The ResolvePortable exe (Professional Editing, Color, Effects and Audio Post ) File Malware Analysis

The ResolvePortable.exe (Professional Editing, Color, Effects and Audio Post.) File Analysis

Updated 3 hours ago

Checked by Malware Check

ResolvePortable.exe

Hash Type	Value	Action
MD5	5f916ccb37736179708cc4530fa29708
SHA1	078fb407ca8f84316a772da65fce79e42214553a
SHA256	c825aad38361a59f1d66d2e84b810a6c2e5be6c8c796d31789ed90d39730b4b8
SHA512	6ded5b7f05a0332e3ce9669d6c9501aaba56bf758c26f6229ad1853ec70b1b64d67ce1c7c7cfe6c1dca9ef1cae2ae13e418d6afe1e5728749eebadbe297432c9
ImpHash	6e7f9a29f2c85394521a08b9f31f6275

Hash Type

Value

Action

MD5

5f916ccb37736179708cc4530fa29708

SHA1

078fb407ca8f84316a772da65fce79e42214553a

SHA256

c825aad38361a59f1d66d2e84b810a6c2e5be6c8c796d31789ed90d39730b4b8

SHA512

6ded5b7f05a0332e3ce9669d6c9501aaba56bf758c26f6229ad1853ec70b1b64d67ce1c7c7cfe6c1dca9ef1cae2ae13e418d6afe1e5728749eebadbe297432c9

ImpHash

6e7f9a29f2c85394521a08b9f31f6275

PE Analysis

Basic Information

▼

Icon	Hash: 8a77da8fdf9179552c2b992e56a13dfa Fuzzy: d06e89b215af01ce7da5df9907bd828e dHash: ccf2b2b2e8e896fc
Image Base	`0x00400000`
Entry Point	`0x004034c5`
Compilation Time	2021-07-24 22:21:04
Checksum	0x00000000 (Actual: 0x00035f38)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive`
Digital Signature	No valid SignedData structure was found.
Imports	7 libraries ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports	0 functions
Resources	10 Resources
Sections	5 Sections

Version Information

▼

FileDescription	Professional Editing, Color, Effects and Audio Post.
FileVersion	20.2.0.13
LegalCopyright	Blackmagic Design Pty & 7997
ProductName	Blackmagic Design DaVinci Resolve Studio
ProductVersion	20.2.0.13
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	26,515 bytes	26,624 bytes	6.50 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C25464D6F87775EF687D2492F92DDF9A`
`.rdata`	`0x00008000`	5,284 bytes	5,632 bytes	5.01 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E36C6AD0568CD039E0C7810069438D6D`
`.data`	`0x0000a000`	176,152 bytes	1,536 bytes	4.16 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`33B1D611A00420C98FA82231FEAA907B`
`.ndata`	`0x00036000`	65,536 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x00046000`	121,088 bytes	121,344 bytes	6.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7D86CA8DF6F814955A28970322A2E484`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 10 (120,464 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	4	118,248 bytes	98.2%
RT_DIALOG	3	636 bytes	0.5%
RT_GROUP_ICON	1	62 bytes	0.1%
RT_VERSION	1	688 bytes	0.6%
RT_MANIFEST	1	830 bytes	0.7%

Certificate Chain Analysis

▼

Certificate Information

Product	Blackmagic Design DaVinci Resolve Studio
Description	Professional Editing, Color, Effects and Audio Post.
File Version	20.2.0.13
Copyright	Blackmagic Design Pty & 7997

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	ResolvePortable.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version	1.0.231.174
Database Version	2025-12-19 18:00:40 UTC

The ResolvePortable.exe (Professional Editing, Color, Effects and Audio Post.) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification