Should I block it?
No, this file is 100% safe to run.
Additional versions
| 3,7,0,190 |
1.86% |
|
| 3,7,0,190 |
1.86% |
|
| 3,6,6,129 |
6.12% |
|
| 3,6,6,129 |
4.26% |
|
| 3,6,4,160 |
1.06% |
|
| 3,6,4,160 |
0.27% |
|
| 3,6,3,549 |
7.45% |
|
| 3,6,3,549 |
4.52% |
|
| 3,6,3,489 |
0.27% |
|
| 3,6,3,489 |
0.27% |
|
| 3,6,2,196 |
1.86% |
|
| 3,6,2,196 |
1.33% |
|
| 3,6,2,168 |
6.12% |
|
| 3,6,2,168 |
3.19% |
|
| 3,6,0,187 |
17.82% |
|
| 3,6,0,187 |
9.04% |
|
| 3,6,0,165 |
0.27% |
|
| 3,6,0,164 |
0.27% |
|
| 3,6,0,164 |
0.27% |
|
| 3,5,0,229 |
19.41% |
|
| 3,5,0,229 |
9.31% |
|
| 3,5,0,227 |
0.27% |
|
| 3,4,1,195 |
1.60% |
|
| 3,4,1,195 |
0.80% |
|
| 2,9,0,242 |
0.27% |
|
| 2,8,0,306 |
0.27% |
|
Relationships
 PE file structure
|
Show functions |
Import table
advapi32.dll
RegOpenKeyExW, RegCloseKey, RegQueryValueExW
kernel32.dll
lstrlenW, GetPrivateProfileIntW, InterlockedExchange, GetLastError, GetProcAddress, DisableThreadLibraryCalls, lstrcmpiW, lstrcatW, GetModuleFileNameW, lstrcpyW, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, RtlUnwind, TerminateProcess, GetVersionExW, LoadLibraryW, CloseHandle, CreateMutexW, IsProcessorFeaturePresent
ole32.dll
CoUninitialize, CoCreateInstance, CoInitializeEx
user32.dll
UnhookWindowsHookEx, SetWindowsHookExW, GetClassNameW, DispatchMessageW, GetMessageW, CallNextHookEx, TranslateMessage
Export table
saHooker_Initialize
saHooker_Initialize_and_Wait
saHooker_Uninitialize
saHook.dll
McAfee SiteAdvisor by McAfee (Signed)
| Version: | 3,6,3,489 |
| MD5: | dfa1744c667a025144471dc68e835d32 |
| SHA1: | d250158cc9453be8e3eb3478d6cc23118f21fbfa |
| SHA256: | 7feaa81e243d923215569225268d1e13667e154254340c30e1fbe05e095eeb1a |
What is saHook.dll?
SiteAdvisor is a service that reports on the safety of web sites by crawling the web and testing the sites it finds for malware and spam. The functionality of SiteAdvisor can be accessed either through a Browser Plugin or by submitting a URL to the website. SiteAdvisor only rates sites based on the risk of malware or spam.
About saHook.dll (from McAfee)
“McAfee SiteAdvisor software is a free browser plug-in that provides simple Web site safety ratings and a Secure Search box so you can surf, search and shop more safely. With SiteAdvisor software insta”
Details
| File name: | sahook.dll |
| Publisher: | McAfee, Inc. |
| Product name: | McAfee SiteAdvisor |
| Description: | SiteAdvisor |
| Typical file path: | C:\Program Files\McAfee\SiteAdvisor\sahook.dll |
| File version: | 3,6,3,489 |
| Product version: | 3,6,3,0 |
| Size: | 17.22 KB (17,632 bytes) |
| Certificate |
| Issued to: | McAfee |
| Authority (CA): | VeriSign |
| Expiration date: | Tuesday, December 31, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
SiteAdvisor is a service that reports on the safety of web sites by crawling the web and testing the sites it finds for malware and spam. A paid version of McAfee SiteAdvisor, McAfee SiteAdvisor Plus, has extra features. The functionality of SiteAdvisor can be accessed either through a Browser Plugin or by submitting a URL to the website. In addition to selling to the end consumers, McAfee also sells to the web site owners with their Mc...
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00001073% | |
| Kernel CPU: | 0.00001073% | |
| Kernel CPU time: | 16 ms/min | |
| Memory |
| Private memory: | 1.47 MB | |
| Private (maximum): | 4.03 MB | |
| Private (minimum): | 3.94 MB | |
| Non-paged memory: | 1.47 MB | |
| Virtual memory: | 48.86 MB | |
| Virtual memory (peak): | 51.33 MB | |
| Working set: | 4.02 MB | |
| Working set (peak): | 4.09 MB | |
| Resource allocations |
| Threads: | 2 | |
| Handles: | 55 | |
| GUI GDI count: | 12 | |
| GUI GDI peak: | 12 | |
| GUI USER count: | 4 | |
| GUI USER peak: | 4 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 64-bit |
| Command line: | "C:\Windows\System32\rundll32.exe" "C:\progra~2\mcafee\sitead~1\sahook.dll", sahooker_initialize_and_wait |
| Owner: | SYSTEM |
| Parent process: | sahook.dll (McAfee SiteAdvisor by McAfee) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
48.50% |
|
| Windows 8.1 Single Language |
10.50% |
|
| Windows 8 |
10.50% |
|
| Windows 8.1 |
5.00% |
|
| Windows 7 Professional |
4.00% |
|
| Windows Vista Home Premium |
4.00% |
|
| Windows 8 Pro |
4.00% |
|
| Windows 7 Home Basic |
3.50% |
|
| Microsoft Windows XP |
2.50% |
|
| Windows 8.1 Pro with Media Center |
2.50% |
|
| Windows 8 Single Language |
2.50% |
|
| Windows Vista Home Basic |
1.50% |
|
| Windows 7 Starter |
1.00% |
|
Distribution by country
United States installs about 52.00% of McAfee SiteAdvisor.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
23.74% |
|
| Acer |
19.78% |
|
| Hewlett-Packard |
13.67% |
|
| Toshiba |
12.23% |
|
| Sony |
11.51% |
|
| ASUS |
7.19% |
|
| NEC |
5.76% |
|
| Lenovo |
3.60% |
|
| GIGABYTE |
1.80% |
|
| American Megatrends |
0.72% |
|
