Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3,6,6,129 1.54%
3,6,4,128 1.54%
3,6,4,127 1.54%
3,6,3,330 7.69%
3,6,3,330 7.69%
3,6,2,124 7.69%
3,6,0,137 13.85%
3,6,0,137 23.08%
3,6,0,134 1.54%
3,6,0,134 1.54%
3,5,0,159 13.85%
3,5,0,159 10.77%
3,4,1,118 1.54%
3,4,1,118 1.54%
3,3,1,102 1.54%
2,9,0,242 1.54%
2,8,0,306 1.54%

Relationships

Parent process
Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
StartServiceW, GetAce, AddAce, GetAclInformation, InitializeAcl, AddAccessAllowedAce, GetTokenInformation, OpenThreadToken, OpenProcessToken, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, IsValidSid, GetLengthSid, CopySid, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, StartServiceCtrlDispatcherW, OpenSCManagerW, QueryServiceConfigW, OpenServiceW, ChangeServiceConfig2W, CreateServiceW, DeleteService, LockServiceDatabase, ControlService, QueryServiceStatus, ChangeServiceConfigW, CloseServiceHandle, UnlockServiceDatabase, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, CreateProcessAsUserW, DuplicateTokenEx, RegEnumValueW, ConvertSidToStringSidW, RegisterServiceCtrlHandlerExW, RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteKeyW, RegOpenKeyW, RegCreateKeyW, GetSecurityDescriptorLength, RegSetValueExA, ConvertStringSecurityDescriptorToSecurityDescriptorW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, LookupAccountNameW
crypt32.dll
CryptMsgClose, CertFreeCertificateChain, CertGetSubjectCertificateFromStore, CryptMsgGetParam, CryptQueryObject, CertGetNameStringW, CertVerifyCertificateChainPolicy, CertGetCertificateChain, CertGetCertificateContextProperty, CryptDecodeObject, CertCloseStore, CertFreeCertificateContext
kernel32.dll
GetCurrentThread, GetCurrentProcess, FreeLibrary, LoadLibraryW, GetProcAddress, CloseHandle, GetTickCount, CreateDirectoryW, lstrlenW, Sleep, GetFileAttributesExW, GetLastError, GetModuleFileNameW, CreateFileA, ReadFile, GetProcessHeap, SetEndOfFile, GetStringTypeW, GetStringTypeA, LCMapStringW, HeapAlloc, HeapFree, GetStartupInfoW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualFree, VirtualAlloc, HeapReAlloc, HeapCreate, GetModuleHandleW, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, RtlUnwind, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapSize, RaiseException, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, InitializeCriticalSectionAndSpinCount, LoadLibraryA, SetStdHandle, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, FlushFileBuffers, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, MultiByteToWideChar, CreateFileW, GetLocaleInfoA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetFilePointer, LCMapStringA, IsBadCodePtr, IsBadReadPtr, WaitForMultipleObjects, CreateProcessW, OpenProcess, lstrcmpW, GetUserDefaultLangID, GetUserDefaultLCID, GetSystemDefaultLangID, GetCommandLineA, GetEnvironmentStrings, FreeEnvironmentStringsA, lstrlenA, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, SetEvent, CreateEventW, CreateThread, InitializeCriticalSection, WaitForSingleObject, GetModuleHandleA, GetThreadLocale, InterlockedExchange, HeapDestroy, SetCurrentDirectoryW, LocalFree, LoadLibraryExW, OutputDebugStringW, lstrcmpiW, GetVersionExW, GetVersionExA, GetSystemDefaultLCID, OpenEventW, GetExitCodeProcess, ReadConsoleW, SetFilePointerEx, EncodePointer, DecodePointer, GetModuleHandleExW, IsProcessorFeaturePresent
ole32.dll
CoInitializeEx, CoInitializeSecurity, CoUninitialize, CoCreateInstance, CoResumeClassObjects, CoRegisterClassObject, CoSuspendClassObjects, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, StringFromGUID2, CoImpersonateClient, CoRevertToSelf, CoRevokeClassObject
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
StrCatW, StrStrIW, StrRChrW, StrSpnW, StrCmpW
urlmon.dll
CoInternetParseUrl
user32.dll
CharUpperW, CharNextW, UnregisterClassA, MessageBoxW, CharLowerBuffW, LoadStringW, PostThreadMessageW, GetMessageW, DispatchMessageW, TranslateMessage, MsgWaitForMultipleObjects, PeekMessageW
userenv.dll
CreateEnvironmentBlock
wintrust.dll
WinVerifyTrust
wtsapi32.dll
WTSEnumerateProcessesW, WTSFreeMemory

mcsacore.exe

McAfee SiteAdvisor by McAfee (Signed)

Remove mcsacore.exe
Version:   3,5,0,159
MD5:   c226ce46cd17fce6261a9de406f01c8b
SHA1:   2de946cea6a7801aa659e3df86635d75845758fb
SHA256:   b55b42d6ada66f04a669ad8590af5db5509f8580d92a1ac016f451b64a655cf5

What is mcsacore.exe?

SiteAdvisor is a service that reports on the safety of web sites by crawling the web and testing the sites it finds for malware and spam. The functionality of SiteAdvisor can be accessed either through a Browser Plugin or by submitting a URL to the website. SiteAdvisor only rates sites based on the risk of malware or spam.

About mcsacore.exe (from McAfee)

“McAfee SiteAdvisor software is a free browser plug-in that provides simple Web site safety ratings and a Secure Search box so you can surf, search and shop more safely. With SiteAdvisor software insta”

DetailsDetails

File name:McSACore.exe
Publisher:McAfee, Inc.
Product name:McAfee SiteAdvisor
Description:SiteAdvisor
Typical file path:C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
File version:3,5,0,159
Product version:3,5,0,0
Size:93 KB (95,232 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Expiration date:Tuesday, December 31, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
McAfee Internet Security
 McAfee, Inc.
7% remove
McAfee VirusScan is an antivirus program created and maintained by McAfee Inc. McAfee markets VirusScan to home and home-office users; McAfee also develops VirusScan Enterprise for use in corporate environments. The product is not available as a standalone package, but is included in the McAfee VirusScan Plus package or as part of McAfee Internet Security Suite.
McAfee AntiVirus Plus
 McAfee, Inc.
5% remove
“Our powerful combination of performance, accuracy, and reinforcing protections keeps criminals away from your PC and data. From startup to on-access scans, get high performance to minimize scan times and extend battery life. Find and seal up holes in Windows and your favorite browsers and applications. Block threats like viruses, Trojans, and spyware in your files, email, and web downloads using instant risk assessments through the clou...”
McAfee SecurityCenter
 McAfee, Inc.
19% remove
“With McAfee’s Security-as-a-Service solutions protecting your systems and email, log into the McAfee SecurityCenter online management console for complete visibility reports and flexible policy settings. Maintained by McAfee so you won’t have to invest in additional on-premises infrastructure, the McAfee SecurityCenter details company-wide protection information such as coverage, status summary, desktops updated, viruses cleaned, spywar...”
McAfee SiteAdvisor
 McAfee, Inc.
10% remove
SiteAdvisor is a service that reports on the safety of web sites by crawling the web and testing the sites it finds for malware and spam. A paid version of McAfee SiteAdvisor, McAfee SiteAdvisor Plus, has extra features. The functionality of SiteAdvisor can be accessed either through a Browser Plugin or by submitting a URL to the website. In addition to selling to the end consumers, McAfee also sells to the web site owners with their Mc...
McAfee Internet Security Suite
 McAfee, Inc.
6% remove
“McAfee Internet Security software provides comprehensive PC and identity protection to keep users safe from online threats, and also shields them from risky Web sites. It offers antivirus, anti-spyware, anti-phishing and two-way firewall protection. Additionally, it includes anti-spam, parental controls, 1 GB of online backup and SiteAdvisor, a powerful Web site safety advisor so consumers can safely surf the Web.”
Verizon Internet Security Suite
 McAfee, Inc.
4% remove
“Help protect your computers from online threats with this sophisticated suite of products designed specifically with your computer usage in mind. Automatic updates and scheduled virus and spyware scans give you the consistent coverage you need against new online risks. Special features include Verizon SiteAdvisor, a powerful website monitoring tool that warns you when you’re about to visit potentially risky websites – and Family Protect...”
McAfee Total Protection
 McAfee, Inc.
7% remove
“Safely connect online knowing all your devices are protected from malicious websites, hackers, scammers, and identity thieves. Our security experts are just one phone call away. We can help remove viruses, spyware and or malicious programs and get your PC up and running the way it should. Safeguard your identity and personal files, which viruses often leak to hackers and identity thieves. Sit back and relax while our experts securely co...”

