6f7b1484cedea033b6f2ebc17ca86e52428121affb82cd8e93c0cd46436878c3

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Dec-02 14:49:50
Detected languages English - United States
Debug artifacts BootstrapPackagedGame-Win64-Shipping.pdb
CompanyName Epic Games, Inc.
LegalCopyright Fill out your copyright notice in the Description page of Project Settings.
ProductName BootstrapPackagedGame
ProductVersion ++UE5+Release-5.1-CL-0
FileDescription BootstrapPackagedGame
InternalName UnrealEngine
OriginalFilename BootstrapPackagedGame-Win64-Shipping.exe

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • adobe.com
  • http://ns.adobe.com
  • http://ns.adobe.com/photoshop/1.0/
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
  • http://purl.org
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • ns.adobe.com
  • www.w3.org
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • LoadLibraryW
  • GetProcAddress
  • LoadLibraryExW
 Can access the registry:
  • RegOpenKeyExW
  • RegCloseKey
  • RegQueryValueExW
 Possibly launches other programs:
  • CreateProcessW
Safe VirusTotal score: 0/71 (Scanned on 2026-06-08 23:46:31) All the AVs think this file is safe.

Hashes

MD5 9c7bb7132cc48fc31806f8f3101c576f
SHA1 5ee2712afa8de184e888dff0e02fa447fc020cc4
SHA256 6f7b1484cedea033b6f2ebc17ca86e52428121affb82cd8e93c0cd46436878c3
SHA3 4d06f2e155c982c32fe36b0c651ae056fd877693200424e49b3e89fd30481f89
SSDeep 3072:ro6veDO++M3Qf+2vhDOSmjIZuVgNkCS5Bn0j3Ocd5vE:8Ik/+MAfNhDxmHqFS5Bn0jE
Imports Hash 152cf0529281259defb94b0c7bdbe8e7

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2025-Dec-02 14:49:50
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x13200
SizeOfInitializedData 0x19400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001CA8 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x32000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0xb71b00
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c9fe39a966d1a3a7917f96d5cfb8292d
SHA1 4a3cacb86a2d83d8ef95124a40ede12d653a5212
SHA256 702522a6cac401761ef1ff95c2b49d72edbb77203362f3bcff7ae0da7e5c59bf
SHA3 0f2bfc6262acf5cee2129d4d97503cfb909bd09a7b7904b882f5f2ce57b8d898
VirtualSize 0x13090
VirtualAddress 0x1000
SizeOfRawData 0x13200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.48151

.rdata

MD5 c1f2ff259de84dda171c820d625224d2
SHA1 621252ee7ab4bf36e2131cc1223b2b1cfa034e06
SHA256 ff19c864d781de66bc2d28f8fe6d173671752e189b0865700aa879a544d1b197
SHA3 0c869102f5c77c1ed900d6c53e5db44da50284c946910953e3b858484447a7ee
VirtualSize 0xae4e
VirtualAddress 0x15000
SizeOfRawData 0xb000
PointerToRawData 0x13600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.90167

.data

MD5 6cc72702ca22b00f71049538cb757a96
SHA1 6ed78f7632f4022b8defa22db40b1a438ce8a59b
SHA256 663d3c230dcd0fb3bf9f22146b099779fcd52df42b61bcec93f967b010d5fc70
SHA3 76289eebc518368ed56b3bd0c5e929f61030eb93b74e58710a50a5c3066798ad
VirtualSize 0x1da0
VirtualAddress 0x20000
SizeOfRawData 0xc00
PointerToRawData 0x1e600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.03333

.pdata

MD5 0140da53bc107634e7d03c3769bfe674
SHA1 eaee72ee9b985aad58363fef1254b35cddcf5029
SHA256 078a499f16667356420a4c89bef7a26b8ab87b29438ec603ea23f1de97287bec
SHA3 9ce1db5cc9acb8c892fa86ebae6c3f637c30ae3ec13f543dc1c1e2ad72f5bc9e
VirtualSize 0x1218
VirtualAddress 0x22000
SizeOfRawData 0x1400
PointerToRawData 0x1f200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.61386

_RDATA

MD5 2851ab45dfabaf770e5631ccfadc5b6e
SHA1 2b0fd39641f0efdc2c6022c7c744de14757bf099
SHA256 98a79a8cefe82ff81d6246241c118f56bc6ce44fd4342c16e3b2d9186f9469e7
SHA3 1f36bd637217e347915985aad426dbb71017dc36a31b3971d8141c9b1f4d4f67
VirtualSize 0x15c
VirtualAddress 0x24000
SizeOfRawData 0x200
PointerToRawData 0x20600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.82622

.rsrc

MD5 9cc64b5591dd31640f68f6272bf07703
SHA1 cafa9bf0fcca5348db505a16efbac4049570e450
SHA256 2e5268eab7afe5a4a3dfc4ed19f6366ed1a9bcf1a65a314491268d1a63b6fa50
SHA3 e08d01436fa7c9a076db351168a4ed4d160359e5d66dba998cb27d0a29fd6636
VirtualSize 0xb884
VirtualAddress 0x25000
SizeOfRawData 0xba00
PointerToRawData 0x20800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.71726

.reloc

MD5 457bb5db21617d7e97997f044eaa29b7
SHA1 0a58bf8a195682e1c6ded94c8c8decbac252ee48
SHA256 4dbf936c585ce8e0f0732dda9d3bed0afc6823481755f64434c613f6bc28ef78
SHA3 c14b820e5194b13919a05dfe587ddb255a72fcc2a0188f93035215ff8c101ac5
VirtualSize 0x69c
VirtualAddress 0x31000
SizeOfRawData 0x800
PointerToRawData 0x2c200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.94859

Imports

KERNEL32.dll GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
LoadResource
LockResource
WaitForSingleObject
FindResourceW
LoadLibraryW
WriteConsoleW
CreateFileW
GetLastError
CloseHandle
SizeofResource
GetFileAttributesW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
USER32.dll wsprintfW
MessageBoxW
ADVAPI32.dll RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SHELL32.dll ShellExecuteExW
SHLWAPI.dll PathCombineW
PathRemoveFileSpecW
PathCanonicalizeW

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x56b9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91811
Detected Filetype PNG graphic file
MD5 87d2f64a39d15eff2ea1567a5f235067
SHA1 b7fd9591c253df451aeb3cd787f51306fa94e2f4
SHA256 15f4e82c12eddec870f79d4b08bff6e1f99431fccf1e7f01c8bbede4cb124be2
SHA3 6cc287e8fc0bf277cc4eefddd1e940e78823cfe2194eccadaf792be66af3100a

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x98f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.91141
Detected Filetype PNG graphic file
MD5 bef45cf74ce0e6af1083e7ad651daa2f
SHA1 f2b6ff7137a11ced55a45484597b71def44492d1
SHA256 b6f068b2ff5f3831494b913e9bfff69349c88087205579a6b9a96c167e524e60
SHA3 13913a986a0d6d489bc9c049310f3d9cc2e543d8ab9bffac1b92c87b672eab2d

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x9e7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.00143
Detected Filetype PNG graphic file
MD5 5308d41a3c949ba0599038317e2c042e
SHA1 4f62cd9108deb0a2b2af1a83a5d9d04ce3f149a9
SHA256 c10cdd1b627ee53548140c4a255032d39dfb0039413b5c1b9765a1fa0d3f27a9
SHA3 eedc41d70787700439e368b8be2ad33f0ed514fff34eb12649aa8dbb6580d493

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xbdd
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.22958
Detected Filetype PNG graphic file
MD5 e592ecd29b8047d0a19d511e1bfa77d4
SHA1 25d32e28490be0bf188f6b1c184a996cb466c63e
SHA256 bd35429f29158026133e8d2d7b0a5d295913934c6bd8c4d8f2c1457bb824ad11
SHA3 072f081abda262627317d936fdfed74e284231e5cd6d38f95131558b2382ac54

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xcac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.34056
Detected Filetype PNG graphic file
MD5 2d7063768024087fc9677df50060499e
SHA1 286ce58ffccdfcba5ad60d11af2db07f987d0a48
SHA256 521e6a42b587f6e9b964ba2a14c93bfadd94f1f06a2560ed09a7e7dd5043c61e
SHA3 e1724a3a38c17996aea1e777df540d48d98e6c21b1d78d92c318e7f9e50533ee

