Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

blekkoantiphishing.dll (blekko Anti-phishing by Visicom Media Inc.)

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExA, RegCloseKey, RegOpenKeyA, GetSecurityDescriptorSacl, SetSecurityInfo, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegDeleteValueA, RegCreateKeyExA, RegQueryValueExA, RegSetValueExA

kernel32.dll

UnmapViewOfFile, FreeLibrary, GetTickCount, WriteFile, InitializeCriticalSection, Sleep, CreateDirectoryA, FindFirstFileA, GetProcAddress, RemoveDirectoryA, CopyFileA, FindClose, LoadLibraryA, CreateFileMappingA, MoveFileA, FindNextFileA, GetModuleHandleA, DeleteCriticalSection, CloseHandle, DeleteFileA, GetCurrentProcess, GlobalAlloc, GetLastError, GlobalFree, OpenMutexA, GetModuleFileNameA, CreateMutexA, GetVersionExA, LocalFree, SetFilePointer, SystemTimeToFileTime, MapViewOfFile, GetFileAttributesA, ReadFile, GetCurrentDirectoryA, LocalFileTimeToFileTime, GetStringTypeW, GetStringTypeA, FlushFileBuffers, SetStdHandle, GetLocaleInfoA, GetCurrentProcessId, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetConsoleMode, GetConsoleCP, LCMapStringW, MultiByteToWideChar, WideCharToMultiByte, LCMapStringA, IsValidCodePage, GetOEMCP, GetACP, CreateFileA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, GetProcessHeap, SetFileTime, GetCPInfo, HeapReAlloc, VirtualAlloc, GetModuleHandleW, ExitProcess, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetCommandLineA, GetStartupInfoA, RaiseException, RtlUnwind, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, GetStdHandle, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSectionAndSpinCount, HeapSize, SetHandleCount, GetFileType, HeapCreate, VirtualFree

shell32.dll

SHGetFolderPathA, ShellExecuteA

user32.dll

wsprintfA, MessageBoxIndirectA, IsDialogMessageA, TranslateMessage, PeekMessageA, GetDesktopWindow, GetLastInputInfo, DispatchMessageA

version.dll

VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA

wininet.dll

HttpSendRequestA, InternetConnectA, HttpQueryInfoA, InternetOpenA, InternetCloseHandle, InternetReadFile, HttpOpenRequestA

blekkoantiphishing.exe

blekko Anti-phishing by Visicom Media Inc. (Signed)

Remove blekkoantiphishing.exe

Version:	1, 0, 1, 35
MD5:	a4ada5bc52310f100c29f3021a62db91
SHA1:	c99fb18de3e6a9f142553d9804e05f550c46e271
SHA256:	2016d5d318f4eaf16294bfc02ae1b11fb4a38f09e4966f627f10a51bf74447b5

Overview

blekkoantiphishing.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program blekko Anti-Phishing published by Visicom Media inc. and is most likely removed by most users once installed (70% removed). The file is digitally signed by Visicom Media Inc. which was issued by the Thawte certificate authority (CA).

Details

File name:	blekkoantiphishing.exe
Publisher:	blekko Anti-Phishing (Powered by Panda Security)
Product name:	blekko Anti-phishing
Description:	blekko Anti-phishing (Powered by Panda Security)
Typical file path:	C:\ProgramData\blekko anti-phishing\blekkoantiphishing.exe
File version:	1, 0, 1, 35
Product version:	1.0
Size:	217.63 KB (222,856 bytes)
Certificate
Issued to:	Visicom Media Inc.
Authority (CA):	Thawte
Effective date:	Tuesday, April 17, 2012
Expiration date:	Saturday, June 21, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

blekko Anti-Phishing

Visicom Media inc.

70% remove

blekko Anti-Phishing is a bundled installation of the Visicom Media Anti-phishing Domain Advisor powered by Panda. The Visicom Anti-phishing Domain Advisor Toolbar, powered by Panda Security, will analyze the current web sites you are visiting against a URL database and determine if the site is a potential phishing threat. The toolbar is also included in both Panda Cloud Antivirus free and paid version.

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'blekko Anti-Phishing' → "C:\ProgramData\blekko Anti-Phishing\blekkoAntiphishing.exe"

Network connections

[TCP] 173.45.161.117:80

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00074760%	0.028634%
Kernel CPU:	0.00070504%	0.013761%
User CPU:	0.00004256%	0.014873%
Kernel CPU time:	70,762 ms/min	100,923,805ms/min
Memory
Private memory:	6.79 MB	21.59 MB
Private (maximum):	56.84 MB
Private (minimum):	364 KB
Non-paged memory:	6.79 MB	21.59 MB
Virtual memory:	119.64 MB	140.96 MB
Virtual memory (peak):	155.95 MB	169.69 MB
Working set:	19.54 MB	18.61 MB
Working set (peak):	85.18 MB	37.95 MB
Resource allocations
Threads:	3	12
Handles:	204	600
GUI GDI count:	9	103
GUI GDI peak:	9	142
GUI USER count:	2	49
GUI USER peak:	3	71

Process properties

Integrety level:	High
Platform:	32-bit
Command line:	"C:\ProgramData\blekko anti-phishing\blekkoantiphishing.exe"
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	50.00%
Windows 7 Ultimate	50.00%

Distribution by country

Pakistan installs about 50.00% of blekko Anti-phishing.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	66.67%
Hewlett-Packard	33.33%

Remove Adware and Spyware Programs, FREE Download!