dc65df4c52ad4e8c2589453e347964a35ca3e753bb2f13a91d8414cc91d48542

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2025-Jun-25 12:05:38
Detected languages English - United States
Debug artifacts c:\build\discbot03\t1xfinal-pc-1.1.5\pc\default\Release\launcher.pdb
CompanyName Sony Interactive Entertainment
FileDescription The Last of Us™ Part I
FileVersion 1.1.4.0
LegalCopyright Sony Interactive Entertainment
ProductName The Last of Us™ Part I
ProductVersion 1.1.4.0

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
 Functions which can be used for anti-debugging purposes:
  • NtQuerySystemInformation
  • SwitchToThread
 Possibly launches other programs:
  • CreateProcessA
Info The PE is digitally signed. Signer: Sony Interactive Entertainment LLC
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Safe VirusTotal score: 0/53 (Scanned on 2026-07-02 11:06:02) All the AVs think this file is safe.

Hashes

MD5 7b0d3f5fea4925e11de3dfdc89c2d7d6
SHA1 14f880c6f7c66a6e406878ffcad1cee3dc87c786
SHA256 dc65df4c52ad4e8c2589453e347964a35ca3e753bb2f13a91d8414cc91d48542
SHA3 386f1342c6267bc888413b44e0261844dbe6add98396561734188e0cf39e4173
SSDeep 24576:u5JAC0Y1jK6543XZjptWD6m9bjdu7gH8RUitbwc:u5JAzYpK650UD6m9bocRWw
Imports Hash 744bd974ad2584bac90942bd7d17814b

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 10
TimeDateStamp 2025-Jun-25 12:05:38
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xb1a00
SizeOfInitializedData 0x137400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000000038E6 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x1f0000
SizeOfHeaders 0x400
Checksum 0x145f83
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d7882082b0da68e8a9114f057fac4444
SHA1 e840216092f2f12e57242aa69c4f7c60108d74a4
SHA256 0c24a85feb9e051c7cfa977315cee955648aeb20df2a87e3b0adb984697296c9
SHA3 dc581405e292a5660e53655a272c40c944f699953768a9dd76a15076185de5ab
VirtualSize 0xb18a7
VirtualAddress 0x1000
SizeOfRawData 0xb1a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.66381

.rdata

MD5 915805bf0c31c7da234d7687a3007ae4
SHA1 0a529625dc03b271f8978dfd7006fd5543c9bfe3
SHA256 996daf7affc0096fdbdbd50625ce5cc46140c2ad59df4080a47132c6e5a82728
SHA3 5c699308a792086bd3a4b826edd05a7cd11dd0734c357ab92e121cd7c20bdcc5
VirtualSize 0x31916
VirtualAddress 0xb3000
SizeOfRawData 0x31a00
PointerToRawData 0xb1e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.58811

.data

MD5 47ec3bc17987f97e753f58daabca9d39
SHA1 2144437894c3d3462fd286c17d02708c324b22a4
SHA256 a9fab16781b1cb3c7ad5c64125fd45cbecb1f54dd9c0781d57dbd8c6ba5236a9
SHA3 c2515df34ddb2c8ca58c16b99e601b2b6fbeb0e85d62fd4a17d1f447cea1da09
VirtualSize 0xae029
VirtualAddress 0xe5000
SizeOfRawData 0x2600
PointerToRawData 0xe3800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.52047

.pdata

MD5 35e48d2a050f2208e3eb698dd4948c5a
SHA1 ecdaf72927bdf0df79cbf5676a6f2ce5a11c7882
SHA256 32e136f52643a35df8d15afe9119ee5829d875a014736f63a775fab256730de8
SHA3 1f874eea2835c708c4a46d5318600693f21a1ca1dea0e869a8d4a946f3cbfb23
VirtualSize 0x87fc
VirtualAddress 0x194000
SizeOfRawData 0x8800
PointerToRawData 0xe5e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.66286

.idata

MD5 3bc2155514e001c639e8c8111930ccbe
SHA1 6bd8fcb48cae4466c4f595dbbe93a358f13453f0
SHA256 a101a8df6415f077eb78a645af9e89c23b30daa47635cafd4c3a53e8ed4b1811
SHA3 f82d11ebfbd8d0f3331d88b46563d0a5d2ecabbcb23c3c5371297ec979aa051b
VirtualSize 0x1d25
VirtualAddress 0x19d000
SizeOfRawData 0x1e00
PointerToRawData 0xee600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.70182

.tls

MD5 d1fafae298892f9448deaff63bedc9ef
SHA1 ad5cf1e59781fa4eab8a778929d4841a4b32340a
SHA256 541e5c6c9870129dfc6cf9eef8394b16d4ee65d6570817299d0cbf3a0e6b2064
SHA3 002b0428a3a14ea8c3ffe1589d2d59460667dee05f6bea912264cc4c80743bb1
VirtualSize 0x388
VirtualAddress 0x19f000
SizeOfRawData 0x400
PointerToRawData 0xf0400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.0111738

.00cfg

MD5 06b160f0673b1220a0e4fe9621e7d097
SHA1 ee34861762edcca75bd4f2b9351c64feebb7930a
SHA256 a102b47fe16dfcab8ad514d8ee7ed41c97c5f56b4b7b7b8a5e8500d1fdc67820
SHA3 6ffe60be42b142a6bc6f4189e3388339bc525cbad157931b98160d8b9fa4cfd9
VirtualSize 0x151
VirtualAddress 0x1a0000
SizeOfRawData 0x200
PointerToRawData 0xf0800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.345827

_RDATA

MD5 3fa3ad83f4f4d25a08421a2fbece7430
SHA1 b8ce9a0c5b4304114badeaf73b7d3a32c71b63df
SHA256 f695bfb6f2d8e68d0b22e3c1b43ac34030853f0717c4a30ceb1a4db5dd0c1505
SHA3 8a264cefd141b57abfabe6f16d152bd45fd6f28ef356b6b82bd2fa18deca72ca
VirtualSize 0x232
VirtualAddress 0x1a1000
SizeOfRawData 0x400
PointerToRawData 0xf0a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.4231

.rsrc

MD5 ebd664208aa8d2bef3476c9fa6c49a7f
SHA1 c68b8c9e27b177b733da86fc4c688049e71a6056
SHA256 6fc35030f88c3a94f1f78a4b287a42f0e78bd7b7af0761622d8054da6f37070f
SHA3 aabf658c5decd0e5f10072912e5d6860e853b3fd83edb4300eff41d902abc2ce
VirtualSize 0x4a120
VirtualAddress 0x1a2000
SizeOfRawData 0x4a200
PointerToRawData 0xf0e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.72245

.reloc

MD5 9471c0042504f7e07c7d93aa5e40131b
SHA1 b30c526031a5952b5796ec5fc176d3ec78129502
SHA256 a844b73de45609fda12daab85239de55f8b3bf02f77f5482b4d2377a19fd3e62
SHA3 152d1ccbb89bbffc4bc1efc6279c318fbfa2b87927d25edf698eb7e7cd63655f
VirtualSize 0x2498
VirtualAddress 0x1ed000
SizeOfRawData 0x2600
PointerToRawData 0x13b000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 2.8775

Imports

ole32.dll CoInitializeEx
CoUninitialize
WinPixEventRuntime.dll PIXEventsReplaceBlock
PIXGetThreadInfo
AVRT.dll AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW
AvSetMmThreadPriority
ntdll.dll RtlUnwind
RtlUnwindEx
NtQuerySystemInformation
RtlPcToFileHeader
WINMM.dll timeEndPeriod
timeBeginPeriod
api-ms-win-core-synch-l1-2-0.dll WaitOnAddress
WakeByAddressAll
KERNEL32.dll GetConsoleMode
CreateFileW
WriteConsoleW
HeapSize
HeapReAlloc
DeleteCriticalSection
GetConsoleOutputCP
ReadConsoleW
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
SetConsoleCtrlHandler
GetProcessHeap
GetStringTypeW
CloseHandle
CreateProcessA
OutputDebugStringW
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
RaiseException
WaitForSingleObject
Sleep
SwitchToThread
GetCurrentThread
SetThreadPriority
SuspendThread
ResumeThread
GetThreadId
SetThreadDescription
GetProcessAffinityMask
SwitchToFiber
DeleteFiber
ConvertFiberToThread
CreateFiberEx
ConvertThreadToFiber
SetThreadAffinityMask
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
GetModuleHandleW
GetProcAddress
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
SetEvent
ResetEvent
CreateEventExW
PulseEvent
VirtualAlloc
VirtualFree
IsDebuggerPresent
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FormatMessageA
SetWaitableTimer
CreateWaitableTimerExW
WaitForMultipleObjects
CreateWaitableTimerW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetStdHandle
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
MultiByteToWideChar
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
ReadFile

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1b94d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98941
Detected Filetype PNG graphic file
MD5 8514345d9191a54d2e74761893c6c10d
SHA1 0757492c7f6d79b67827030ad0874106da4e2793
SHA256 6e0f63e16667eb2792990660c2e1c30aa4e56758ae626b61fb32e99175be5679
SHA3 7d87250d15c0c04140e53ebf539eb1519a5594c12aebe10a3ad019a7b7bbd5d2

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.57768
MD5 f39ebaecd4e58bd5e3bf913747885871
SHA1 1a2bc751627b583d66d3cdafd13a9062e70fa38d
SHA256 03e0e24ef8581e96540f50e8b0a12d66a57b98a1fc913bb248af3591dcaf969a
SHA3 43c034f523296475384aacfffcb07dc7772f4b98a8fdbc31a46769867a0c6960

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.57221
MD5 bf6d462828c991d6c417f2d387fade8a
SHA1 3d4dc86d31d47a239a9506670075ce89f097bac3
SHA256 f1fc51868b0e3e228ce7a86a4f9ecfa843bdb27d4c840083f138cb263962e430
SHA3 1e0dbd623a7a416e75b585727b178e888a68a9604f9119d5d8270f19a4ea1045

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.56147
MD5 b0a6ccabc70bfb9e9e2a0bad597078ec
SHA1 758dab0f81d99dc6739099c3ad8186581cef8c37
SHA256 5a40d22e3a4ecec4342338460d994a6d103ab59850feb8363f089c943cf78cd2
SHA3 63f32f981ad7bd3a884afd9ba1df108e5f602c6f5db6a33b6e041bdb848da848

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.52816
MD5 837b3482a9ef6149da7694cb7676bbcf
SHA1 562baed34f14a8438d75ecedece02abb3b287039
SHA256 cdb1cd6e925c4c032a23c32bb173618d9ad35e294f89befe28303c756c70d76e
SHA3 72a58735053541613c2b05b7c4aa1f1e18f9a22b79f343f9fbc923e70b79be6d

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.51218
MD5 6beadb34d1cb61033ebef6a99285a67d
SHA1 e1f21b0b29c0adeef4bee8efcc466c3d916b8b2c
SHA256 eecdce53e450c6c33d98250c4ab09a8098dbd51842f10f877700027f07638669
SHA3 8c5a8758613aec2ec3507409ccd244a6e63ce8f5930ec3c37efa8a5ff0b16ea3

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.28749
MD5 1b8422c5ef5a1ef1977bd3d6aa4aaa87
SHA1 38284e7ed11e339fbb2953499e8f0a1f1f244af9
SHA256 4696fb379bb582e8abdf9385a9e1c006dce98dad6085b8c66ccf2ad40b44ce1f
SHA3 484316eb4853fd3e3045ff17d4a1698612b105a3864d2ce11dec0a56a665a906

101

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.91513
Detected Filetype Icon file
MD5 df9afdbc34d008f525c9c0b80f1700f5
SHA1 1ef6047c89dc2db0ec837017594189c4f652a074
SHA256 6cd4751034a35bd998119cd36878db18538445a919eb5af10f9917fd6d7c6555
SHA3 9e9356c755f3df3f820979001ff419119be2c2a099033cf8837bdde7a4212360

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x2ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.35509
MD5 baa081afa1c8863664141837e924e18a
SHA1 9ad62717b3219e548b62a172466a931bed90544d
SHA256 d5d0e806632c5b10e5f4c44dcadc91d1d19fd5803da6ab877a03ea736951f0ab
SHA3 6031462999d51ded57ad040d93e06fbf20aab2414b8e01e5c648e140fcf0e993

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.1.5.0
ProductVersion 1.1.5.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
CompanyName Sony Interactive Entertainment
FileDescription The Last of Us™ Part I
FileVersion (#2) 1.1.4.0
LegalCopyright Sony Interactive Entertainment
ProductName The Last of Us™ Part I
ProductVersion (#2) 1.1.4.0
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Jun-25 12:05:38
Version 0.0
SizeofData 93
AddressOfRawData 0xd81dc
PointerToRawData 0xd6fdc
Referenced File c:\build\discbot03\t1xfinal-pc-1.1.5\pc\default\Release\launcher.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Jun-25 12:05:38
Version 0.0
SizeofData 20
AddressOfRawData 0xd823c
PointerToRawData 0xd703c

TLS Callbacks

StartAddressOfRawData 0x14019f000
EndAddressOfRawData 0x14019f287
AddressOfIndex 0x140190fd8
AddressOfCallbacks 0x1400b3b28
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x138
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1400e6298

RICH Header

XOR Key 0x280941f6
Unmarked objects 0
C objects (27412) 14
ASM objects (27412) 16
C++ objects (27412) 145
C++ objects (30034) 40
C objects (30034) 17
ASM objects (30034) 9
Imports (VS2008 SP1 build 30729) 2
Imports (VS 2015/2017/2019 runtime 29913) 2
Imports (27412) 11
Total imports 141
C++ objects (VS2019 Update 11 (16.11.8) compiler 30138) 42
Resource objects (VS2019 Update 11 (16.11.8) compiler 30138) 1
151 1
Linker (VS2019 Update 11 (16.11.8) compiler 30138) 1

Errors

Leave a comment

No comments yet.