Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1,0,2,155 50.00%
1,0,1,204 50.00%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueW, CryptDestroyKey, RegCloseKey, RegSetValueExW, CryptHashData, RegCreateKeyExW, CryptEncrypt, CryptDeriveKey, CryptReleaseContext, CryptCreateHash, CryptDecrypt, ConvertStringSecurityDescriptorToSecurityDescriptorW, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, LookupAccountNameW, GetUserNameW, GetSecurityDescriptorDacl, InitializeAcl, OpenProcessToken, ConvertSidToStringSidW, GetTokenInformation, OpenThreadToken, ImpersonateLoggedOnUser, RevertToSelf, CryptGetHashParam, CryptAcquireContextW, CryptDestroyHash, RegOpenKeyExW
crypt32.dll
CertGetCertificateChain, CertCloseStore, CertGetCertificateContextProperty, CryptMsgGetParam, CryptQueryObject, CertGetNameStringW, CertVerifyCertificateChainPolicy, CertFreeCertificateChain, CryptMsgClose, CertFreeCertificateContext, CertGetSubjectCertificateFromStore, CryptDecodeObject
kernel32.dll
CreateDirectoryW, WideCharToMultiByte, MultiByteToWideChar, InterlockedDecrement, MapViewOfFile, CreateMutexW, OpenEventW, LocalAlloc, OpenMutexW, CreateFileMappingW, ResetEvent, UnmapViewOfFile, ReleaseMutex, lstrlenW, lstrcpyW, InterlockedIncrement, GetFileSize, GetTempFileNameW, ReadFile, WriteFile, SetFilePointer, GetTempPathW, LocalFree, GetCurrentThread, GetCurrentProcess, GetModuleFileNameW, GetVersionExW, GlobalFree, GetFileAttributesW, GetTickCount, FindFirstFileW, FindClose, SetFileAttributesW, FindNextFileW, GetSystemTime, SystemTimeToFileTime, CreateFileW, DeleteFileW, CloseHandle, SetEvent, CreateEventW, FreeLibrary, WaitForSingleObject, LoadLibraryW, GetProcAddress, GetLastError, Sleep, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, GetCurrentProcessId, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetTimeZoneInformation, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetStartupInfoA, GetFileType, SetHandleCount, HeapSize, IsValidCodePage, GetOEMCP, GetACP, HeapReAlloc, VirtualAlloc, VirtualFree, VirtualQuery, LoadLibraryA, GetLocaleInfoW, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, SetEnvironmentVariableA, GetStringTypeExW, GetFileAttributesExW, HeapCreate, HeapDestroy, InterlockedCompareExchange, InterlockedExchange, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetLocaleInfoA, GetFileAttributesA, CreateFileA, GetFullPathNameW, RemoveDirectoryA, DeleteFileA, MoveFileA, FindFirstFileA, FindNextFileA, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCurrentThreadId, HeapFree, GetSystemTimeAsFileTime, GetTimeFormatA, GetDateFormatA, HeapAlloc, GetCommandLineA, GetVersionExA, GetProcessHeap, RaiseException, RtlUnwind, GetCPInfo, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetModuleHandleA, ExitProcess, CompareStringA, CompareStringW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetStdHandle, GetModuleFileNameA
ole32.dll
CoCreateGuid, StringFromGUID2, CoImpersonateClient, CoRevertToSelf, CoInitialize, CLSIDFromProgID, CoCreateInstance, CoUninitialize
shell32.dll
ShellExecuteW, SHGetSpecialFolderPathW, SHFileOperationW
user32.dll
LoadStringW
winhttp.dll
WinHttpQueryHeaders, WinHttpGetIEProxyConfigForCurrentUser, WinHttpOpen, WinHttpGetProxyForUrl, WinHttpReceiveResponse, WinHttpConnect, WinHttpReadData, WinHttpSendRequest, WinHttpOpenRequest, WinHttpCloseHandle, WinHttpSetOption
wintrust.dll
WinVerifyTrust

SACore.dll

McAfee SiteAdvisor by McAfee (Signed)

Remove SACore.dll
Version:   1,0,1,204
MD5:   b0f3f74abdf59544f493206cd707bf3a
SHA1:   bfcf553e35d364c6a116ce6695b14b0cee7b19f4
SHA256:   aaee221cec8b02a1da25822c079ed9f670d992081407aa79910b9c18afcfeee8

Overview

sacore.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including McAfee SiteAdvisor published by McAfee, Inc., McAfee SiteAdvisor from McAfee, Inc. and McAfee SiteAdvisor by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:sacore.dll
Publisher:McAfee, Inc.
Product name:McAfee SiteAdvisor
Description:SiteAdvisor
Typical file path:C:\Program Files\mcafee\siteadvisor\sacore.dll
File version:1,0,1,204
Product version:1,0,0,0
Size:637.02 KB (652,304 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Effective date:Friday, September 12, 2008
Expiration date:Sunday, October 9, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
McAfee, Inc.
10% remove
SiteAdvisor is a service that reports on the safety of web sites by crawling the web and testing the sites it finds for malware and spam. A paid version of McAfee SiteAdvisor, McAfee SiteAdvisor Plus, has extra features. The functionality of SiteAdvisor can be accessed either through a Browser Plugin or by submitting a URL to the website. In addition to selling to the end consumers, McAfee also sells to the web site owners with their Mc...
McAfee, Inc.
6% remove

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 50.00%
Windows 7 Starter 50.00%

Distribution by countryDistribution by country

United States installs about 100.00% of McAfee SiteAdvisor.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE