WSEnable.exe
Thunderbird Windows Search Integration Handler file version info
Program on Windows 4 known copies with hashes
Is it the real WSEnable.exe?
C:\Program Files\Mozilla Thunderbird\4 known copies
91.3.0 · C:\Program Files\Mozilla Thunderbird\WSEnable.exe · signed by Mozilla Corporation
e9d86d52a198bf3cdc3951fc5f12bf2d513d3496bca2c6f54a9799fdf4312e4778.2.0 · C:\program files\Mozilla Thunderbird\WSEnable.exe · signed by Mozilla Corporation
70712c8372aad5abd638e398a3dee1699472d0d2f106cb52d604fef8a7e1653a78.2.0 · C:\Program Files\Mozilla Thunderbird\WSEnable.exe · signed by Mozilla Corporation
c3a0a173f7618cd3a82a70949056e58e10b172a3570f17a159449531585601a978.1.0 · C:\Program Files\Mozilla Thunderbird\WSEnable.exe · signed by Mozilla Corporation
ed227b3f16c2400d11ba4eb37a6a238abe8da21ed64a9a90e6a0561f26201d13From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.