IE crash dump, Fiddler, Process Monitor log

Download Fiddler from https://www.telerik.com/download/fiddler and install it.

Open Fiddler and go to Tools -> Options -> HTTPS tab. Enable Decrypt HTTPS traffic. You will be prompted to install the Fiddler Root certificate (this step requires elevated permission).

Close Fiddler.

Download and unzip Process Monitor from https://learn.microsoft.com/en-us/sysinternals/downloads/procmon.

Download https://joji.blob.core.windows.net/recipe/ie-wer-crash-dump.reg and import the registry key file (this step requires elevated permission).

Create a directory at: c:\dumps

Download IEDigest from https://aka.ms/iedigest and extract iedigest.exe from the zip file.

Press the Win key + R or right click on the Start Menu and choose Run to launch a Run dialog. Then run inetcpl.cpl to open Internet Properties.

In the General tab, click Delete button.

• Uncheck Preserve Favorites website data.
• Check Temporary Internet files and website files.
• Check Cookies and website data.
• Click the Delete button.
• Wait until the deleting is completed and then you can close the Internet Properties window.

Close all instances of IE. Open the Task Manager and check the process list in the Details tab. Sort the processes by Name. Ensure that you do not see any iexplore.exe process in the list. If there is any remaining iexplore.exe process, kill it.

Start Fiddler. It should automatically start capturing, and you will see Capturing icon in the lower left corner. If it is not capturing, press F12 to start capturing.

Launch Procmon.exe as administrator from the location where you unzipped the Process Monitor. It should automatically start capturing after startup. Proceed to the next step when you see that it is generating a large number of events.

Press Win key + R or right click the Start Menu and choose Run to launch a Run dialog and run the command: iexplore.exe <URL> to open IE with a specific URL. For example, to launch IE to access https://www.microsoft.com/, you can run iexplore.exe https://www.microsoft.com/

Take whatever steps to reproduce the crash issue.

After IE crashes, please proceed to the next step.

Go to Process Monitor, press Ctrl+E or click the third Capture icon to stop capturing.

Click File -> Save. Choose All events and then save the log in pml format.

Go to Fiddler -> File -> Save -> All Sessions... to save the file in saz format.

If IE crashes, you will find the crash dumps in c:\dumps.

Run iedigest.exe from the location where you extracted it.

Click the Create report button and wait until it completes.

The log will be saved to a folder named IEDigest on the user's desktop (%userprofile%\Desktop\IEDigest)

Launch a command prompt as administrator to ensure that you get both user and computer policy settings.

To gather the group policy result for the current user, run the following command: gpresult /h report.html

To gather the group policy result for a different user of Windows, run the following command: gpresult /user [<targetdomain>\]<targetuser>] /h report.html (Example: gpresult /user contoso.com\testuser /h report.html).

Wait until the command completes. The group policy result HTML: report.html can be found in the current working directory.