Should I block it?

No, this file is 100% safe to run.

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterEventSourceA, ReportEventA, DeregisterEventSource, CreateProcessAsUserW, DuplicateTokenEx, CloseServiceHandle, GetSecurityDescriptorDacl, AddAccessDeniedAceEx, GetLengthSid, OpenSCManagerW, AddAccessAllowedAceEx, AllocateAndInitializeSid, InitializeSecurityDescriptor, InitializeAcl, OpenServiceW, FreeSid, SetSecurityDescriptorDacl, SetServiceObjectSecurity, CopySid, ImpersonateLoggedOnUser, RegNotifyChangeKeyValue, RegOpenKeyW, SetServiceStatus, RegisterServiceCtrlHandlerExW, RevertToSelf, RegQueryValueExW, GetTokenInformation, OpenThreadToken, ConvertSidToStringSidW, OpenProcessToken, RegCloseKey, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegCreateKeyExW, RegEnumKeyExW, RegQueryInfoKeyW, GetSecurityDescriptorLength, RegSetValueExW, RegOpenKeyExW, RegDeleteKeyW, RegDeleteValueW, LookupAccountSidW
crypt32.dll
CertFreeCertificateContext, CertVerifyCertificateChainPolicy, CertFreeCertificateChain, CryptMsgGetParam, CertGetCertificateChain, CertGetNameStringW, CryptQueryObject, CertGetSubjectCertificateFromStore, CryptDecodeObject, CertCloseStore, CertGetCertificateContextProperty, CryptMsgClose
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
DllMain
ole32.dll
CoInitializeEx, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoImpersonateClient, CoResumeClassObjects, CoTaskMemRealloc, CoTaskMemAlloc, CoTaskMemFree, StringFromGUID2, CoCreateInstance, CoInitialize, CoRevertToSelf, CLSIDFromProgID
rpcrt4.dll
RpcStringFreeA, UuidToStringA, UuidCreate
secur32.dll
GetUserNameExW
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
UrlEscapeW, UrlUnescapeW, StrCmpW, PathAppendA, StrRChrW
ts.dll
TS_CategoriesDestroy, TS_RateUrlExtended, TS_UrlDestroy, TS_HandleCreate, TS_AttributesDestroy, TS_DatabaseLoadFromMemory, TS_HandleDestroy, TS_Shutdown, TS_CategoriesCategoryIsMember, TS_Init, TS_CategoriesToArray, TS_AttributesInfoGet, TS_NetLookupConfigureSettingsExtended, TS_RateConnectionExtended, TS_UrlParse, TS_CategoriesCreate, TS_LogFunctionSet, TS_AttributesGetTSResponseField, TS_AttributesAddTSQueryField, TS_AttributesCreate, TS_NetLookupConfigureInternal, TS_DatabaseUnload, TS_RateUrl, TS_LogLevelSet, TS_UrlCreate, TS_NetLookupConfigureSettings
urlmon.dll
CoInternetParseUrl
user32.dll
DispatchMessageW, TranslateMessage, CharLowerBuffW, CharNextW, UnregisterClassA, PostThreadMessageW, GetProcessWindowStation, GetDesktopWindow, MsgWaitForMultipleObjects, MessageBoxA, GetUserObjectInformationW, PeekMessageW, GetMessageW
userenv.dll
CreateEnvironmentBlock
winhttp.dll
WinHttpConnect, WinHttpGetProxyForUrl, WinHttpOpen, WinHttpQueryDataAvailable, WinHttpSendRequest, WinHttpCloseHandle, WinHttpReadData, WinHttpReceiveResponse, WinHttpSetOption, WinHttpCrackUrl, WinHttpOpenRequest, WinHttpQueryHeaders
wintrust.dll
WinVerifyTrust
ws2_32.dll
getaddrinfo, freeaddrinfo, WSAAddressToStringW, WSAStringToAddressW
wtsapi32.dll
WTSEnumerateProcessesW, WTSFreeMemory
Export table
_sa_list_count
_sa_list_destroy
_sa_regex_create
_sa_regex_execute
_sa_regex_release
CreateUpdateManager
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

sasshmod.dll

SiteAdvisor Enterprise by McAfee (Signed)

Remove sasshmod.dll
Version:   3.5.0.724
MD5:   1030ef34e5c05fb44f1b9d926d8f0fa9
SHA1:   8f2c994aad8b81586d04c2339a9ba54f8a176e41

Overview

sasshmod.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program McAfee SiteAdvisor Enterprise published by McAfee, Inc.. The file is digitally signed by McAfee which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:sasshmod.dll
Publisher:McAfee, Inc.
Product name:SiteAdvisor Enterprise
Description:SiteAdvisor
Typical file path:C:\Program Files\mcafee\siteadvisor enterprise\sasshmod.dll
Original name:McSACore.dll
File version:3.5.0.724
Product version:3.5.0.0
Size:1.53 MB (1,599,080 bytes)
Certificate
Issued to:McAfee
Authority (CA):VeriSign
Effective date:Wednesday, October 5, 2011
Expiration date:Tuesday, December 31, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
McAfee, Inc.
4% remove
When it comes to web surfing, McAfee SiteAdvisor Enterprise is an indispensable ally, keeping you safe without limiting your access to the Internet. With SiteAdvisor Enterprise, you don't need to impose restrictive policies that keep your employees from using the web for research and business projects. SiteAdvisor Enterprise relies on McAfee Global Threat Intelligence — our cloud-based rating service that continually scans the Internet...

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 50.00%
Windows 7 Professional 50.00%

Distribution by countryDistribution by country

Spain installs about 50.00% of SiteAdvisor Enterprise.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE