Should I block it?

40%

40% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

1, 0, 1, 35	42.86%
1, 0, 1, 34	42.86%
1, 0, 1, 34	14.29%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW, RegCloseKey, RegOpenKeyA, GetSecurityDescriptorSacl, SetSecurityInfo, RegDeleteValueA, RegOpenKeyExA, RegCreateKeyExA, RegQueryValueExA, RegSetValueExA

kernel32.dll

UnmapViewOfFile, FreeLibrary, GetTickCount, WriteFile, InitializeCriticalSection, Sleep, CreateDirectoryA, FindFirstFileA, GetProcAddress, RemoveDirectoryA, CopyFileA, FindClose, LoadLibraryA, CreateFileMappingA, MoveFileA, FindNextFileA, DeleteCriticalSection, CloseHandle, DeleteFileA, GlobalAlloc, GetLastError, GlobalFree, OpenMutexA, GetModuleFileNameA, CreateMutexA, GetVersionExA, LocalFree, SetFilePointer, SystemTimeToFileTime, MapViewOfFile, GetFileAttributesA, ReadFile, GetCurrentDirectoryA, LocalFileTimeToFileTime, GetStringTypeW, GetStringTypeA, FlushFileBuffers, SetStdHandle, GetLocaleInfoA, GetCurrentProcessId, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetConsoleMode, GetConsoleCP, LCMapStringW, MultiByteToWideChar, WideCharToMultiByte, LCMapStringA, IsValidCodePage, GetOEMCP, CreateFileA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, GetProcessHeap, SetFileTime, GetACP, GetCPInfo, HeapReAlloc, GetModuleHandleW, ExitProcess, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, GetSystemTimeAsFileTime, GetCommandLineA, GetStartupInfoA, RaiseException, RtlUnwind, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, GetStdHandle, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSectionAndSpinCount, HeapSize, SetHandleCount, GetFileType, HeapCreate, VirtualFree, VirtualAlloc, GetModuleHandleA

shell32.dll

SHGetFolderPathA, ShellExecuteA

user32.dll

wsprintfA, IsDialogMessageA, TranslateMessage, PeekMessageA, GetLastInputInfo, DispatchMessageA, MessageBoxIndirectA, GetDesktopWindow

version.dll

VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA

wininet.dll

HttpSendRequestA, InternetConnectA, HttpQueryInfoA, InternetOpenA, InternetCloseHandle, InternetReadFile, HttpOpenRequestA

panda_url_filtering.exe

Anti-phishing Domain Advisor by Visicom Media Inc. (Signed)

Remove panda_url_filtering.exe

Version:	1, 0, 1, 34
MD5:	ec77a9c79065e4f85c8b7bd5a9a52dda
SHA1:	5b5640e62578717311fcf65523f8f037c8fb38b2
SHA256:	f75920ca97f70a4b06c167820863b9fecb72016414a42e161c5e512876eff1f3

What is panda_url_filtering.exe?

Visicom Media Anti-phishing Domain Advisor (Powered by Panda Security)

About panda_url_filtering.exe (from Visicom Media Inc.)

“The Anti-phishing Domain Advisor ensures you navigate the Web safely by protecting you from "phishing sites" (copycats of legitimate sites that steal your personal info) or "malware sites" designed to”

Overview

panda_url_filtering.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Panda Security URL Filtering published by Panda Security and Panda Security URL Filtering published by Panda Security. The file is digitally signed by Visicom Media Inc. which was issued by the Thawte certificate authority (CA).

Details

File name:	panda_url_filtering.exe
Publisher:	Panda Security
Product name:	Anti-phishing Domain Advisor
Description:	Visicom Media Anti-phishing Domain Advisor (Powered by Panda Security)
Typical file path:	C:\ProgramData\panda security url filtering\panda_url_filtering.exe
File version:	1, 0, 1, 34
Product version:	1.0
Size:	212.16 KB (217,256 bytes)
Certificate
Issued to:	Visicom Media Inc.
Authority (CA):	Thawte
Expiration date:	Saturday, June 21, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Panda Security URL Filtering

Panda Security

60% remove

The Panda Security Toolbar is a free optional toolbar that comes with Panda Cloud. The toolbar provides web filtering along with some features that may come in handy for users. The toolbar works on Internet Explorer and Firefox only. The URL/Web filtering component is compatible with all major web-browsers though. If you do not like toolbars open add and remove programs and uninstall the program Panda Security toolbar. This will keep we...

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Panda Security URL Filtering' → "C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe"

Network connections

[TCP] 2.18.178.16:80

[TCP] visicom-47.nationalnet.com (66.115.174.8:80)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.14219406%	0.028634%
Kernel CPU:	0.06288013%	0.013761%
User CPU:	0.07931393%	0.014873%
Kernel CPU time:	622 ms/min	100,923,805ms/min
Context switches:	9/sec	284/sec
Memory
Private memory:	5.55 MB	21.59 MB
Private (maximum):	25.77 MB
Private (minimum):	7.9 MB
Non-paged memory:	5.55 MB	21.59 MB
Virtual memory:	117.72 MB	140.96 MB
Virtual memory (peak):	161.55 MB	169.69 MB
Working set:	5.87 MB	18.61 MB
Working set (peak):	96.61 MB	37.95 MB
Resource allocations
Threads:	5	12
Handles:	336	600
GUI GDI count:	7	103
GUI GDI peak:	9	142
GUI USER count:	2	49
GUI USER peak:	3	71

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command lines:	"C:\Documents and Settings\user\Application data\panda security url filtering\panda_url_filtering.exe" "C:\ProgramData\panda security url filtering\panda_url_filtering.exe"
Owner:	User
Parent process:	Explorer.EXE (Windows Explorer by Microsoft)

Threads