home

helper.exe

Thunderbird

mozilla corp (thunderbird)

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Mozilla Thunderbird (7.0.1) by Mozilla.
Publisher:
Mozilla Messaging  (signed by mozilla corp (thunderbird))

Product:
Thunderbird

Description:
Thunderbird Helper

Version:
7.0.1

MD5:
223ea290b7c6825df0e6517324e85c20

SHA-1:
6cfbbb738e7557f4f92fb7bc742684177de89660

SHA-256:
417f0b8916dca4d2d9f011a526e160225b6e0518c9798b6ee474ac62af94b0a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 7:19:07 AM UTC  (today)

File size:
773.1 KB (791,640 bytes)

Product version:
7.0.1

Copyright:
Mozilla Messaging

Trademarks:
Thunderbird is a Trademark of The Mozilla Foundation.

Original file name:
helper.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\mozilla thunderbird\uninstall\helper.exe

Digital Signature
Signed by:
mozilla corp (thunderbird)

Authority:
Thawte, Inc.

Valid from:
7/26/2011 9:00:00 AM

Valid to:
7/26/2012 8:59:59 AM

Subject:
CN=mozilla corp (thunderbird), O=mozilla corp (thunderbird), L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
797F73C49D7286B5C65C819D299E1855

File PE Metadata
Compilation timestamp:
4/10/2010 9:19:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:QzZtUjD5BevWFmhEUJDJ0v+I6FmHdmYtTn+FlkPy+x/VxFD3eBnfsQrWEL:QzZOdiEXNyfsmWEL

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
5.2813

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

Program Uninstaller
Program name:
Mozilla Thunderbird (7.0.1)

Display publisher:
Mozilla

Display version:
7.0.1 (ja)

Uninstall string:
C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.