File Name | 7tsp GUI v0.6(2019).exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.195.174 |
Database Version | 2024-11-07 12:00:34 UTC |
Malware family: Blocker
Hash Type | Value | Action |
---|---|---|
MD5 |
9e22da216893d068dddf7c60d88d92ac
|
|
SHA1 |
69655ecb569ebe818a4eeae2e95fe579178530d1
|
|
SHA256 |
a801f884a50bd15131e813807fd340258dec368ff432e9e1c41303007654c15d
|
|
SHA512 |
3104b1786d7ec692467898e39e71a9a768206e9276d1df4aa1081c09ddabe7767e4bf97456819d6d1980b4052c8d204c6a06da6905bc7ad20d34c62cf53e2240
|
|
ImpHash |
1173c8b1367308fdbd773a872bdb45d3
|
Icon |
Hash: 914f32f31c7de02794c5c91d52c7abc2
Fuzzy: 32add14a75dac7a2afdfc84b0aaa7312 dHash: 6e6a60b010b0808c |
Image Base | 0x00400000 |
Entry Point | 0x00416310 |
Compilation Time | 2010-03-07 16:08:39 |
Checksum | 0x00000000 (Actual: 0x0044018f) |
OS Version | 5.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports | 16 libraries |
Exports | 0 functions |
Resources | 30 Resources |
Sections | 4 Sections |
FileVersion | 0.6.2.0 |
Comments | Se7en Theme Source Patcher v0.6.2019 Patches your Windows Se7en System Files with new Icons and Bitmaps |
FileDescription | Se7en Theme Source Patcher |
LegalCopyright | XPtsp Team -Program Written By Fixit- |
Translation | 0x0409 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
524,311 bytes | 524,800 bytes | 6.63 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
6C20C6BF686768B6F134F5BD508171BC |
.rdata |
0x00082000 |
55,644 bytes | 55,808 bytes | 4.55 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
321C940899050104CED482B1E5BF7A0E |
.data |
0x00090000 |
107,800 bytes | 26,624 bytes | 2.20 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
E5D77411F751D28C6EEE48A743606795 |
.rsrc |
0x000ab000 |
156,084 bytes | 156,160 bytes | 4.39 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
303E04C7EDEE1C7475235971B8AA09FC |
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 15 | 143,889 bytes | |
RT_MENU | 1 | 80 bytes | |
RT_DIALOG | 1 | 252 bytes | |
RT_STRING | 7 | 8,498 bytes | |
RT_GROUP_ICON | 4 | 234 bytes | |
RT_VERSION | 1 | 708 bytes | |
RT_MANIFEST | 1 | 789 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Ransom.Win32.Blocker.sa without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system