home

helper.exe

Thunderbird

Mozilla Messaging Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Mozilla Thunderbird (3.0.5) by Mozilla.
Publisher:
Mozilla Messaging  (signed by Mozilla Messaging Inc.)

Product:
Thunderbird

Description:
Thunderbird Helper

Version:
3.0.5

MD5:
2f785eb9d32dbd2e99ecba1695939d1e

SHA-1:
f212d6836a63d4530ffbb6e35d3fc5a083fc36cf

SHA-256:
4d7f4c335461f34e6b539f1b4dd57a28edc81f3b208cc0b0539d09ffbce42033

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:56:52 PM UTC  (today)

File size:
612.9 KB (627,616 bytes)

Product version:
3.0.5

Copyright:
Mozilla Messaging

Trademarks:
Thunderbird is a Trademark of The Mozilla Foundation.

Original file name:
helper.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\mozilla thunderbird\uninstall\helper.exe

Digital Signature
Signed by:
Mozilla Messaging Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
9/9/2009 2:00:00 AM

Valid to:
9/10/2010 1:59:59 AM

Subject:
CN=Mozilla Messaging Inc., OU=Release Engineering, O=Mozilla Messaging Inc., L=Mountain View, S=California, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3F88A04409505DBAB9382D411A61E4C6

File PE Metadata
Compilation timestamp:
11/21/2007 5:25:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:+jaUjD5emZVhUJDJNmZNtYtTn+FlkPy+x/VxFD3eBnfsQrWI:+jT1INyfsmWI

Entry address:
0x33EC

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, DB, 5E, 89, 5C, 24, 18, C7, 44, 24, 10, 40, 86, 40, 00, 89, 5C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 53, FF, 15, B0, 82, 40, 00, 6A, 08, A3, D8, 52, 43, 00, E8, 0D, 26, 00, 00, 53, 68, B4, 02, 00, 00, A3, E0, 51, 43, 00, 8D, 44, 24, 38, 50, 53, 68, 3C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 24, 86, 40, 00, 68, E0, 41, 43, 00, E8, DD, 24, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, 00, 00, 44, 00, 57, E8, CB, 24, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25.5 KB (26,112 bytes)

Program Uninstaller
Program name:
Mozilla Thunderbird (3.0.5)

Display publisher:
Mozilla

Display version:
3.0.5 (pl)

Uninstall string:
C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.