The ByClickDownloader Setup exe (By Click Downloader Installer) ByClick File Malware Analysis
Gridinsoft Logo
File Icon

The ByClickDownloader-Setup.exe (By Click Downloader Installer) File Analysis

Technical Analysis

File Name ByClickDownloader-Setup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.231.174
Database Version 2025-12-27 20:00:36 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
45,674,712
File Size (bytes)
2025-12-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5744b12f945a38556cce524cfe2ccb6c
SHA1
f5ef13393eb8ad574ff12b77c493902b8d7b6548
SHA256
279c0f76b89e33f38127615c248c1a446d8090d5a88ecaf98d99aec437a2ac40
SHA512
77bf3856c6549773a8fd256af89b872e07926aca9b1c8f700042ed04b7c454bb7a3d8cbdf10e9a66dba96b71325d6802ac939fa74017f0bf806e4babd345708a
ImpHash
614aad28c38292f58cae1943df2be6db

PE Analysis

Basic Information

Icon
Hash: 8d177369f74f126f0682a7310264a2b4
Fuzzy: 72bbf90fb0f86fdd10edaab5e6582401
dHash: 6ded69c7b130b2c0
Image Base 0x00400000
Entry Point 0x006302f0
Compilation Time 2024-08-21 11:40:18
Checksum 0x02b93b5a (Actual: 0x02b93b5a)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\ReleaseAI\win\Release\stubs\x86\ExternalUi.pdb
Digital Signature OK
Imports 2 libraries
KERNEL32, imagehlp
Exports 0 functions
Resources 44 Resources
Sections 6 Sections

Version Information

CompanyName ByClick
FileDescription By Click Downloader Installer
FileVersion 2.4.13
InternalName ByClickDownloader-Setup
LegalCopyright Copyright (C) 2024 ByClick
OriginalFileName ByClickDownloader-Setup.exe
ProductName By Click Downloader
ProductVersion 2.4.13
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,891,002 bytes 2,891,264 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 51E56FD4D9DD51DC045B630299112399
.rdata 0x002c3000 764,218 bytes 764,416 bytes 5.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 61596344B4EC9F2A96E12943A9DE08D2
.data 0x0037e000 55,712 bytes 13,824 bytes 4.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A8B4027CAA6B193616B5161DCCB6CD0F
.didat 0x0038c000 1,804 bytes 2,048 bytes 4.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7D3D756B4351D46CAFB231F745DB1BCF
.rsrc 0x0038d000 195,332 bytes 195,584 bytes 5.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 14ED063188A893EB827F1C08BB82E1FA
.reloc 0x003bd000 197,716 bytes 198,144 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3B1F1308281124E628012F03AC2BDA3C
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 44 (192,965 bytes)
Resource Type Count Total Size Percentage
RT_BITMAP 6 26,098 bytes
13.5%
RT_ICON 5 34,408 bytes
17.8%
RT_DIALOG 5 1,198 bytes
0.6%
RT_STRING 15 11,574 bytes
6%
RT_GROUP_ICON 1 76 bytes
0%
RT_VERSION 1 808 bytes
0.4%
RT_HTML 10 116,736 bytes
60.5%
RT_MANIFEST 1 2,067 bytes
1.1%

Certificate Chain Analysis

Certificate Information
Product By Click Downloader
Description By Click Downloader Installer
File Version 2.4.13
Original Name ByClickDownloader-Setup.exe
Signing Date 01:28 PM 08/29/2024 (485 days ago)
Verification Status Signed
Signers By Click; Sectigo RSA Code Signing CA; Sectigo
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name ByClickDownloader-Setup
Copyright Copyright (C) 2024 ByClick
Certificate Chain Summary
Sectigo RSA Code Signing CA #1 Primary
Validity Period: 2018-11-02 00:00:00 → 2030-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 1D A2 48 30 6F 9B 26 18 D0 82 E0 96 7D 33 D3 6A
DigiCert Timestamp 2023 #2 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #3 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #4 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware