Brhosthelper.exe |work| -
brhosthelper.exe is a deep feature of interest because it sits in the gray area of "Signed but Rare." Attackers favor such binaries because they blend in better than custom-compiled malware. Always validate the Parent Process and Network Connections to determine true intent.
While it may occasionally spike during active browsing, it should not consume massive amounts of resources indefinitely. brhosthelper.exe