Gridinsoft Logo
File Icon

The TEKLauncher (1).exe (TEKLauncher) File Analysis

Updated 2 months ago
Checked by Malaware Check
TEKLauncher (1).exe

Technical Analysis

File Name TEKLauncher (1).exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-03-30 21:00:27 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,313,208
File Size (bytes)
2025-03-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2d90de0edaa110e958aa125ecabeac30
SHA1
4ad7c9089ee1d4ff1a941613185e8c278de4d5c3
SHA256
240a9f7e23b8822c4f480bcbc2d8fca1bf486817097cb86347a890092baa99b1
SHA512
8b5d7070cfbb8c9ff0d875561305b4fa012743d847be8dc4ce4e807df89169243dcbf6d35714e4a29ca2e1ba13535542702a7ea781ff31928744e733213a2f4d
ImpHash
78da59308ee0088a874b4a6cdd7d91bd

PE Analysis

Basic Information

▼
Icon
Hash: bb9beb873272a25026bf66d57b68d25d
Fuzzy: 1229ed6e29282087d05fdc764bcbc036
dHash: f8f8f0e8f8f2f0c0
Image Base 0x140000000
Entry Point 0x140014320
Compilation Time 2023-03-24 17:42:24
Checksum 0x0032f9b4 (Actual: 0x0032f9b4)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
Digital Signature Chain verification from CN=Nuclearist (serial:39250072496249749898143963923751766372, sha1:d675c4cc5dfa7241da44fe659936bf503f71b10d) failed: The X.509 certificate provided is self-signed - "Common Name: Nuclearist"
Imports 12 libraries
Exports 0 functions
Resources 11 Resources
Sections 7 Sections

Version Information

▼
Translation 0x0000 0x04b0
CompanyName Nuclearist
FileDescription TEKLauncher
FileVersion 9.4.84.0
InternalName TEKLauncher.dll
LegalCopyright Copyright © 2020-2023 Nuclearist
OriginalFilename TEKLauncher.dll
ProductName TEK Launcher
ProductVersion 9.4.84.0
Assembly Version 9.4.84.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 101,500 bytes 101,888 bytes 6.33 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 862B6A1DC2A0FE9FFD3D4382727E71E1
.rdata 0x0001a000 39,982 bytes 40,448 bytes 4.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 96A70B765FAAD1FC09D4AB7825301E7C
.data 0x00024000 5,480 bytes 2,560 bytes 2.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0A7F2235243CFB2BAB16CF80984A3C2A
.pdata 0x00026000 5,460 bytes 5,632 bytes 5.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A5ACBF7EFBC23A3E2942672429AC01CF
_RDATA 0x00028000 348 bytes 512 bytes 3.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A050C22A1FE15371AC99688988E31007
.rsrc 0x00029000 184,820 bytes 184,832 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FC7D5A53520771A6DF9A3CEDD30A18A2
.reloc 0x00057000 840 bytes 1,024 bytes 4.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A9F8C5FFC9C3542B19700BF44209BE83
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 11 (184,163 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 182,166 bytes
98.9%
RT_GROUP_ICON 1 118 bytes
0.1%
RT_VERSION 1 806 bytes
0.4%
RT_MANIFEST 1 1,073 bytes
0.6%

Certificate Chain Analysis

▼
Certificate Information
Product TEK Launcher
Description TEKLauncher
File Version 9.4.84.0
Original Name TEKLauncher.dll
Signing Date 10:10 PM 06/03/2023 (732 days ago)
Verification Status A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
Signers Nuclearist
Internal Name TEKLauncher.dll
Copyright Copyright © 2020-2023 Nuclearist
Certificate Chain Summary
DigiCert High Assurance EV Root CA #1 Primary
Validity Period: 2006-11-10 00:00:00 → 2031-11-10 00:00:00
Signature Algorithm: sha1RSA
Serial Number: 02 AC 5C 26 6A 0B 40 9B 8F 0B 79 F2 AE 46 25 77
.NET Foundation Projects Code Signing CA #2 Chain
Validity Period: 2018-04-27 12:41:59 → 2028-04-27 12:41:59
Signature Algorithm: sha256RSA
Serial Number: 07 B0 41 8D A5 1E 14 8C 33 1B BC DE B7 13 83 23
Windows Community Toolkit (.NET Foundation) #3 Chain
Validity Period: 2021-04-28 00:00:00 → 2024-07-19 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B A6 99 C3 81 1B A1 6A BA 92 38 65 BA 32 F7 14
DigiCert Timestamp 2022 - 2 #4 Chain
Validity Period: 2022-09-21 00:00:00 → 2033-11-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #5 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #6 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #7 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Google LLC #8 Chain
Validity Period: 2021-07-02 00:00:00 → 2024-07-10 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0E 44 18 E2 DE DE 36 DD 29 74 C3 44 3A FB 5C E5
Nuclearist #9 Chain
Validity Period: 2022-04-15 10:03:25 → 2922-04-15 10:13:25
Signature Algorithm: sha256RSA
Serial Number: 1D 87 49 FB 82 96 9C B6 4D AA 9A C3 A7 9A 09 64

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

Chain verification from CN=Nuclearist (serial:39250072496249749898143963923751766372, sha1:d675c4cc5dfa7241da44fe659936bf503f71b10d) failed: The X.509 certificate provided is self-signed - "Common Name: Nuclearist"

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware