Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
SetSecurityDescriptorDacl, InitializeAcl, AddAccessAllowedAce, GetAclInformation, AddAce, GetAce, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, IsValidSid, GetLengthSid, CopySid, ChangeServiceConfigW, StartServiceW, QueryServiceConfigW, OpenSCManagerW, OpenServiceW, LockServiceDatabase, DeleteService, CreateServiceW, ChangeServiceConfig2W, UnlockServiceDatabase, CloseServiceHandle, QueryServiceStatus, ControlService, OpenThreadToken, OpenProcessToken, GetTokenInformation, ConvertSidToStringSidW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegDeleteKeyW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, StartServiceCtrlDispatcherW
kernel32.dll
CreateMutexW, CreateDirectoryW, GetLocalTime, OpenMutexW, LoadLibraryW, SetEndOfFile, SetFilePointer, GetProcAddress, GetFileAttributesExW, Sleep, GetModuleHandleW, FindResourceW, MultiByteToWideChar, WaitForSingleObject, GetExitCodeThread, GetCurrentThread, GetCurrentProcess, CloseHandle, LocalFree, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, GetLastError, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrlenW, LockResource, SizeofResource, LoadResource, GetUserDefaultLangID, FindResourceExW, GetSystemDefaultLangID, GetModuleFileNameW, LoadLibraryExW, GetUserDefaultLCID, GetSystemDefaultLCID, ReleaseMutex, FreeLibrary, CreateFileA, GetStringTypeW, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, GetStringTypeA, LCMapStringW, LCMapStringA, FlushFileBuffers, GetConsoleMode, GetConsoleCP, SetStdHandle, CreateFileW, WideCharToMultiByte, LoadLibraryA, IsValidCodePage, GetOEMCP, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, HeapAlloc, HeapReAlloc, HeapFree, ExitThread, GetCurrentThreadId, CreateThread, GetProcessHeap, GetStartupInfoW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualFree, VirtualAlloc, HeapDestroy, HeapCreate, GetModuleHandleA, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, HeapSize, RtlUnwind, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetCPInfo, ReadFile
ole32.dll
CoInitializeEx, CoInitializeSecurity, CoImpersonateClient, CoRevertToSelf, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoUninitialize
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
StrRChrW, StrCatW, StrStrIW
user32.dll
CharUpperW, CharNextW, UnregisterClassA

McSACore.exe

SiteAdvisor Enterprise by McAfee (Signed)

Remove McSACore.exe
Version:   3.5.0.724
MD5:   afad61262cc1a36e8b089de9a1a54060
SHA1:   c0f9dbe2f7a0f922165a1eb1a07952cbfe688fae
SHA256:   607423703269b117035cd7db33fd94db8af7e9c0d71e55ed42c16edf5609748d

Overview

mcsacore.exe runs as a service under the name McAfee SiteAdvisor Enterprise Service with extensive SYSTEM privileges (full administrator access). This is typically installed with the program McAfee SiteAdvisor Enterprise published by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:mcsacore.exe
Publisher:McAfee, Inc.
Product name:SiteAdvisor Enterprise
Description:SiteAdvisor
Typical file path:C:\Program Files\mcafee\siteadvisor enterprise\mcsacore.exe
File version:3.5.0.724
Product version:3.5.0.0
Size:173.6 KB (177,768 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Effective date:Wednesday, October 5, 2011
Expiration date:Tuesday, December 31, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
McAfee, Inc.
4% remove
When it comes to web surfing, McAfee SiteAdvisor Enterprise is an indispensable ally, keeping you safe without limiting your access to the Internet. With SiteAdvisor Enterprise, you don't need to impose restrictive policies that keep your employees from using the web for research and business projects. SiteAdvisor Enterprise relies on McAfee Global Threat Intelligence — our cloud-based rating service that continually scans the Internet...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'McAfee SiteAdvisor Enterprise Service'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00003281%
0.028634%
Kernel CPU:0.00002531%
0.013761%
User CPU:0.00000749%
0.014873%
Kernel CPU time:335,440 ms/min
100,923,805ms/min
CPU cycles:10,828/sec
17,470,203/sec
Memory
Private memory:2.7 MB
21.59 MB
Private (maximum):5.45 MB
Private (minimum):2.51 MB
Non-paged memory:2.7 MB
21.59 MB
Virtual memory:62.29 MB
140.96 MB
Virtual memory (peak):66.51 MB
169.69 MB
Working set:3.18 MB
18.61 MB
Working set (peak):7.81 MB
37.95 MB
Page faults:4,691/min
2,039/min
I/O
I/O read transfer:136 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:21 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:13 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:6
12
Handles:154
600

BehaviorsProcess properties

Integrety level:Undefined
Platform:64-bit
Command line:"C:\Program Files\mcafee\siteadvisor enterprise\mcsacore.exe"
Owner:SYSTEM
Windows Service
Service name:McAfee SiteAdvisor Enterprise Service
Description:“Offre une assistance de base pour McAfee SiteAdvisor Enterprise”
Type:Win32OwnProcess
Parent process:services.exe (by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 66.67%
Windows 7 Professional 33.33%

Distribution by countryDistribution by country

Spain installs about 66.67% of SiteAdvisor Enterprise.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE