TLauncher

How we got this result

1. Files checkedWe compare the fingerprint and the content of each file with the malware we and others have found, and look at what is inside it.5 of 5 official filesLast checked on 2 Nov 2026
2. Deep checkOur own tools read the code of each current file and look for what harmful code does, like stealing logins or running hidden programs.3 of 5 official filesLast checked on 2 Nov 2026
3. Passed Nothing harmful found in its 5 official files.Our checks look for known signs of harm. They cannot prove that a file is harmless.

At a glance

Download

Official files for Windows and Linux, and files for every system.

Fake sites

10 fake sites found.

Privacy

Sends data. It sends system details, usage data and data we could not identify.

Releases

Version 1.9.7.9.

Good to know

• It can download and start the installer of another program that TLauncher's server offers, after a choice in a window.
• It sends statistics with a unique ID for your install, your processor and graphics card. A box in its privacy settings turns them off. It can show ads.
• It can send its log file to securelogger.net.
• Minecraft's own files can come through TLauncher's servers instead of Mojang's.

What its code does, in Security · What it sends, in Privacy

Source and links

Official site

tlauncher.org

Official site

10 sites use its name to give other files. See Fake sites

Official site

tlauncher.org

Newest version

1.9.7.9

Account

An optional TLauncher account, or a licensed Minecraft account. It also runs without one.

Company

TLauncher Inc. is a company of the Seychelles, according to its terms.

Ads

Its page footer says the software contains ads.Read on 2 Nov 2026

Other addresses

tlauncher.co, tlauncher.cc and tlauncher.download send you to tlauncher.org.Seen on 25 Oct 2026

What we checked

A launcher runs on your computer like any program, and it downloads the game and its mods, so harmful code in it can steal your accounts or files.

Files checkedEach official file is downloaded on a separate machine, opened with every file inside it and never run. ClamAV, a free antivirus, and our YARA rules look for known signs of harm in all of it.

5 of its 5 official files, with every file inside them.Last checked on 2 Nov 2026

Deep checkOur own tools read the Java code in the files and look for what harmful code does, like stealing logins or running hidden programs. They read Java code only.

3 of its 5 official files. 2 hold no Java code: programs made for one system.

SignatureThe name of the company or person that signed the file. A file changed after signing loses its signature.

Signed by TLauncher Inc.Our tool could not confirm the certificate chains

Not read

The full launcher, which the starter downloads later. The inside of the Windows installers, in a format our tools do not open. The Windows program, compiled so that its code cannot be read as Java.

What we found

What the code of its starter and of the full launcher can do. Our rules do not count any of this as harmful.

Gets the launcher later

The file you download is a starter. It gets the full launcher from TLauncher's servers, such as repo.tlauncher.org, when it starts.

Offers other programs

It can download the installer of another program, chosen by TLauncher's server, and start it after a choice in a window. When the offer needs admin rights, it also downloads TLauncherUpdater.exe to start it.We do not know which program is offered: its name comes from the server

Sends its log

It can send its log file to securelogger.net and copy the link it gets back.When this happens is not known

Sends statistics

To stat.fastrepo.org or stat.tlauncher.ru: each start of the launcher; about once a day a unique ID for your install with your system, Java version, screen size, launcher version, processor name, graphics card and memory; the Minecraft version you start or install; and whether some of its functions worked.Read in the code of the full launcher on 2 Nov 2026. No e-mail, player name, password or mod list in these data

Turning statistics off

Before each of these sends, the launcher checks a statistics box in its privacy settings: when it is ticked, nothing is sent. The same screen asks the server to delete the data of your ID.Whether the box is ticked when you install it: not known

Resets the network

The full launcher can download TLauncherUpdater.exe without encryption (plain http) and start it with netsh winsock reset, a command that resets the network settings of Windows.

Reads your system

On 32-bit Windows it runs systeminfo to check the Java version. The answer stays in the launcher and is not part of the statistics. It can be written to its debug log.

