CmdID

CmdID / Files

identity_helper.exe

PWA Identity Proxy Host file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real identity_helper.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\
C:\Program Files (x86)\Microsoft\Edge\Application\95.0.1020.40\
Signed byMicrosoft Corporation
ProductMicrosoft Edge
DescriptionPWA Identity Proxy Host

2 known copies

95.0.1020.40 · C:\Program Files (x86)\Microsoft\Edge\Application\95.0.1020.40\identity_helper.exe · signed by Microsoft Corporation

117e21bca173ac7b009d790499d424fe0d26be34c847d134b6cf3ec826551964

85.0.564.68 · C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\identity_helper.exe · signed by Microsoft Corporation

625381f2ebff5ce8113354d23c4bdbf8036e540a15c21fa3a77df7f176a555a6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.