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'McAfee SiteAdvisor Service'
Network connections
  • [TCP] 8.21.161.10:443
  • [TCP] dss1.siteadvisor.com (161.69.13.141:443)

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.01530569%
    0.028634%
    Kernel CPU:0.00651155%
    0.013761%
    User CPU:0.00879414%
    0.014873%
    Kernel CPU time:2,101,182 ms/min
    100,923,805ms/min
    Context switches:2/sec
    284/sec
    Memory
    Private memory:19.98 MB
    21.59 MB
    Private (maximum):9.6 MB
    Private (minimum):3.93 MB
    Non-paged memory:19.98 MB
    21.59 MB
    Virtual memory:93.45 MB
    140.96 MB
    Virtual memory (peak):99.73 MB
    169.69 MB
    Working set:5.88 MB
    18.61 MB
    Working set (peak):12.11 MB
    37.95 MB
    Page faults:57,142/min
    2,039/min
    I/O
    I/O read transfer:7.17 KB/sec
    1.02 MB/min
    I/O read operations:2/sec
    343/min
    I/O write transfer:1.14 KB/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:509 Bytes/sec
    448.09 KB/min
    I/O other operations:10/sec
    1,671/min
    Resource allocations
    Threads:13
    12
    Handles:401
    600
    GUI GDI count:5
    103
    GUI USER count:7
    49

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:C:\progra~1\mcafee\sitead~1\mcsacore.exe
    Owner:SYSTEM
    Windows Service
    Service name:McAfee SiteAdvisor Service
    Description:“McAfee SiteAdvisor Service”
    Type:Win32OwnProcess
    Parent process:services.exe (Microsoft Windows Operating System by Microsoft)

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.01093517%
    0.272967%
    Kernel CPU:0.00489615%
    0.107585%
    User CPU:0.00603902%
    0.165382%
    CPU cycles:427,748/sec
    5,741,424/sec
    Memory:1.23 MB
    1.16 MB
    SaSSHMod.dll (McAfee SiteAdvisor by McAfee)
    Total CPU:0.00228878%
    Kernel CPU:0.00132840%
    User CPU:0.00096037%
    CPU cycles:31,048/sec
    Memory:1.91 MB
    ole32.dll
    Total CPU:0.00061849%
    Kernel CPU:0.00061849%
    User CPU:0.00000000%
    CPU cycles:24,764/sec
    Memory:1.36 MB
    xpsp2res.dll
    Total CPU:0.00059339%
    Kernel CPU:0.00020462%
    User CPU:0.00038877%
    Memory:5.29 MB
    mcsacore.exe (main module)
    Total CPU:0.00048087%
    Kernel CPU:0.00048087%
    User CPU:0.00000000%
    CPU cycles:6,162/sec
    Memory:108 KB
    sechost.dll
    Total CPU:0.00045237%
    Kernel CPU:0.00000000%
    User CPU:0.00045237%
    CPU cycles:12,337/sec
    Memory:100 KB
    advapi32.dll (Advanced Windows 32 Base API by Microsoft)
    Total CPU:0.00011403%
    Kernel CPU:0.00005701%
    User CPU:0.00005701%
    Memory:620 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 30.77%
    Microsoft Windows XP 16.92%
    Windows Vista Home Premium 15.38%
    Windows 7 Professional 7.69%
    Windows 8 6.15%
    Windows 7 Home Basic 4.62%
    Windows 7 Ultimate 4.62%
    Windows 8.1 3.08%
    Windows 8 Pro 3.08%
    Windows 8.1 Single Language 1.54%
    Windows Vista Home Basic 1.54%
    Windows 7 Starter 1.54%
    Windows 7 Ultimate N 1.54%
    Windows 8 Release Preview 1.54%

    Distribution by countryDistribution by country

    United States installs about 51.56% of McAfee SiteAdvisor.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 38.96%
    Hewlett-Packard 18.18%
    Sony 15.58%
    Lenovo 10.39%
    ASUS 5.19%
    Acer 3.90%
    GIGABYTE 2.60%
    American Megatrends 2.60%
    NEC 2.60%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE