32244041754bd3435936272f30a9eb75fe67269a133602848220019fc5603afa

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jul-10 11:45:31
Detected languages English - United States
Debug artifacts BootstrapPackagedGame-Win64-Shipping.pdb
CompanyName Epic Games, Inc.
LegalCopyright Fill out your copyright notice in the Description page of Project Settings.
ProductName BootstrapPackagedGame
ProductVersion 0
FileDescription BootstrapPackagedGame
InternalName UnrealEngine
OriginalFilename BootstrapPackagedGame-Win64-Shipping.exe

Plugin Output

Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Suspicious This PE is packed with Themida Unusual section name found: .debug
Unusual section name found: .themida
Section .themida is both writable and executable.
The PE only has 5 import(s).
Info The PE contains common functions which appear in legitimate applications. Can access the registry:
  • RegOpenKeyExW
Info The PE is digitally signed. Signer: NEXON Korea Corporation
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Safe VirusTotal score: 0/67 (Scanned on 2026-08-19 16:30:39) All the AVs think this file is safe.

Hashes

MD5 1198e8e0cd6eeec7abce4bd6263c5662 🔍
SHA1 f841a83e2d6b75c2090a14938e78e078eacdcf61 🔍
SHA256 32244041754bd3435936272f30a9eb75fe67269a133602848220019fc5603afa 🔍
SHA3 6d2770719c7520095103c2ced83f24c5f37c3ca7ae9e543dae6aba02e3643171 🔍
SSDeep 98304:/qBX1rNGDlj1LXiClo4rY4G2OrkzuacWNR5KZqO8:/qBNYd1LSRgdzZP5hO8 🔍
Imports Hash 14684dd26cc54dc986e45ff2d20e6209 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 10
TimeDateStamp 2026-Jul-10 11:45:31
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x16a00
SizeOfInitializedData 0x40400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000008E4AA (Section: .themida)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x63a000
SizeOfHeaders 0x400
Checksum 0x637cb1
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0xb71b00
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 6f7d1693ea292cfe3333917aae855873 🔍
SHA1 71873ffef9beb6abc575a37fd823fe8940bba1a9 🔍
SHA256 ec0d6fb5a5e06f1b3b6b1d932563031247f6c899ed3a137b84faf7c04f5db9ac 🔍
SHA3 3093d8cb269b55ff2f414d5618b6c5b405a576191a2db909e1d366fae46dd333 🔍
VirtualSize 0x16830
VirtualAddress 0x1000
SizeOfRawData 0x16a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.48608

.rdata

MD5 477de9098488b1cd616dc220c54ae609 🔍
SHA1 67c07a8f322501be3b1f1a73dba9c99e11514ac7 🔍
SHA256 f4cc2e0959abe0a20378ae2680cb89f07e04a6329c2bc0fd08f36febe91c6f01 🔍
SHA3 b98bda556bddb785d3b5b26fb4c84f267eb21b1267822ee9480dd37269d33b69 🔍
VirtualSize 0xb8e4
VirtualAddress 0x18000
SizeOfRawData 0xba00
PointerToRawData 0x16e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.67798

.data

MD5 d990a0997417c17222c0659bf169e91a 🔍
SHA1 765d2f15e4e71384f5576527b1c5c59e6290a2d9 🔍
SHA256 d73c4550187a62d8e6adf0f2413cc5be7858c4c1057a5758653ac4b076fe5159 🔍
SHA3 034f2609e83de79e7cfb0305f42bc369019b0b80e7245050c54039194b762119 🔍
VirtualSize 0x1e60
VirtualAddress 0x24000
SizeOfRawData 0xc00
PointerToRawData 0x22800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.3343

.pdata

MD5 ce37e04b591911fe1e8794bf76ef2368 🔍
SHA1 9c0bb539f5fd3740285dc1ebef6508ff143708ce 🔍
SHA256 d52073fd278d471799a644f64eb493d955d886b0b632c7075c20dd9d686b46f7 🔍
SHA3 a4ef47333620491d131ba4f8c196f830e9d28656a92ea3e86fb9594df341d74b 🔍
VirtualSize 0x14b8
VirtualAddress 0x26000
SizeOfRawData 0x1600
PointerToRawData 0x23400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.91928

_RDATA

MD5 d1f381734082b284414e878bb1a96158 🔍
SHA1 134d524d26635096ac19c8a4ce585442c18211ff 🔍
SHA256 879220a80d28b218aa9d692a8a2260e432e670acd414e505b4a064293305713a 🔍
SHA3 4083ff30739174c9ca5b229c065ef9247f7504a26adb7bfb31c4f6bfa80cf4b5 🔍
VirtualSize 0x15c
VirtualAddress 0x28000
SizeOfRawData 0x200
PointerToRawData 0x24a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.79684

.rsrc

MD5 b9f9b3cd54bf854e9da7673e9293ac23 🔍
SHA1 343689fb3e544d12df0b4c9376419b994e590da4 🔍
SHA256 77881bef33e909c8a897ba44346039df2035d0273cc0a15e9dd3517fed6cf20b 🔍
SHA3 52f74ae6a34ffcb07bc05bce3b8a3296f4b29fa8bb368765b6c911ea50900be5 🔍
VirtualSize 0x31ca4
VirtualAddress 0x29000
SizeOfRawData 0x31e00
PointerToRawData 0x24c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.41855

.reloc

MD5 3f3eeae422beb6b25c3fc418b6c443f0 🔍
SHA1 4c58c42ea1414470dd54ad35c72f560b5ea6220c 🔍
SHA256 f57f0f6220b10f6c18dfb7cad3e56ef533b2cf14120012453a85129916e7b249 🔍
SHA3 f035a4f5cdf632296c221d997b9ae446d05a736ac5802f6dd581c521cd368a73 🔍
VirtualSize 0x6c8
VirtualAddress 0x5b000
SizeOfRawData 0x800
PointerToRawData 0x56a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.03948

.debug

MD5 88b85537e189744cb692992853e8e2fb 🔍
SHA1 4dadd9b97e6f2532080e0443740362fa9271f2a9 🔍
SHA256 189cb3c76ef8c17ff6a6347348ac293f634f928bf8c63b15fd6a4c7c4d786e6d 🔍
SHA3 55f44f3ea19bc63245c0221db649640800731cfe72e016a32ee7d7780db2299b 🔍
VirtualSize 0x1000
VirtualAddress 0x5c000
SizeOfRawData 0x400
PointerToRawData 0x57200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.33684

.idata

MD5 b554ed50a77112d168862347900d1caa 🔍
SHA1 8f050631951366bb9f7ceb9fcaa573d06b33eab2 🔍
SHA256 eaff99de7f112398d245d1c8de6070f59ea5383545307889f2f67bb859eb81de 🔍
SHA3 a3d090df754211778d0260b76f237279b66cadcb1a3c012f4b66f872488abbfb 🔍
VirtualSize 0x1000
VirtualAddress 0x5d000
SizeOfRawData 0x200
PointerToRawData 0x57600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.6408

.themida

MD5 e2eb1b46ed19e9d31ffe19b92ad6393d 🔍
SHA1 5a298762a6b64c18914e0ea1794323d7ca8f62c5 🔍
SHA256 71f5692bbce7011be356e4bb4025667ca4e8f8595745c5af49746a90a3510f51 🔍
SHA3 17b3d90b8846885a19f2d9cd0f5a04be0da08dd20ad5128faeee59b96e21e10e 🔍
VirtualSize 0x5dc000
VirtualAddress 0x5e000
SizeOfRawData 0x5dc000
PointerToRawData 0x57800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.34455

Imports

kernel32.dll GetModuleHandleA
USER32.dll wsprintfW
ADVAPI32.dll RegOpenKeyExW
SHELL32.dll CommandLineToArgvW
SHLWAPI.dll PathCombineW

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xcc13
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96876
Detected Filetype PNG graphic file
MD5 bc30232119acd8b26341ca0680833dbd 🔍
SHA1 ea932c3ae2052a8a4a2e4f0a31cab02d006a88e1 🔍
SHA256 dbb2567a3d56b8576884245d36eb6ce733bbd9c9fed7fc118017c364b4a5cbe8 🔍
SHA3 a0cacd338107c44307a654c54fd5648c04af68ac827b576980b2ee6e5be0515f 🔍

