home

helper.exe

Thunderbird

mozilla corp (thunderbird)

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Mozilla Thunderbird (3.1.20) by Mozilla.
Publisher:
Mozilla Messaging  (signed by mozilla corp (thunderbird))

Product:
Thunderbird

Description:
Thunderbird Helper

Version:
3.1.20

MD5:
1522b37c88e8bfc613de0234bae736b8

SHA-1:
6f9c2b5c54ff824633a81286a4f96f54b5616965

SHA-256:
499f1101b71511c7b3ccb7199907b707d84241b145482695fdf4ffb540c353b0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:30:53 AM UTC  (today)

File size:
615.1 KB (629,816 bytes)

Product version:
3.1.20

Copyright:
Mozilla Messaging

Trademarks:
Thunderbird is a Trademark of The Mozilla Foundation.

Original file name:
helper.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\mozilla thunderbird\uninstall\helper.exe

Digital Signature
Signed by:
mozilla corp (thunderbird)

Authority:
Thawte, Inc.

Valid from:
7/26/2011 2:00:00 AM

Valid to:
7/26/2012 1:59:59 AM

Subject:
CN=mozilla corp (thunderbird), O=mozilla corp (thunderbird), L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
797F73C49D7286B5C65C819D299E1855

File PE Metadata
Compilation timestamp:
11/21/2007 5:25:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:DjKUjD5JmZVhUJDJEmZNtYtTn+FlkPy+x/VxFD3eBnfsQrW0:DjWmINyfsmW0

Entry address:
0x33EC

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, DB, 5E, 89, 5C, 24, 18, C7, 44, 24, 10, 40, 86, 40, 00, 89, 5C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 53, FF, 15, B0, 82, 40, 00, 6A, 08, A3, D8, 52, 43, 00, E8, 0D, 26, 00, 00, 53, 68, B4, 02, 00, 00, A3, E0, 51, 43, 00, 8D, 44, 24, 38, 50, 53, 68, 3C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 24, 86, 40, 00, 68, E0, 41, 43, 00, E8, DD, 24, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, 00, 00, 44, 00, 57, E8, CB, 24, 00, 00...
 
[+]

Entropy:
5.3534

Packer / compiler:
Nullsoft install system v2.x

Code size:
25.5 KB (26,112 bytes)

Program Uninstaller
Program name:
Mozilla Thunderbird (3.1.20)

Display publisher:
Mozilla

Display version:
3.1.20 (it)

Uninstall string:
C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.