helper.exe
Firefox Helper file version info
Program on Windows 8 known copies with hashes
Is it the real helper.exe?
C:\Program Files\Mozilla Firefox\uninstall\C:\Program Files\Mozilla Thunderbird\uninstall\8 known copies
94.0.1 · C:\Program Files\Mozilla Firefox\uninstall\helper.exe · signed by Mozilla Corporation
bf11db2d355dd41943f667c986ed94089c10ce0d0cf388903cd70ed436157c1791.3.0 · C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe · signed by Mozilla Corporation
764f8a8745cd521879553ba3aca34668a6fb9199e2f4e2f450a0f956e26c1dff81.0 · C:\Program Files\Mozilla Firefox\uninstall\helper.exe · signed by Mozilla Corporation
fd88b09d22f87ea4dbe88ba67b89531d5b8adb21bd279a0ef6506f3360a1273a80.0 · C:\program files\Mozilla Firefox\uninstall\helper.exe · signed by Mozilla Corporation
c92ba0ec74172f76898e1d08ce61c30372d45732fe28cb86fe3b5b2787f3082d79.0 · C:\Program Files\Mozilla Firefox\uninstall\helper.exe · signed by Mozilla Corporation
4a634a544816803777f9563b6a7f8c249f533a673d9272db00c52091c601434978.2.2 · C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe · signed by Mozilla Corporation
080f15a86ccbd8e99302df910f3bb03df11aebe635f4b9c43032c43b8241a25578.2.0 · C:\program files\Mozilla Thunderbird\uninstall\helper.exe · signed by Mozilla Corporation
911a3d4685d4288b039dfc8c2c080cb982bb7b8d6ded79dbcc4bed6d3e24e23a78.1.1 · C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe · signed by Mozilla Corporation
454ecf92e0cf9914d3ef72876913778f0a986922e15d0e337daa91fb7444df0dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.