» dca-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

dca-bho.dll

Compete DCA

Compete Inc.

The module dca-bho.dll, “Compete DCA Browser Helper Object” by Compete has been detected as adware by 2 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘DCA’. This file is typically installed with the program Consumer Input (remove only) by Compete Inc. which is a potentially unwanted software program.

File name:

dca-bho.dll

Publisher:

Compete, Inc. (signed by Compete Inc.)

Product:

Compete DCA

Description:

Compete DCA Browser Helper Object

Version:

1.7.1.8586

MD5:

71a84e86bf84f223ab4bfe90eac0c440

SHA-1:

6008f58dde688662add8310e55f813530f9bc58e

SHA-256:

7c2b33a413fced0a65bca89cdb3232137d7a0c8682105c40dbd57e1f193726fa

Scanner detections:

2 / 68

Status:

Adware

Analysis date:

4/26/2024 4:39:51 PM UTC (today)

Scan engine

Detection

Engine version

Boost by Reason

Optional.BHO.Compete.H

188838

Reason Heuristics

PUP.BHO.Compete.H

14.8.1.0

File size:

1010.3 KB (1,034,584 bytes)

Product version:

1.7.1.8586

Original file name:

dca-bho.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\consumer input\internetexplorer\dca-bho.dll

Digital Signature

Signed by:

Compete Inc.

Authority:

VeriSign, Inc.

Valid from:

4/29/2013 5:00:00 PM

Valid to:

4/30/2015 4:59:59 PM

Subject:

CN=Compete Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Compete Inc., L=Boston, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

55108CF9F80AC133A32A29B5E9C1EF5F

File PE Metadata

Compilation timestamp:

5/13/2013 2:43:56 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:FwLQHxWwJ4sOdZOpcUtr7TrMUGh5um5STpd:AQHxFqLpUtr7T4UGFMVd

Entry address:

0x73825

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 50, 81, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 83, EC, 18, 53, 57, FF, 75, 08, 8D, 4D, E8, E8, 8B, E4, FF, FF, 8B, 45, 10, 8B, 7D, 0C, 33, DB, 3B, C3, 74, 02, 89, 38, 3B, FB, 75, 2B, E8, B5, 14, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, F0, ED, FF, FF, 83, C4, 14, 38, 5D, F4, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 33, C0, E9, A3, 01, 00, 00, 39, 5D, 14, 74, 0C, 83, 7D, 14, 02, 7C, CA, 83, 7D, 14, 24... 
[+]

Entropy:

6.3825

Code size:

612 KB (626,688 bytes)

Internet Explorer BHO

Display name:

DCA

CLSID:

{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}

CLSID name:

DCA BHO

The file dca-bho.dll has been discovered within the following program.

Consumer Input (remove only) by Compete Inc.

Consumer Input is the collection and analytics software for Compete.com statistics for Microsoft Internet Explorer. Compete.com is a web traffic analysis service that publishes the approximate number of global visitors to the top web sites in the world.

www.consumerinput.com

61% remove it

Remove dca-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.