home

helper.exe

Thunderbird

mozilla corp (thunderbird)

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Mozilla Thunderbird (8.0) by Mozilla.
Publisher:
Mozilla Messaging  (signed by mozilla corp (thunderbird))

Product:
Thunderbird

Description:
Thunderbird Helper

Version:
8.0

MD5:
7da02580d1ddf56d69e75a222b8dd99c

SHA-1:
f1fb190b56bdef48e4f519ab4cf476a915d3160f

SHA-256:
d9c0675fc5b1739b60e0f26897c5dc7d0706556b7805eacffe38f6e051359ab9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:12:46 AM UTC  (today)

File size:
773 KB (791,544 bytes)

Product version:
8.0

Copyright:
Mozilla Messaging

Trademarks:
Thunderbird is a Trademark of The Mozilla Foundation.

Original file name:
helper.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\mozilla thunderbird\uninstall\helper.exe

Digital Signature
Signed by:
mozilla corp (thunderbird)

Authority:
Thawte, Inc.

Valid from:
7/26/2011 3:00:00 AM

Valid to:
7/26/2012 2:59:59 AM

Subject:
CN=mozilla corp (thunderbird), O=mozilla corp (thunderbird), L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
797F73C49D7286B5C65C819D299E1855

File PE Metadata
Compilation timestamp:
4/10/2010 3:19:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:AzZdUjD5hsFmhEUJDJMFmHdmYtTn+FlkPy+x/VxFD3eBnfsQrWvu:AzZO0DEXNyfsmWvu

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

Program Uninstaller
Program name:
Mozilla Thunderbird (8.0)

Display publisher:
Mozilla

Display version:
8.0 (fi)

Uninstall string:
C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.