home

helper.exe

Mozilla Messaging Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Mozilla Thunderbird () by Mozilla.
Publisher:
Mozilla Messaging Inc.  (signed and verified)

MD5:
ad9d8a0233b2542b7a6661cb97abdc99

SHA-1:
c1f8bf8d05a63d80a96f447af09ccf1e4fb0424e

SHA-256:
698fd2a2fb79d9d1e76a24d12f7a208cf57b792ef1452b317792703fe1aedb0f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:54:58 PM UTC  (today)

File size:
545.4 KB (558,536 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\Program Files\mozilla thunderbird\uninstall\helper.exe

Digital Signature
Signed by:
Mozilla Messaging Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
9/9/2009 3:00:00 AM

Valid to:
9/10/2010 2:59:59 AM

Subject:
CN=Mozilla Messaging Inc., OU=Release Engineering, O=Mozilla Messaging Inc., L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3F88A04409505DBAB9382D411A61E4C6

File PE Metadata
Compilation timestamp:
11/21/2007 6:25:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:ejWXUjD5uG9xMQpKmZVX0UJDJSs2mZNXAeS3m:ejaUjD5gmZVEUJDJgmZNlUm

Entry address:
0x33EC

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, DB, 5E, 89, 5C, 24, 18, C7, 44, 24, 10, 40, 86, 40, 00, 89, 5C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 53, FF, 15, B0, 82, 40, 00, 6A, 08, A3, D8, 52, 43, 00, E8, 0D, 26, 00, 00, 53, 68, B4, 02, 00, 00, A3, E0, 51, 43, 00, 8D, 44, 24, 38, 50, 53, 68, 3C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 24, 86, 40, 00, 68, E0, 41, 43, 00, E8, DD, 24, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, 00, 00, 44, 00, 57, E8, CB, 24, 00, 00...
 
[+]

Entropy:
5.4547

Packer / compiler:
Nullsoft install system v2.x

Code size:
25.5 KB (26,112 bytes)

Program Uninstaller
Program name:
Mozilla Thunderbird ()

Display publisher:
Mozilla

Display version:
(es-AR)

Uninstall string:
C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.