Nov 02 2023 09:00 PM
Windows 2022 comes with built-in Edge. In environments where ports 80 and 443 are blocked, the EventViewer regularly records WER events. In my testing VM, this occurs approximately twice every four hours. However, in another production environment, it occurs even more frequently, about once every two minutes.
According to the WER Report, the issue seems to lie with C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe. I have tried to disable (even remove) the Edge auto-update scheduled tasks, Edge update Windows services (Microsoft Edge Update Service, edgeupdate and edgeupdatem) but it doesn't stop the crashpad WER event.
The strangest thing, however, is that even after I tried deleting the entire C:\Program Files (x86)\Microsoft\EdgeUpdate directory and rebooted, the same WER events continue to occur.
Has anyone encountered a similar situation? How can I disable MicrosoftEdgeUpdate?
WER report example
Version=1
EventType=crashpad_log
EventTime=133426970665568612
Consent=1
UploadTime=133434458857374970
ReportStatus=100
ReportIdentifier=5cdcab53-63f7-4967-bfe4-c127dfb96d28
Wow64Host=34404
Wow64Guest=332
OriginalFilename=msedgeupdate.dll
AppSessionGuid=00000d70-0002-0005-5d5b-66751f07da01
TargetAppId=W:0006aa1f8992cfa6e338bb3ff6530aa2ea4500000904!00000c5f3e8a767a2b5ab7510d6139f47336e333e906!MicrosoftEdgeUpdate.exe
TargetAppVer=2023//06//30:19:08:50!4176f!MicrosoftEdgeUpdate.exe
BootId=4294967295
TargetAsId=259
IsFatal=4294967295
EtwNonCollectReason=1
Response.type=4
Sig[0].Name=ApplicationName
Sig[0].Value=MicrosoftEdgeUpdate.exe
Sig[1].Name=ApplicationVersion
Sig[1].Value=1.3.177.11
Sig[2].Name=Source
Sig[2].Value=InstallError
Sig[3].Name=SubCode
Sig[3].Value=0xa0430606
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.20348.2.0.0.400.8
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
ProcessMetadata[0].Key=SessionID
ProcessMetadata[1].Key=EdgeUpdateDllVersion
ProcessMetadata[1].Value=1.3.177.11
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=20348
OsInfo[3].Key=ubr
OsInfo[3].Value=2031
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=244
OsInfo[8].Key=sku
OsInfo[8].Value=8
OsInfo[9].Key=domain
OsInfo[9].Value=0
OsInfo[10].Key=prodsuite
OsInfo[10].Value=400
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=3
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=41
OsInfo[15].Key=osinsty
OsInfo[15].Value=2
OsInfo[16].Key=iever
OsInfo[16].Value=11.1.20348.0-11.0.1000
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=16332
OsInfo[19].Key=svolsz
OsInfo[19].Value=126
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=210507
OsInfo[22].Key=bldtm
OsInfo[22].Value=1500
OsInfo[23].Key=bldbrch
OsInfo[23].Value=fe_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.20348.2031.amd64fre.fe_release.210507-1500
OsInfo[30].Key=buildflightid
OsInfo[31].Key=edition
OsInfo[31].Value=ServerDatacenter
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[34].Key=fconid
OsInfo[35].Key=containerid
OsInfo[36].Key=containertype
OsInfo[37].Key=edu
OsInfo[37].Value=0
OsInfo[38].Key=servicinginprogress
OsInfo[38].Value=0
File[0].CabName=WERInternalMetadata.xml
File[0].Path=WER.6701455a-54e4-4733-a80b-b10320b4d7bc.tmp.WERInternalMetadata.xml
File[0].Flags=327683
File[0].Type=5
File[0].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.6701455a-54e4-4733-a80b-b10320b4d7bc.tmp.WERInternalMetadata.xml
FriendlyEventName=crashpad_log
ConsentKey=crashpad_log
AppName=Microsoft Edge Update
AppPath=C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
ApplicationIdentity=00000000000000000000000000000000
MetadataHash=-467399904