The TLauncher-Installer-1.9.5.4.exe (TL Setup) File Analysis

Updated 3 hours ago

Checked by Malware Check

TLauncher-Installer-1.9.5.4.exe

Technical Analysis

File Name	TLauncher-Installer-1.9.5.4.exe
File Type	Win32 EXE
Magic Bytes	`PE32 executable (GUI) Intel 80386, for MS Windows`
SSDEEP Hash	393216:2tpJTYfKSzSYQ6WZcANurr6of5MJ7ZWqxPAIgtMIMlFRqTGAms7kT96ZSTlyocIa:2tplszJQ6W10rrKJBH5lFRqTzLSTlE
Scanner Version	1.0.234.174
Database Version	2026-01-16 05:00:17 UTC

⚠

Suspicious File Detected

Detected by 8 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

11%

Detection Rate

26,692,576

File Size (bytes)

8/71

Engines Detected

2026-01-16

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	b8b302a7bbf90a84231f45d8600bb885
SHA1	358d170b81277291ea344a7540c50a4ee7819afd
SHA256	b358b89460e05120e389d91299d3e18057c7cb83594d1590de88de993b78a4bb
SHA512	a2557aaefce1c9ae350ec342b19c9f81afa73b399528689fe99152eb339cca5c8bea89ca249ab5691b4007fd621a4f630437fbda405a11255d007d8a5c1b8e1d
ImpHash	edb0a89022b9c14b574f0c2cef13dfa2

Security Engines with Detections (8 of 71)

Skyhigh

Artemis Malicious

Zillya

Dropper.Sysn.Win32.9587 Malicious

ESET-NOD32

Generik.CJMZSDK potentially unwanted application Malicious

Rising

PUA.Undefined!8.132FE (CLOUD) Malicious

GData

Win32.Trojan.PSE.QIQBA6 Malicious

DeepInstinct

MALICIOUS Malicious

TrellixENS

Artemis!B8B302A7BBF9 Malicious

Fortinet

Riskware/Application Malicious

63 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: 663fbbbf73197486b89aed91aa2cbce3 Fuzzy: 14d4b0265f819a4707b510c4802c925b dHash: c092ec6dededd2b0
Image Base	`0x00400000`
Entry Point	`0x004f157b`
Compilation Time	2025-10-20 19:18:11
Checksum	0x0197e21c (Actual: 0x0197e21c)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	OK
Imports	16 libraries
Exports	0 functions
Resources	12 Resources
Sections	5 Sections

Version Information

▼

Comments	TL Setup
CompanyName	TL Inc.
FileDescription	TL Setup
FileVersion	1.9.5.4
InternalName	TL
LegalCopyright	TL Copyright © 2026
LegalTrademarks	TL
OriginalFilename	suf_launch.exe
ProductName	TL
ProductVersion	2.9.0.0
Translation	0x0409 0x0000

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	1,125,150 bytes	1,125,376 bytes	6.52 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5AA82070EA00A500126929B1411FD13C`
`.rdata`	`0x00114000`	264,948 bytes	265,216 bytes	4.99 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`76FFCD05D3708FE2768A86D27048984C`
`.data`	`0x00155000`	52,608 bytes	22,528 bytes	4.70 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1566D992626B85138341858008031531`
`.rsrc`	`0x00162000`	122,484 bytes	122,880 bytes	5.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C09C397EA21EA062E23039D413E35BF3`
`.reloc`	`0x00180000`	165,166 bytes	165,376 bytes	4.90 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`DCEDD396069962A18D59EFBF9C46F0CF`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 12 (121,795 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	9	119,236 bytes	97.9%
RT_GROUP_ICON	1	132 bytes	0.1%
RT_VERSION	1	748 bytes	0.6%
RT_MANIFEST	1	1,679 bytes	1.4%

Certificate Chain Analysis

▼

Certificate Information

Product	TL
Description	TL Setup
File Version	1.9.5.4
Original Name	suf_launch.exe
Signing Date	10:14 PM 01/14/2026 (1 days ago)
Verification Status	Signed
Signers	TLauncher Inc.; Trustwave Global Code Signing CA, Level 1; Trustwave Global Certification Authority
Counter Signers	Viking Cloud TWG Timestamping Responder 2022; Viking Cloud TWG Timestamping CA, Level 1; Trustwave Global Certification Authority
Internal Name	TL
Copyright	TL Copyright © 2026

Certificate Chain Summary

TLauncher Inc. #1 Primary

Validity Period: 2022-12-23 07:13:37 → 2026-02-02 07:12:37

Signature Algorithm: sha256RSA

Serial Number: 07 7F 22 38 BE 42 10 BC DD A8 7C D5 BD DB 90 61 80 9F 32

Trustwave Global Code Signing CA, Level 1 #2 Chain

Validity Period: 2018-02-06 12:21:21 → 2042-08-21 18:21:21

Signature Algorithm: sha256RSA

Serial Number: 06 CE 82 D9 B3 D4 98 74 56 05 D6 66 6B 6D 6D 99 7B CB 73

Viking Cloud TWG Timestamping Responder 2022 #3 Chain

Validity Period: 2022-08-10 10:55:04 → 2033-11-06 16:55:04

Signature Algorithm: sha256RSA

Serial Number: 07 71 C2 62 80 B4 DA 77 02 03 13 AB BC FA A3 FF ED 8B 2A

Viking Cloud TWG Timestamping CA, Level 1 #4 Chain

Validity Period: 2022-08-10 10:18:23 → 2037-08-10 10:18:23

Signature Algorithm: sha256RSA

Serial Number: 07 71 C1 BC FC 08 5F 97 F1 8C 6A 6A 23 C8 D3 7F 08 7D F9

Indigo Rose Software Design Corporation #5 Chain

Validity Period: 2023-08-03 00:00:00 → 2026-08-02 23:59:59