:	129	142
GUI USER count:	14	49
GUI USER peak:	20	71

GoforFiles.exe (main module)
Total CPU:	0.41917180%	0.272967%
Kernel CPU:	0.26983158%	0.107585%
User CPU:	0.14934022%	0.165382%
CPU cycles:	6,673,764/sec	5,741,424/sec
Memory:	1.68 MB	1.16 MB
ntdll.dll
Total CPU:	0.00013752%
Kernel CPU:	0.00013752%
User CPU:	0.00000000%
CPU cycles:	1,105/sec
Memory:	1.23 MB
WINMM.dll
Total CPU:	0.00009175%
Kernel CPU:	0.00009175%
User CPU:	0.00000000%
CPU cycles:	3,443/sec
Memory:	200 KB