The TLauncher-Installer-1.9.7.6.0.exe (TL Setup) File Analysis
Technical Analysis
| File Name | TLauncher-Installer-1.9.7.6.0.exe |
| File Type |
Win32 EXE
|
| Magic Bytes | PE32 executable (GUI) Intel 80386, for MS Windows |
| SSDEEP Hash |
1572864:MtpntBpx56Bu61eGv1pjg6pqPKJBZlCdwlS5ADYqI:YX6I61H5g6ImPgwkADY3
|
| Scanner Version | 1.0.252.174 |
| Database Version | 2026-08-20 00:00:18 UTC |
Suspicious File Detected
Detected by 1 security engines - requires caution
This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
2%
Detection Rate
61,990,280
File Size (bytes)
1/66
Engines Detected
2026-08-20
Analysis Date
Scan Another File
File Identification
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
02a406a7931c72ddf0be8ad6e7ebf3e9
|
|
| SHA1 |
734428238f5744e29cf73e2d482fc113bcfdfb15
|
|
| SHA256 |
473f014069f7db63c4d9c1bec76e790adad169862cc6e338f0b36a7824a724a4
|
|
| SHA512 |
a2af9a6223e3505f0c43882601b124d1ef5b44d56a4b07a26c72b4a1132a4931c78e271d1cd4f918f400c6d35e84dcfaa6d1e3dc70cc9eead82e4b2045b6f273
|
|
| ImpHash |
edb0a89022b9c14b574f0c2cef13dfa2
|
Security Engines with Detections (1 of 66)
Malwarebytes
PUP.Optional.TLauncher
Malicious
65 engines reported no threats -
Only engines with detections are shown above for clarity
PE Analysis
Basic Information
▼| Icon |
Hash: 663fbbbf73197486b89aed91aa2cbce3
Fuzzy: 14d4b0265f819a4707b510c4802c925b dHash: c092ec6dededd2b0 |
| Image Base | 0x00400000 |
| Entry Point | 0x004f157b |
| Compilation Time | 2026-06-01 16:22:31 |
| Checksum | 0x03b22370 (Actual: 0x03b22370) |
| OS Version | 5.1 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Digital Signature | An error occurred while validating the countersignature: The root Certum Trusted Network CA 2 lists its extended key usages, but {'time_stamping'} are not present |
| Imports | 16 libraries |
| Exports | 0 functions |
| Resources | 12 Resources |
| Sections | 5 Sections |
Version Information
▼| Comments | TL Setup |
| CompanyName | TL Inc. |
| FileDescription | TL Setup |
| FileVersion | 1.9.7.6 |
| InternalName | TL |
| LegalCopyright | TL Copyright © 2026 |
| LegalTrademarks | TL |
| OriginalFilename | suf_launch.exe |
| ProductName | TL |
| ProductVersion | 2.9.0.0 |
| Translation | 0x0409 0x0000 |
PE Sections
▼| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
1,125,150 bytes | 1,125,376 bytes | 6.52 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
5AA82070EA00A500126929B1411FD13C |
.rdata |
0x00114000 |
264,948 bytes | 265,216 bytes | 4.99 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
76FFCD05D3708FE2768A86D27048984C |
.data |
0x00155000 |
52,608 bytes | 22,528 bytes | 4.70 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
1566D992626B85138341858008031531 |
.rsrc |
0x00162000 |
122,484 bytes | 122,880 bytes | 5.52 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F641D981496F60DDBE5A39FAF879B5AC |
.reloc |
0x00180000 |
165,166 bytes | 165,376 bytes | 4.90 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
DCEDD396069962A18D59EFBF9C46F0CF |
Entropy Analysis Alert
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Analysis
▼
Total Resources: 12
(121,795 bytes)
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 9 | 119,236 bytes | |
| RT_GROUP_ICON | 1 | 132 bytes | |
| RT_VERSION | 1 | 748 bytes | |
| RT_MANIFEST | 1 | 1,679 bytes |
Certificate Chain Analysis
▼Certificate Information
| Product | TL |
| Description | TL Setup |
| File Version | 1.9.7.6 |
| Original Name | suf_launch.exe |
| Verification Status | Signed |
| Signers | TLauncher Inc.; Certum Code Signing 2021 CA; Certum Trusted Network CA 2; Certum Trusted Network CA |
| Counter Signers | Certum Timestamp 2026; Certum Timestamping 2021 CA; Certum Trusted Network CA 2; Certum Trusted Network CA |
| Internal Name | TL |
| Copyright | TL Copyright © 2026 |
Certificate Chain Summary
TLauncher Inc. #1
Primary
