pwahelper.exe
PwaHelper executable for Identity Proxy file version info
Program on Windows 2 known copies with hashes
Is it the real pwahelper.exe?
Installed in
C:\Program Files (x86)\Microsoft\Edge\Application\Signed byMicrosoft Corporation
ProductMicrosoft Edge
DescriptionPwaHelper executable for Identity Proxy
2 known copies
95.0.1020.40 · C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe · signed by Microsoft Corporation
9a0930dec1aaa3c8647faf52b2a55f3ca6d4623baccac238f9472b1bce7dcb4985.0.564.68 · C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe · signed by Microsoft Corporation
5b111f0dea51e0e9efe7af30e2b9bb7767e1ef9f9ee340ba1db02d6eb3adf539From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.