» dca-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

dca-bho.dll

Compete DCA

Compete Inc

The module dca-bho.dll, “Compete DCA Browser Helper Object” by Compete Inc has been detected as a potentially unwanted program by 2 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘DCA’. This file is typically installed with the program Consumer Input (remove only) by Compete Inc. which is a potentially unwanted software program.

File name:

dca-bho.dll

Publisher:

Compete, Inc. (signed by Compete Inc)

Product:

Compete DCA

Description:

Compete DCA Browser Helper Object

Version:

1.7.1.8556

MD5:

1cc7f758edf895c11c0379d0c0ea6ad9

SHA-1:

4491447e6e28bcd7a967cc1cab5bdcae9bbd8d33

SHA-256:

fb6c42c692b9c912bd9d325dee161a89e4ced20f727c849a427eaee4fe5ca9ba

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

11/30/2024 8:15:54 AM UTC (today)

Scan engine

Detection

Engine version

Boost by Reason

Optional.BHO.Compete.H

188838

Reason Heuristics

PUP.BHO.Compete.H

14.8.1.0

File size:

1021.9 KB (1,046,448 bytes)

Product version:

1.7.1.8556

Original file name:

dca-bho.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\consumer input\dca-bho.dll

Digital Signature

Signed by:

Compete Inc

Authority:

VeriSign, Inc.

Valid from:

2/9/2012 6:00:00 PM

Valid to:

2/8/2013 5:59:59 PM

Subject:

CN=Compete Inc, OU=IT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Compete Inc, L=Boston, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0EE72EE66D6F818B71BCDFAFB57F21FF

File PE Metadata

Compilation timestamp:

9/13/2012 4:30:00 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:55vicdN7Fmmn8o+c8xEwTrYuu2mwBNvocJY:51icETtcrwTEuu2mivocJY

Entry address:

0x74CF5

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, C0, 82, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 83, EC, 18, 53, 57, FF, 75, 08, 8D, 4D, E8, E8, FB, E2, FF, FF, 8B, 45, 10, 8B, 7D, 0C, 33, DB, 3B, C3, 74, 02, 89, 38, 3B, FB, 75, 2B, E8, 05, 15, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, EB, EE, FF, FF, 83, C4, 14, 38, 5D, F4, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 33, C0, E9, A3, 01, 00, 00, 39, 5D, 14, 74, 0C, 83, 7D, 14, 02, 7C, CA, 83, 7D, 14, 24... 
[+]

Entropy:

6.3632

Code size:

620 KB (634,880 bytes)

Internet Explorer BHO

Display name:

DCA

CLSID:

{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}

CLSID name:

DCA BHO

The file dca-bho.dll has been discovered within the following program.

Consumer Input (remove only) by Compete Inc.

Consumer Input is the collection and analytics software for Compete.com statistics for Microsoft Internet Explorer. Compete.com is a web traffic analysis service that publishes the approximate number of global visitors to the top web sites in the world.

www.consumerinput.com

61% remove it

Remove dca-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.