PUP.Se7enkills.A
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 10 % (Normal) |
| Infected Computers: | 3 |
| First Seen: | October 6, 2026 |
| Last Seen: | October 18, 2026 |
| OS(es) Affected: | Windows |
PUP.Se7enkills.A is a potentially unwanted program (PUP) that targets Windows computers. It is often found masquerading as a game launcher component, in this case presenting itself as "7Launcher," a tool associated with running certain PC games. While it is not classified as highly dangerous, with a low danger rating, its presence on a system is still considered undesirable because of the unwanted behaviors commonly associated with this type of software.
Table of Contents
What PUP.Se7enkills.A Does
Like many programs in the Possibly Unwanted Program category, PUP.Se7enkills.A is designed to run on a user's machine without necessarily providing clear value in return. Programs classified this way typically engage in activities such as displaying intrusive advertisements, installing additional browser toolbars or extensions, and altering browser settings like the default search engine or homepage without a clear, explicit request from the user. Security analysis of this particular file shows it is an unpacked 32-bit Windows executable carrying a digital signature chain that is not trusted, meaning the certificate used to sign the file does not come from a recognized, validated source. This lack of trusted signing is a common red flag associated with software that may not be entirely transparent about its origin or purpose.
How It Usually Gets Onto Computers
PUPs like Se7enkills.A typically spread through software bundling, where they are packaged alongside free downloads, game patches, cracked software, or third-party installers. Users often install these programs inadvertently while installing something else, especially when they rush through installation wizards and skip reading the fine print or deselecting optional add-ons. In this case, the program presents itself as a game launcher tied to a well-known title, which may lead users to believe they are installing a legitimate gaming tool rather than an unwanted application. Downloading software from unofficial or unverified websites, peer-to-peer networks, or third-party download portals significantly increases the risk of picking up bundled PUPs like this one.
Risks for the User
Although PUP.Se7enkills.A carries a low danger rating, its presence can still create inconveniences and minor security concerns. Users may experience a cluttered browsing experience with unwanted ads, unexpected changes to browser settings, or reduced system performance due to background processes running without clear purpose. Because the file's digital signature is not trusted, there is also uncertainty about its true origin and intentions, which is a reason for caution even when direct harm is not immediately obvious.
Signs of Infection
Common indicators that a PUP like this may be present on a system include unexpected pop-up ads appearing during web browsing, new toolbars or browser extensions that were not intentionally installed, changes to the default search engine or homepage, and the presence of unfamiliar processes or applications, particularly ones referencing game launchers or platforms the user does not recall installing.
How to Stay Protected
To avoid PUPs like Se7enkills.A, users should download software only from official sources and verified developers, carefully review each step of installation wizards, and opt out of any bundled offers or additional programs. Keeping security software updated and performing regular system scans can help detect and remove unwanted programs. Reviewing installed applications and browser extensions periodically is also a good habit for catching unwanted software early.
Analysis Report
General information
| Family Name: | PUP.Se7enkills.A |
|---|---|
| Signature status: | Root Not Trusted |
Known Samples
Known Samples
This section lists other file samples believed to be associated with this family.|
MD5:
dbf51e86bf30f8c622ceeaa082ba7e64
SHA1:
1158bcf4ed9989942c2d3966f540621418b27de2
SHA256:
5E59430975919655E577575E8E632447A6355CA297ADDC99BBC9B3AA2B91D292
File Size:
6.11 MB, 6106520 bytes
|
Windows Portable Executable Attributes
- File doesn't have "Rich" header
- File doesn't have debug information
- File has exports table
- File has TLS information
- File is 32-bit executable
- File is either console or GUI application
- File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
- File is Native application (NOT .NET application)
- File is not packed
- IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
- IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)
File Icons
File Icons
This section displays icon resources found within family samples. Malware often replicates icons commonly associated with legitimate software to mislead users into believing the malware is safe.
Windows PE Version Information
Windows PE Version Information
This section displays values and attributes that have been set in the Windows file version information data structure for samples within this family. To mislead users, malware actors often add fake version information mimicking legitimate software.| Name | Value |
|---|---|
| Comments | 7Launcher, Game Platform DRM-free |
| Company Name | SE7EN Solutions Ltd. |
| File Description | 7Launcher - Red Dead Redemption 2 |
| File Version | 1.7.3.0 |
| Internal Name | Run_RDR2 |
| Legal Copyright | Copyright (c) 2026 SE7EN Solutions |
| Original Filename | Run_RDR2 |
| Product Name | 7Launcher |
| Product Version | 1.7.3 |
| Program I D | com.embarcadero.Run_RDR2 |
Digital Signatures
Digital Signatures
This section lists digital signatures that are attached to samples within this family. When analyzing and verifying digital signatures, it is important to confirm that the signature’s root authority is a well-known and trustworthy entity and that the status of the signature is good. Malware is often signed with non-trustworthy “Self Signed” digital signatures (which can be easily created by a malware author with no verification). Malware may also be signed by legitimate signatures that have an invalid status, and by signatures from questionable root authorities with fake or misleading “Signer” names.| Signer | Root | Status |
|---|---|---|
| IP Rainskiy Dmitriy Valeryevich | GlobalSign Code Signing Root R45 | Root Not Trusted |
File Traits
- 2+ executable sections
- HighEntropy
- x86
Block Information
Block Information
During analysis, EnigmaSoft breaks file samples into logical blocks for classification and comparison with other samples. Blocks can be used to generate malware detection rules and to group file samples into families based on shared source code, functionality and other distinguishing attributes and characteristics. This section lists a summary of this block data, as well as its classification by EnigmaSoft. A visual representation of the block data is also displayed, where available.| Total Blocks: | 11,377 |
|---|---|
| Potentially Malicious Blocks: | 1,300 |
| Whitelisted Blocks: | 10,077 |
| Unknown Blocks: | 0 |
Visual Map
? - Unknown Block
x - Potentially Malicious Block
Similar Families
Similar Families
This section lists other families that share similarities with this family, based on EnigmaSoft’s analysis. Many malware families are created from the same malware toolkits and use the same packing and encryption techniques but uniquely extend functionality. Similar families may also share source code, attributes, icons, subcomponents, compromised and/or invalid digital signatures, and network characteristics. Researchers leverage these similarities to rapidly and effectively triage file samples and extend malware detection rules.- Delf.GDE
- Se7enkills.A