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.57145
MD5 c0233aa86b9eb8200adb3d20d67360b0 🔍
SHA1 3425d9346e69c828616d1ab56cf6af3085202653 🔍
SHA256 fecb2e975734e203d43098b7830937ada54bdb9ea70c0e1015c95935c1173b78 🔍
SHA3 c1d0ebf92370fd40ca8acd8a335a5a0230d287970be9f1939268cb80b9398a1e 🔍

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.63755
MD5 bac0408e7013e892e2b37aaa79101cbf 🔍
SHA1 c2a025dede5e69b9681a4bdf81f736a97d8d2d71 🔍
SHA256 33dcaaf71c3fa33b3dbe764dff7ecd0c045c72d2d0fbdab1a2449cb5afea5775 🔍
SHA3 4ae731d77fa4b9e2cad528029258119acf630caa81d0b3c271a6da9cb6f67e03 🔍

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.56732
MD5 babb73b57dd33c49f2fa31e863e2a8cb 🔍
SHA1 80d0b7d6e2ccd0da5d8068546614ff8fa7f14232 🔍
SHA256 2b0f474031460de0f64acef33579c8b0d499417fb1b30bd9c345801319b1e8c1 🔍
SHA3 d33305bec581efcba0ead47294233686a06e88ce4c11712ce2ceffb399b557cd 🔍

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.70795
MD5 d92f83074c601b8e1d7928f69429b069 🔍
SHA1 a63a208b4b5c68ac652bab9e32f0294f0cffa9ed 🔍
SHA256 05690ba2c4c6a11956bc51b1624c427f7628de080879b4ae114723f6c4fa7199 🔍
SHA3 a69f042b9afcab7326df5e05467e557ffaf34f0b344f218bdc4c0057fcd3d10c 🔍

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x1fc8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.72991
MD5 de3da57155dbf8c6e39b80c990eb285c 🔍
SHA1 ea92c6345c8a9e335f104b746c74c2ffa0efc37f 🔍
SHA256 b9d66f1c6c6ac51eeee5a1ea2557477f0c3b04313a5750128bf08a1296149112 🔍
SHA3 d38b3fa92bb6a9f5d2b511517bd26456fa2cdafa0c347a080ec2a802201838a7 🔍

7

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.65588
MD5 3cd4ba3a64f1f1303f16d5653c7758e9 🔍
SHA1 97be557facbd086d391dfef862a89152855e3c62 🔍
SHA256 f18cbb236f46b4a98aec09525b3ccfc16fe3d59f4274d6811b710ef840db5153 🔍
SHA3 5572a5b21c0fc5bfe529deaf2d64e1edb82879f0f7408d4427d6b723e0df1dbc 🔍

8

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.16796
MD5 23dcef415cc3e41e9cc6f8a734a5be7b 🔍
SHA1 38e0def65636a34821e3e4ac5371a0dfe2ae9035 🔍
SHA256 49f83a5692c4ffaf1d44bb2fc2ba02156042e3698cd2623a6e08a65e701f7820 🔍
SHA3 e6f36a84a75d950b2ef7a71034287ab18017c4c26c039814ec535dc6f1a6329d 🔍

9

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.18887
MD5 0d8c20ac7a05782723898878d6621a00 🔍
SHA1 e98361743fd246430804df168300a177d7722a09 🔍
SHA256 8539a4b94ed38e7a5b2ce8b10a60c2c7d96ce94a3e0b68307a6096420a83df18 🔍
SHA3 7d9c2a9eae049014959c78959cd017a674773b77996d68bc4942e0334f103bfc 🔍

201

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x1c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.64295
MD5 49a40a082562e85b16c63e67f23d2123 🔍
SHA1 6ccea8ec4b6857f26824dcaf7a0c03d972cb8949 🔍
SHA256 b4a4d5f8cdb2abd96a44ba390ce3c78f1f0475f07d3e02b3c920c58b0869d74f 🔍
SHA3 7433e2cbfe4e8295bfaa29ec72baddc3268e65536eeb8eebb57367c5a34e7117 🔍

202

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.25163
MD5 2e004308984be4795c3c91ea381eb4f1 🔍
SHA1 8216fda784004efc40518c5763710a89258a60b8 🔍
SHA256 9b241466f9c82d9df531bc2bce4bb08356a3eec35d42dc4a6fac90a5e08be3b4 🔍
SHA3 059e0b5ca528330c2b47b30aefd73e428a4d94541126b9690c5643c90b886253 🔍

5201

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x1c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.64295
MD5 49a40a082562e85b16c63e67f23d2123 🔍
SHA1 6ccea8ec4b6857f26824dcaf7a0c03d972cb8949 🔍
SHA256 b4a4d5f8cdb2abd96a44ba390ce3c78f1f0475f07d3e02b3c920c58b0869d74f 🔍
SHA3 7433e2cbfe4e8295bfaa29ec72baddc3268e65536eeb8eebb57367c5a34e7117 🔍

101

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04981
Detected Filetype Icon file
MD5 0fc62d529052024d3d2fcd2cd6032a18 🔍
SHA1 a459b4f9999480c6adbeb4dc41d8bb8c3a6d2a54 🔍
SHA256 de3dd66bc10a60c340de069c0b7d212b22abe8bb174d2ea3a9461c508c49f670 🔍
SHA3 2e7f3a5858fe123a01b356d5c1fe109eb576c623ee2c6aa0d38474ffda820740 🔍

123

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.93324
Detected Filetype Icon file
MD5 26e4bbdda9f8e58b060feaa53c3083e2 🔍
SHA1 bd724469fc43a9a58679a7016c303a5693fe9f94 🔍
SHA256 74c73b469e08909c1b539a80c66cb442d04b3c29cd03e8a533a3c349c5cc84c4 🔍
SHA3 49df4b8afdcf81a2097c2608740540f7e25ce3aa86c892702db1183998142c1b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x35c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41238
MD5 b7cbd6b331abfb3775de87d388295919 🔍
SHA1 65ac35db72122d3dc6d68d56b41700982525d2de 🔍
SHA256 aab9d6bdc1d0b37d94a1aabb0ae7a38227785447a8f99414a811dfd0447e884d 🔍
SHA3 a539572798ba45501cce75e5a9b3567cba5c81469647e703b2653457b5e9cfed 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x580
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.29956
MD5 c61240657e13443faa673941f5309de2 🔍
SHA1 c0fbe2a825d7b0526747bf774f0924ded81b7462 🔍
SHA256 527ba3511f5e6271211343cd03168ec681b1afc356ed87eeece038bbd480731b 🔍
SHA3 e61279125dbdfd1216bc206250bdaf599743f063b1fb74df33968dee1f3c874d 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.2.2.0
ProductVersion 5.2.2.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
CompanyName Epic Games, Inc.
LegalCopyright Fill out your copyright notice in the Description page of Project Settings.
ProductName BootstrapPackagedGame
ProductVersion (#2) 0
FileDescription BootstrapPackagedGame
InternalName UnrealEngine
OriginalFilename BootstrapPackagedGame-Win64-Shipping.exe
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jul-10 11:45:31
Version 0.0
SizeofData 65
AddressOfRawData 0x5c054
PointerToRawData 0x57254
Referenced File BootstrapPackagedGame-Win64-Shipping.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jul-10 11:45:31
Version 0.0
SizeofData 20
AddressOfRawData 0x5c098
PointerToRawData 0x57298

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jul-10 11:45:31
Version 0.0
SizeofData 796
AddressOfRawData 0x5c0ac
PointerToRawData 0x572ac

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0x44b9fe70
Unmarked objects 0
ASM objects (30795) 5
C++ objects (30795) 140
C objects (30795) 10
C objects (VS 2015-2022 runtime 31823) 16
ASM objects (VS 2015-2022 runtime 31823) 9
C++ objects (VS 2015-2022 runtime 31823) 48
Imports (30795) 11
Total imports 109
C++ objects (31948) 1
Resource objects (31948) 1
151 1
Linker (31948) 1

Errors

Leave a comment

No comments yet.