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xdcb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.41581
Detected Filetype PNG graphic file
MD5 7bf36c29bcb6b5839d85c9c836216593
SHA1 86e7a55cacd17d1bda55a1a1de5a03adcba06c2b
SHA256 7a96ab7db1fa191a6bd087497c2f55239d7cda01dcc226e742daa80c5bc37de2
SHA3 72655fed7cd84d2c2de3957446a52a6a22dff86ca62a37d4e8586e86a1e613f0

7

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x1b13
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.73886
Detected Filetype PNG graphic file
MD5 1f48923337871ba25cf266bba17429cc
SHA1 279f47235e20eedee5daa535ea611e0aed1157d0
SHA256 2399dfb472a6c753447b847fbb144235145ca6507a60941b5295389c6fc45639
SHA3 06825c34eb7fe14d622735aa986a3e26247e95d5493a5b22eb3884f51b155493

201

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x5e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.10132
MD5 a2a1923689fd1b28a5dfa41965ed7d74
SHA1 0e609b58f9486acb692059f50e4b809af1389bf7
SHA256 502037dee0d031b8f8a6ca156d8856be4bf56b3c198ebc450b2a93a2395638ce
SHA3 b733014fe5856583f9f55a340ccc8367123d8707a56349adf072ed47c15fdc80

202

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.54879
MD5 2d7e7db7d662cf79d200b28f4ddc6e5d
SHA1 6f0b0a7aa09b906a11a61a6bb177af5aa38d4c75
SHA256 f4fc1df13395012c86939fb5ca133cde2a04bce05406b162f6c6fa6f0bd1f3d0
SHA3 6abc7139dcdff0f5a8c24631f797e356f37ffee61feef2fec30c29f056151b0e

101

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.51664
Detected Filetype Icon file
MD5 8511e13424b7f4e8b910ee37fe997ddc
SHA1 1b1da77a5bf0ac2ce158d7486cdcdd65b48e4678
SHA256 88f2179f2f8a2ea441915e28982319f81b1a1284cf558dc3622ad8e27687642f
SHA3 8439442a2401aa13a36c26fe63cb942e3c07a15aecad9a9ac83877a5f0ef0f9e

123

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.93324
Detected Filetype Icon file
MD5 26e4bbdda9f8e58b060feaa53c3083e2
SHA1 bd724469fc43a9a58679a7016c303a5693fe9f94
SHA256 74c73b469e08909c1b539a80c66cb442d04b3c29cd03e8a533a3c349c5cc84c4
SHA3 49df4b8afdcf81a2097c2608740540f7e25ce3aa86c892702db1183998142c1b

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x388
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44761
MD5 6feb2402254f0e49b29ea9d99bc29678
SHA1 c6122b828da504c17f9303edecdd26080961cdca
SHA256 28060e735d6ca51541c5fdecf0292006db92dc1bca0efb4c196dd5f6f27b6f67
SHA3 ab89035afbe2ac05d59a182dc09bd6bce61383dbc00d5a4c1da1be703fc2ec85

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x580
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.29956
MD5 c61240657e13443faa673941f5309de2
SHA1 c0fbe2a825d7b0526747bf774f0924ded81b7462
SHA256 527ba3511f5e6271211343cd03168ec681b1afc356ed87eeece038bbd480731b
SHA3 e61279125dbdfd1216bc206250bdaf599743f063b1fb74df33968dee1f3c874d

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.1.1.0
ProductVersion 5.1.1.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
CompanyName Epic Games, Inc.
LegalCopyright Fill out your copyright notice in the Description page of Project Settings.
ProductName BootstrapPackagedGame
ProductVersion (#2) ++UE5+Release-5.1-CL-0
FileDescription BootstrapPackagedGame
InternalName UnrealEngine
OriginalFilename BootstrapPackagedGame-Win64-Shipping.exe
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Dec-02 14:49:50
Version 0.0
SizeofData 65
AddressOfRawData 0x1df98
PointerToRawData 0x1c598
Referenced File BootstrapPackagedGame-Win64-Shipping.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Dec-02 14:49:50
Version 0.0
SizeofData 20
AddressOfRawData 0x1dfdc
PointerToRawData 0x1c5dc

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Dec-02 14:49:50
Version 0.0
SizeofData 796
AddressOfRawData 0x1dff0
PointerToRawData 0x1c5f0

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140020008

RICH Header

Errors

Leave a comment

No comments yet.