Should I block it?

No, this file is 100% safe to run.

Additional versions

3,7,0,190	1.86%
3,7,0,190	1.86%
3,6,6,129	6.12%
3,6,6,129	4.26%
3,6,4,160	1.06%
3,6,4,160	0.27%
3,6,3,549	7.45%
3,6,3,549	4.52%
3,6,3,489	0.27%
3,6,3,489	0.27%
3,6,2,196	1.86%
3,6,2,196	1.33%
3,6,2,168	6.12%
3,6,2,168	3.19%
3,6,0,187	17.82%
3,6,0,187	9.04%
3,6,0,165	0.27%
3,6,0,164	0.27%
3,6,0,164	0.27%
3,5,0,229	19.41%
3,5,0,229	9.31%
3,5,0,227	0.27%
3,4,1,195	1.60%
3,4,1,195	0.80%
2,9,0,242	0.27%
2,8,0,306	0.27%

Relationships

Parent processes

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExW, RegCloseKey, RegQueryValueExW

kernel32.dll

lstrlenW, GetPrivateProfileIntW, InterlockedExchange, GetLastError, GetProcAddress, DisableThreadLibraryCalls, lstrcmpiW, lstrcatW, GetModuleFileNameW, lstrcpyW, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, RtlUnwind, TerminateProcess, GetVersionExW, LoadLibraryW, CloseHandle, CreateMutexW, IsProcessorFeaturePresent

ole32.dll

CoUninitialize, CoCreateInstance, CoInitializeEx

user32.dll

UnhookWindowsHookEx, SetWindowsHookExW, GetClassNameW, DispatchMessageW, GetMessageW, CallNextHookEx, TranslateMessage

Export table

saHooker_Initialize

saHooker_Initialize_and_Wait

saHooker_Uninitialize

saHook.dll

McAfee SiteAdvisor by McAfee (Signed)

Remove saHook.dll

Version:	3,6,6,129
MD5:	10264c78b9cbac7cb46e27283ad636c8
SHA1:	bba49980b6ed23daf55de9c0b2a2130ee799d007

What is saHook.dll?

SiteAdvisor is a service that reports on the safety of web sites by crawling the web and testing the sites it finds for malware and spam. The functionality of SiteAdvisor can be accessed either through a Browser Plugin or by submitting a URL to the website. SiteAdvisor only rates sites based on the risk of malware or spam.

About saHook.dll (from McAfee)

“McAfee SiteAdvisor software is a free browser plug-in that provides simple Web site safety ratings and a Secure Search box so you can surf, search and shop more safely. With SiteAdvisor software insta”

Details

File name:	sahook.dll
Publisher:	McAfee, Inc.
Product name:	McAfee SiteAdvisor
Description:	SiteAdvisor
Typical file path:	C:\Program Files\McAfee\SiteAdvisor\sahook.dll
File version:	3,6,6,129
Product version:	3,6,6,0
Size:	19.99 KB (20,472 bytes)
Certificate
Issued to:	McAfee
Authority (CA):	VeriSign
Expiration date:	Tuesday, December 31, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00014867%	0.028634%
Kernel CPU:	0.00008113%	0.013761%
User CPU:	0.00006754%	0.014873%
Kernel CPU time:	13,047 ms/min	100,923,805ms/min
CPU cycles:	158/sec	17,470,203/sec
Memory
Private memory:	1.73 MB	21.59 MB
Private (maximum):	7.45 MB
Private (minimum):	2.92 MB
Non-paged memory:	1.73 MB	21.59 MB
Virtual memory:	52.29 MB	140.96 MB
Virtual memory (peak):	53.89 MB	169.69 MB
Working set:	5.99 MB	18.61 MB
Working set (peak):	13.9 MB	37.95 MB
Page faults:	7,082/min	2,039/min
I/O
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	80	600
GUI GDI count:	20	103
GUI GDI peak:	21	142
GUI USER count:	6	49
GUI USER peak:	6	71

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Windows\System32\rundll32.exe" "C:\progra~2\mcafee\sitead~1\x64\sahook.dll", sahooker_initialize_and_wait
Owner:	SYSTEM
Parent processes:	mcsvhost.exe (McAfee Shared Service Host by McAfee) McSACore.exe (McAfee SiteAdvisor by McAfee)

Threads

Averages

rundll32.exe (Windows host process (Rundll32) by Microsoft)
Total CPU:	0.00080113%	0.272967%
Kernel CPU:	0.00040794%	0.107585%
User CPU:	0.00039319%	0.165382%
CPU cycles:	11,284/sec	5,741,424/sec
Memory:	60 KB	1.16 MB

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	48.50%
Windows 8.1 Single Language	10.50%
Windows 8	10.50%
Windows 8.1	5.00%
Windows 7 Professional	4.00%
Windows Vista Home Premium	4.00%
Windows 8 Pro	4.00%
Windows 7 Home Basic	3.50%
Microsoft Windows XP	2.50%
Windows 8.1 Pro with Media Center	2.50%
Windows 8 Single Language	2.50%
Windows Vista Home Basic	1.50%
Windows 7 Starter	1.00%

Distribution by country

United States installs about 52.00% of McAfee SiteAdvisor.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	23.74%
Acer	19.78%
Hewlett-Packard	13.67%
Toshiba	12.23%
Sony	11.51%
ASUS	7.19%
NEC	5.76%
Lenovo	3.60%
GIGABYTE	1.80%
American Megatrends	0.72%

Remove Adware and Spyware Programs, FREE Download!