Relays Minecraft's files

Its settings let Minecraft's own files come through TLauncher's servers (resource.tl.vg) instead of Mojang's.Read in its settings file

Admin rights on Linux

The README in the zip tells Linux players to start it as root, with sudo.

Accepts connections from other computers

The code references server sockets or an embedded web server. Used by some tools for local web interfaces, profilers, or LAN features.In all 3 files whose Java code we read

Can connect to the internet

It has code that can go online, for example to check for updates, sign you in or download the game. What it sends is in Privacy.In all 3 files whose Java code we read

Can run scripts

References JavaScript, Groovy, Lua or similar engines. Programs use them for settings, add-ons or their interface.In all 3 files whose Java code we read

Creates code while it runs

The code can create or load pieces of code while it runs. Launchers load the game, its mod loaders and their own modules this way.In all 3 files whose Java code we read

Starts other programs

The code can start another program on your computer. Common reasons: opening a web link or a folder, reading hardware information, launching a helper tool.In all 3 files whose Java code we read

Contains code made for your system

Native libraries (.dll, .so, .dylib) run outside the Java sandbox. Used for speed, compression, audio, graphics or database engines.In 1 of the 3 files whose Java code we read

What we checked

A launcher can send information about you over the internet, such as your player name or your login.

Deep checkWe read the code and list each web address it can contact, and what it sends. We leave out code that is never used.

The Java code of all 3 files that hold some. See each file in Releases

Web addresses

stat.fastrepo.org: Receives its statistics, as stat.tlauncher.ru does: each start, and about once a day a summary of your computer.Sends: a unique ID for your install, your system, Java version, screen size, processor, graphics card and memory, and the Minecraft versions you start. A box in its privacy settings turns this offAddress built while it runsThe code builds this address while it runs, so it is not written in the file.: Purpose not known.Sends: data we could not identify. The code sends something, but our checks cannot tell what

Also named in its codeAddresses written in its code that no code we read contacts: a link shown to you, a default setting, or code we could not follow.

advancedrepository.netgithub.comlaunchermeta.mojang.compage.tlauncher.orgrepo.fastrepo.orgrepo.tl.vgrepo.tlauncher.orgrepo.tlauncher.ruresource.fastrepo.orgresource.tlauncher.orgsecurelogger.netsecurelogger.topstat.tlauncher.rutlauncher.org

What TLauncher says it collects

From its privacy policy, dated 1 Apr 2023. Our reading of the full launcher found the same statistics, except the country, which the server can tell from your address.

Statistics

Java version, screen size, system, country, launcher version, processor and graphics card, game starts, and a unique ID for your install.

Audience tool

Yandex Metrika.

Ads

It can show ads from other companies.

To turn it off

Settings, then Advanced, then Disable sending anonymous statistics.

How to know the official site

Official site

tlauncher.org

Also leads there

tlauncher.cc, tlauncher.co and tlauncher.download send you to tlauncher.org.

Files come from

tlauncher.org

Signed byThe name of the company or person that signed the file. A file changed after signing loses its signature.

TLauncher Inc., on its 2 Windows files7 of the fake sites below give files also signed by TLauncher Inc., but not files of the official download page. Only the SHA-256 tells them apart.

SHA-256A fingerprint of the file. The same fingerprint means the same file, byte for byte.

TLauncher-Installer-1.9.7.9.exe5910d154eeb627e352c8bb303505fb436c09236e0b4c9eca80b76c1618aee7eeEvery official file and its SHA-256, in Releases

The 10 fake sites we foundChecked on 4 Nov 2026

Of these, 1 gives a file with malware, 1 a file with a Warning, 7 a file that is not the official one and 1 no file we could get. Sites in one fold share their pages and their download.

If you downloaded a file from one of these sites

1. Drop the file in the Scanner. It tells you if it is an official file of TLauncher or a file of these sites.
2. If it is not an official file and you have not opened it, delete it.
3. If you opened it: run a full scan with your antivirus. On Windows, the built-in one is Microsoft Defender, in the Windows Security app.
4. If you signed in to the launcher it installed: use "sign out everywhere" in your Microsoft security settings and change your Microsoft account password.