Validity Period: 2026-01-12 10:46:49 → 2029-01-11 10:46:48
Signature Algorithm: sha256RSA
Serial Number:
19 CB 75 44 08 86 66 19 B4 E5 30 C5 65 73 C1 3E
Certum Code Signing 2021 CA #2
Chain
Validity Period: 2021-05-19 05:32:18 → 2036-05-18 05:32:18
Signature Algorithm: sha384RSA
Serial Number:
99 A3 80 0A 26 55 3B 65 AB DC 6E 84 A6 B3 EA 39
Certum Timestamp 2026 #3
Chain
Validity Period: 2026-03-11 07:34:54 → 2036-02-27 07:34:54
Signature Algorithm: sha384RSA
Serial Number:
28 F0 77 C1 1C 36 BD FE 5F 74 32 47 70 27 2E 03
Certum Timestamping 2021 CA #4
Chain
Validity Period: 2021-05-19 05:32:07 → 2036-05-18 05:32:07
Signature Algorithm: sha384RSA
Serial Number:
E7 FF 69 C7 3B 35 CE 4B 91 26 D8 74 7C 68 A5 87
Certum Trusted Network CA 2 #5
Chain
Validity Period: 2021-05-31 06:43:06 → 2029-09-17 06:43:06
Signature Algorithm: sha384RSA
Serial Number:
1B B5 8F 25 2A DF 23 00 49 28 C9 AE 3D 7E ED 27
Indigo Rose Software Design Corporation #6
Chain
Validity Period: 2023-08-03 00:00:00 → 2026-08-02 23:59:59
Signature Algorithm: sha384RSA
Serial Number:
26 F0 EA 65 60 7F CA 8F E0 ED 7E AA BF 38 D4 3C
USERTrust RSA Certification Authority #7
Chain
Validity Period: 2019-03-12 00:00:00 → 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number:
39 72 44 3A F9 22 B7 51 D7 D3 6C 10 DD 31 35 95
Certera Code Signing CA #8
Chain
Validity Period: 2022-09-07 00:00:00 → 2032-09-06 23:59:59
Signature Algorithm: sha384RSA
Serial Number:
21 66 F0 8A 51 EB FC AB CC 8F 44 30 91 A9 4B 0E
Sectigo Public Time Stamping Signer R36 #9
Chain
Validity Period: 2025-03-27 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number:
A4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 24
Sectigo Public Time Stamping CA R36 #10
Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number:
7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Root R46 #11
Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number:
36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68
Microsoft Corporation #12
Chain
Validity Period: 2024-09-12 20:11:14 → 2025-09-11 20:11:14
Signature Algorithm: sha256RSA
Serial Number:
33 00 00 04 04 6C 74 06 FF 57 2B 27 72 00 00 00 00 04 04
Microsoft Code Signing PCA 2011 #13
Chain
Validity Period: 2011-07-08 20:59:09 → 2026-07-08 21:09:09
Signature Algorithm: sha256RSA
Serial Number:
61 0E 90 D2 00 00 00 00 00 03
Microsoft Time-Stamp Service #14
Chain
Validity Period: 2024-07-25 18:31:14 → 2025-10-22 18:31:14
Signature Algorithm: sha256RSA
Serial Number:
33 00 00 01 FC 18 A0 AF CC 69 5A 87 3A 00 01 00 00 01 FC
Microsoft Time-Stamp PCA 2010 #15
Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number:
33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15✓ This file has been digitally signed and the certificate chain has been verified
- The signature ensures file integrity and authenticity from the publisher
- Timestamping proves when the signature was applied
Certificate Verification Status
An error occurred while validating the countersignature: The root Certum Trusted Network CA 2 lists its extended key usages, but {'time_stamping'} are not present
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Remember: This is Result of Online Virus Scanner
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareKeep Your System Protected
This file appears clean, but regular security maintenance is important
-
1
Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
-
2
Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
-
3
Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
-
4
Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
1 security engines flagged this file. Could be a real threat, or could be a false alarm — common with keygens, game trainers, and legitimate system utilities. Check if the file has a valid digital signature and whether it came from the official source.
Leave a Comment
Gridinsoft Anti-Malware
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!
