home

helper.exe

Thunderbird

mozilla corp (thunderbird)

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Mozilla Thunderbird (8.0) by Mozilla.
Publisher:
Mozilla Messaging  (signed by mozilla corp (thunderbird))

Product:
Thunderbird

Description:
Thunderbird Helper

Version:
8.0

MD5:
1bb7a9b0010b934b5a81ed5b8056c7a4

SHA-1:
e5c02d270d97efbc5c4c74cb6071d3315e081372

SHA-256:
70dde73241579e399b13de56cca8ec5fa5648b13863822c04c7ca92683c7e990

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:28:56 PM UTC  (today)

File size:
773.5 KB (792,096 bytes)

Product version:
8.0

Copyright:
Mozilla Messaging

Trademarks:
Thunderbird is a Trademark of The Mozilla Foundation.

Original file name:
helper.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\mozilla thunderbird\uninstall\helper.exe

Digital Signature
Signed by:
mozilla corp (thunderbird)

Authority:
Thawte, Inc.

Valid from:
7/26/2011 3:00:00 AM

Valid to:
7/26/2012 2:59:59 AM

Subject:
CN=mozilla corp (thunderbird), O=mozilla corp (thunderbird), L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
797F73C49D7286B5C65C819D299E1855

File PE Metadata
Compilation timestamp:
4/10/2010 3:19:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:1zZdUjD5hcFmhEUJDJAFmHdmYtTn+FlkPy+x/VxFD3eBnfsQrWy:1zZOkbEXNyfsmWy

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

Program Uninstaller
Program name:
Mozilla Thunderbird (8.0)

Display publisher:
Mozilla

Display version:
8.0 (ru)

Uninstall string:
C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.