Gridinsoft Logo
File Icon

The Moho.exe (Moho) File Analysis

Updated 1 month ago
Checked by Malaware Check
Moho.exe

Technical Analysis

File Name Moho.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.215.174
Database Version 2025-04-23 14:00:19 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
14,627,200
File Size (bytes)
2025-04-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e791e29929ff24e09a9d896072c540e2
SHA1
4611eb7fe10ca0036df562edaf0d18ee8d9be3df
SHA256
d8550c196571a09496ba844a61e8e2dbb0ce159f646daeeaefbbe3173f77bfbf
SHA512
9ac2c119decce174110da9ac349f4da472bcc1f17e6e16f31fa3928de12d5c06a7cc08a8638f4ade1ef708e4d3d3bec1093e24b858b6ed7e4ca5d1d32b86b06c
ImpHash
5d68dff6eb8dc6286bc1b4e91aa9f2dc

PE Analysis

Basic Information

▼
Icon
Hash: d39125da1ca2830b4632d4068f2ba9a7
Fuzzy: 15aebd096c54cf146987e05de4d005e3
dHash: 71f0daf494d4e871
Image Base 0x140000000
Entry Point 0x140091554
Compilation Time 2024-11-25 19:48:16
Checksum 0x00df8eb9 (Actual: 0x00e03135)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 29 libraries
Exports 0 functions
Resources 152 Resources
Sections 7 Sections

Version Information

▼
CompanyName Lost Marble LLC
LegalCopyright Copyright © 1999-2024 Lost Marble LLC. All Rights Reserved.
FileDescription Moho
FileVersion 14.3
ProductName Moho
ProductVersion 14.3
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 10,062,988 bytes 10,063,360 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 672EFAE5BDACEF97E47116437AF3BCBB
.rdata 0x0099a000 1,882,772 bytes 1,883,136 bytes 6.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3DFEE2E874700453CE2D61D17A408C79
.data 0x00b66000 1,253,724 bytes 387,072 bytes 4.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9F45E0D4CE809825A89CF5C3DAE1077A
.pdata 0x00c99000 359,424 bytes 359,424 bytes 6.56 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0D57612A9F87EEFF1D485150B734518F
_RDATA 0x00cf1000 244 bytes 512 bytes 2.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 784250BA65F68BBB13B01AB470CD55B1
.rsrc 0x00cf2000 1,863,808 bytes 1,864,192 bytes 6.61 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5F3D788E7B24D74DD515382DCEF8BDD2
.reloc 0x00eba000 57,480 bytes 57,856 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ AF0C7180FCD3358ACD94B93AFB809A9F
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 152 (1,855,781 bytes)
Resource Type Count Total Size Percentage
RT_ICON 140 1,852,495 bytes
99.8%
RT_GROUP_ICON 10 2,020 bytes
0.1%
RT_VERSION 1 628 bytes
0%
RT_MANIFEST 1 638 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product Moho
Description Moho
File Version 14.3
Signing Date 07:48 PM 11/25/2024 (193 days ago)
Verification Status The digital signature of the object did not verify.
Signers Lost Marble LLC; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright Copyright © 1999-2024 Lost Marble LLC. All Rights Reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Lost Marble LLC #2 Chain
Validity Period: 2024-04-30 00:00:00 → 2027-07-02 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 03 9E 77 0C 6C 03 DF C0 4C 92 F6 AF 6F F4 0B AD
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware