identity_helper.exe
Summary
Microsoft Edge Identity Helper manages user identity and authentication for the Edge browser, including SSO and profile management.
identity_helper.exe is the 125th most commonly executed Windows program in EchoTrail's dataset, observed 168,284 times across enterprise environments. It typically runs from C:\Program Files (x86)\Microsoft\Edge\Application\87.0.664.66 and it is most often launched by msedge.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Microsoft\Edge\Application\87.0.664.664.37%
- C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.542.47%
- C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.622.31%
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.622.27%
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.621.69%
- C:\Program Files (x86)\Microsoft\Edge\Application\89.0.774.571.64%
- C:\Program Files (x86)\Microsoft\Edge\Application\103.0.1264.491.42%
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.661.42%
- C:\Program Files (x86)\Microsoft\Edge\Application\101.0.1210.531.4%
- C:\Program Files (x86)\Microsoft\Edge\Application\104.0.1293.701.24%
Top Hashes (SHA256)
- 233123d16ee55920ca8fd8fa87fe1414f46f8e68182d3a46eb3fe044bb21679f4.37%
- b675e8dee8ba92b8356d8d4617cfc45736c3e2fd2b1552baaa682ef63a3a7dd72.47%
- 7914d38736f3ce4f89432e15816711fffdfd9002fa50ce7205c1176af9142ab42.31%
- 4ffdcd6435a0024cf6ffd46a8b4f48a83515bc55baca030253764469c8cef9b62.28%
- cb08468df9fb5adce7e041484a17671275c5cd82cc389d58d3e52cb6ea7fedbc1.69%
- a53a43e0eda7819decc919a0f70a951808859cd6e0deb6747f105d14d319ddbe1.64%
- eb8ba8794da4b6191b2009d6f52e58d24e2532758a27c39356f98947ce8255221.42%
- fb2414c21945c3c0b32b8597946b724a5b1f438da65c158e0a3280b9d06563461.42%
- c3910768e882232cd64fb132f945a145b0d20ea06213d7dd4fb77796c0a69bde1.4%
- 800ddd5f702322216eb9edb0a28ab3612ad5343dc8eef57d45be95ee373a2e771.24%
Process Ancestry
Top Parents
- msedge.exe99.95%
- msedgewebview2.exe0.05%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Security Analysis
What does identity_helper.exe normally do?
Part of Microsoft software. Normal operation.
When is identity_helper.exe suspicious?
Running from unexpected paths.
How do attackers abuse identity_helper.exe?
Not commonly abused.
Detection guidance
No specific detection needed.
False positive notes
Normal Microsoft operation.
Ask Rocky about identity_helper.exe
Rocky answers questions about identity_helper.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.