Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1,0,2,155 50.00%
1,0,1,204 50.00%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueW, CryptDestroyKey, RegCloseKey, RegSetValueExW, CryptHashData, RegCreateKeyExW, CryptEncrypt, CryptDeriveKey, CryptReleaseContext, CryptCreateHash, CryptDecrypt, ConvertStringSecurityDescriptorToSecurityDescriptorW, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, LookupAccountNameW, GetUserNameW, GetSecurityDescriptorDacl, InitializeAcl, OpenProcessToken, ConvertSidToStringSidW, GetTokenInformation, OpenThreadToken, ImpersonateLoggedOnUser, RevertToSelf, CryptGetHashParam, CryptAcquireContextW, CryptDestroyHash, RegOpenKeyExW
crypt32.dll
CertGetCertificateChain, CertCloseStore, CertGetCertificateContextProperty, CryptMsgGetParam, CryptQueryObject, CertGetNameStringW, CertVerifyCertificateChainPolicy, CertFreeCertificateChain, CryptMsgClose, CertFreeCertificateContext, CertGetSubjectCertificateFromStore, CryptDecodeObject
kernel32.dll
CreateDirectoryW, WideCharToMultiByte, MultiByteToWideChar, InterlockedDecrement, MapViewOfFile, CreateMutexW, OpenEventW, LocalAlloc, OpenMutexW, CreateFileMappingW, ResetEvent, UnmapViewOfFile, ReleaseMutex, lstrlenW, lstrcpyW, InterlockedIncrement, GetFileSize, GetTempFileNameW, ReadFile, WriteFile, SetFilePointer, GetTempPathW, LocalFree, GetCurrentThread, GetCurrentProcess, GetModuleFileNameW, GetVersionExW, GlobalFree, GetFileAttributesW, GetTickCount, FindFirstFileW, FindClose, SetFileAttributesW, FindNextFileW, GetSystemTime, SystemTimeToFileTime, CreateFileW, DeleteFileW, CloseHandle, SetEvent, CreateEventW, FreeLibrary, WaitForSingleObject, LoadLibraryW, GetProcAddress, GetLastError, Sleep, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, GetCurrentProcessId, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetTimeZoneInformation, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetStartupInfoA, GetFileType, SetHandleCount, HeapSize, IsValidCodePage, GetOEMCP, GetACP, HeapReAlloc, VirtualAlloc, VirtualFree, VirtualQuery, LoadLibraryA, GetLocaleInfoW, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, SetEnvironmentVariableA, GetStringTypeExW, GetFileAttributesExW, HeapCreate, HeapDestroy, InterlockedCompareExchange, InterlockedExchange, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetLocaleInfoA, GetFileAttributesA, CreateFileA, GetFullPathNameW, RemoveDirectoryA, DeleteFileA, MoveFileA, FindFirstFileA, FindNextFileA, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCurrentThreadId, HeapFree, GetSystemTimeAsFileTime, GetTimeFormatA, GetDateFormatA, HeapAlloc, GetCommandLineA, GetVersionExA, GetProcessHeap, RaiseException, RtlUnwind, GetCPInfo, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetModuleHandleA, ExitProcess, CompareStringA, CompareStringW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetStdHandle, GetModuleFileNameA
ole32.dll
CoCreateGuid, StringFromGUID2, CoImpersonateClient, CoRevertToSelf, CoInitialize, CLSIDFromProgID, CoCreateInstance, CoUninitialize
shell32.dll
ShellExecuteW, SHGetSpecialFolderPathW, SHFileOperationW
user32.dll
LoadStringW
winhttp.dll
WinHttpQueryHeaders, WinHttpGetIEProxyConfigForCurrentUser, WinHttpOpen, WinHttpGetProxyForUrl, WinHttpReceiveResponse, WinHttpConnect, WinHttpReadData, WinHttpSendRequest, WinHttpOpenRequest, WinHttpCloseHandle, WinHttpSetOption
wintrust.dll
WinVerifyTrust

SACore.dll

McAfee SiteAdvisor by McAfee (Signed)

Remove SACore.dll
Version:   1,0,2,155
MD5:   93e459d82812b95a8f406680381a029d
SHA1:   37d18fe2d8d169e85848402ef603445204657e59
SHA256:   ef51b26168c9d5438a15ed46ff847e6645f78265a2ba521527e42cf14e732b40

Overview

sacore.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including McAfee SiteAdvisor published by McAfee, Inc., McAfee SiteAdvisor from McAfee, Inc. and McAfee SiteAdvisor by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:sacore.dll
Publisher:McAfee, Inc.
Product name:McAfee SiteAdvisor
Description:SiteAdvisor
Typical file path:C:\Program Files\mcafee\siteadvisor\sacore.dll
File version:1,0,2,155
Product version:1,0,0,0
Size:648.52 KB (664,080 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Effective date:Friday, September 12, 2008
Expiration date:Sunday, October 9, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
McAfee, Inc.
10% remove
SiteAdvisor is a service that reports on the safety of web sites by crawling the web and testing the sites it finds for malware and spam. A paid version of McAfee SiteAdvisor, McAfee SiteAdvisor Plus, has extra features. The functionality of SiteAdvisor can be accessed either through a Browser Plugin or by submitting a URL to the website. In addition to selling to the end consumers, McAfee also sells to the web site owners with their Mc...
McAfee, Inc.
6% remove

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 50.00%
Windows 7 Starter 50.00%

Distribution by countryDistribution by country

United States installs about 100.00% of McAfee SiteAdvisor.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE