Multiple Instances Of Edge Running On W10 Machines

I have only noticed this since the 1803 build install, and it first came to my attention when using CCleaner, which would report that 'it had to close Edge in order to continue', and then 'Edge is taking a long time to close, do you want to force it to close' (may not be the exact wording). When I check on Task Manager at almost anytime sure enough there are these instances of Edge running, even thought there are no webpages open and as far as the user is concerned Edge is not being used:

Browser Broker
Runtime Broker
Backgound Tab Pool
Chakra JIT Compiler
Microsoft Edge Manager

This behaviour is evident on three different machines (HP standalone, Generic standalone and a Toshina C850 laptop) so I don't think it is a matter of some infection. It seems to be an aspect of the new W10 build, but the concern is, from a security perspective, having these instances may mean that Port 80 (or who knows, some other port) is open. Ending these Edge tasks in Task Manager seems to have zero effect on the function of the machine (any of these machines) but after a short while these instances of Edge appear again.

Is this a concern and further, what is Microsoft doing here?

 

Anyone?

 

As all modern browsers also Edge uses several processes for the sandboxing of the tab processes in order to separate the browser environment from the normal client environment of your computer. The processes you observed are the base processes of Edge.

• MicrosoftEdge.exe is the manager and coordinates the different processes of the browser.
• MicrosoftEdgeCP.exe is the content process that runs multiple times for several different tasks e.g. content of tabs, parts of the user interface, background tab pool, extensions, developer tools, Chakra JIT Compiler (just-in-time JavaScript engine), ...
• browser_broker.exe is responsible for the communication between the app containers (sandboxes) of Edge and the registry.
• RuntimeBroker.exe is responsible for the communication between the app containers of Edge and the file system.

If you are concerned Edge would send data to Microsoft then I'm not able to ease your doubts. But in that case you also shouldn't use any other browser. I suspect Chrome will send data to Google, too.

 

That's interesting GermanOne and thanks for your comments. But this behaviour only started to occur in build 1803, so I do wonder what has changed and why. Further, how can you stop it from happening (without blocking Edge in a firewall)?

My concern is not so much whether MSoft is spying on me, but more having ports open when they don't need to be (note that I am not an IT expert by any stretch of the imagination, and perhaps my concerns only show my lack of knowledge. If that's the case just say so!!!)

 

I remember I've seen all of these processes at least since 1703 but I assume they were already present before. I'm also only a computer hobbyist. All I wrote is what I read in the internet over the time. If you want to analyse the network traffic you may find programs like Wireshark (http://www.majorgeeks.com/files/details/wireshark.html) useful. Never used it though.

 

Maybe I missed something ...

Does that mean the browser window isn't opened up? Check your settings:

• Press [ Windows ]+[ I ] to open the Settings menu
• Click the Privacy icon
• Scroll down the left menu bar till you find "Background apps" then click this item
• Either turn them all off on the switch on top or scroll down to Microsoft Edge and turn it off separately.

 

Yes, Edge is not 'open'. Since build 1803 CCleaner has started to warn that 'it needs to close Edge' to continue, and then 'Edge is taking a long time to close....'. That's what alerted me to these instances of Edge running in the background. CCleaner never gave these warnings in builds prior to 1803. I then checked two other computers and the behaviour was exactly the same (and both those computers were new builds/windows installs).

Anyway I have just blocked Edge in the firewall and I haven't experienced any issues at all. Microsoft just seems to go off and do these things that may impact on people privacy without telling them, and yet when the issue is reported somewhere people's response seems to be....'oh well'. Anyway, I'll leave it up to everyone else to deal with their privacy, but I won't let Microsoft just do what it pleases without trying to find out reasons why and at least alert others to possible issues.

Anyway thanks for your comments and assistance GermanOne