home

helper.exe

Thunderbird

mozilla corp (thunderbird)

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Mozilla Thunderbird (6.0.2) by Mozilla.
Publisher:
Mozilla Messaging  (signed by mozilla corp (thunderbird))

Product:
Thunderbird

Description:
Thunderbird Helper

Version:
6.0.2

MD5:
aeddefd69ac6661f5cae293791a5c8f3

SHA-1:
728b7305168c4ff253c2098390727b17574f2153

SHA-256:
f97be257ed18c5f8f4a5f245bf3b9c400b8cc3bad003eacce26746a46b6724ca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:03:23 PM UTC  (a few moments ago)

File size:
774.5 KB (793,056 bytes)

Product version:
6.0.2

Copyright:
Mozilla Messaging

Trademarks:
Thunderbird is a Trademark of The Mozilla Foundation.

Original file name:
helper.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\mozilla thunderbird\uninstall\helper.exe

Digital Signature
Signed by:
mozilla corp (thunderbird)

Authority:
Thawte, Inc.

Valid from:
7/26/2011 2:00:00 AM

Valid to:
7/26/2012 1:59:59 AM

Subject:
CN=mozilla corp (thunderbird), O=mozilla corp (thunderbird), L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
797F73C49D7286B5C65C819D299E1855

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:UzZtUjD5B1FmhEUJDJPFmHdmYtTn+FlkPy+x/VxFD3eBnfsQrWZ:UzZOzuEXNyfsmWZ

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

Program Uninstaller
Program name:
Mozilla Thunderbird (6.0.2)

Display publisher:
Mozilla

Display version:
6.0.2 (ca)

Uninstall string:
C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.