» dca-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

dca-bho.dll

Compete DCA

Compete Inc.

The module dca-bho.dll, “Compete DCA Browser Helper Object” by Compete has been detected as adware by 2 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘DCA’. This file is typically installed with the program Consumer Input (remove only) by Compete Inc. which is a potentially unwanted software program.

File name:

dca-bho.dll

Publisher:

Compete, Inc. (signed by Compete Inc.)

Product:

Compete DCA

Description:

Compete DCA Browser Helper Object

Version:

1.7.2.9006

MD5:

836bf3b14380c462817647f1862229cb

SHA-1:

2d92f3ff4e3a101bec0a7b0806607409f0fc05bd

SHA-256:

b6f972942051f616719ab0734c509102e946da7d651d140f54c7842cb509ff09

Scanner detections:

2 / 68

Status:

Adware

Analysis date:

4/19/2024 1:53:27 AM UTC (today)

Scan engine

Detection

Engine version

Boost by Reason

Optional.BHO.Compete.H

188838

Reason Heuristics

PUP.BHO.Compete.H

14.8.1.0

File size:

1018.3 KB (1,042,776 bytes)

Product version:

1.7.2.9006

Original file name:

dca-bho.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\consumer input\internetexplorer\dca-bho.dll

Digital Signature

Signed by:

Compete Inc.

Authority:

VeriSign, Inc.

Valid from:

4/29/2013 5:00:00 PM

Valid to:

4/30/2015 4:59:59 PM

Subject:

CN=Compete Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Compete Inc., L=Boston, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

55108CF9F80AC133A32A29B5E9C1EF5F

File PE Metadata

Compilation timestamp:

10/21/2013 6:51:30 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:K10u/ibZU3dJ0dAIfC7dsfjTrDBn+BPzwM:80u60J4TfokjT3B+BPzwM

Entry address:

0x74775

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 50, 81, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 83, EC, 18, 53, 57, FF, 75, 08, 8D, 4D, E8, E8, 7B, E4, FF, FF, 8B, 45, 10, 8B, 7D, 0C, 33, DB, 3B, C3, 74, 02, 89, 38, 3B, FB, 75, 2B, E8, B5, 14, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 71, F0, FF, FF, 83, C4, 14, 38, 5D, F4, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 33, C0, E9, A3, 01, 00, 00, 39, 5D, 14, 74, 0C, 83, 7D, 14, 02, 7C, CA, 83, 7D, 14, 24... 
[+]

Entropy:

6.3854

Code size:

616 KB (630,784 bytes)

Internet Explorer BHO

Display name:

DCA

CLSID:

{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}

CLSID name:

Consumer Input

The file dca-bho.dll has been discovered within the following program.

Consumer Input (remove only) by Compete Inc.

Consumer Input is the collection and analytics software for Compete.com statistics for Microsoft Internet Explorer. Compete.com is a web traffic analysis service that publishes the approximate number of global visitors to the top web sites in the world.

www.consumerinput.com

61% remove it

Remove dca-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.