Technical Information
Modifies file system
Creates the following files
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6912845f-12e4.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69128462-ae0.pma
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000003
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000004
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000005
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000006
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000007
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\1ccb40f9597e8b3d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3ecb448dc6ed2cd6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000008
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000009
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000a
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\ad7ef339796b15e9_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\87772f73bf77d8cd_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6d985456bbb2e49b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000b
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4b9059c56b60538c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000c
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0375e6d92679ce18_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000d
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bf8573840871d2a8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3e91890f5db9a1ba_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7011de8217bac2ff_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f4134d00bce2424a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a1f72805659e55af_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cc5692a0c58df0d3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3d7549259ed2db75_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\dbbff6f4d896a6fe_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\d872670caaae2932_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\fc0d02e6d3fe7ebc_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0828654636d42221_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\d0680059a9a91adb_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\d13395eae2532079_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6fdd8a8afae8e27a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\ead729523752a727_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0f078fefb6b9e509_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6f73015cc710c591_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0dcdba25f6cf1056_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9d0df539603a5881_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\53741c49d0ec4b29_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\49717d8d61f2409b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3922242f4da5d16d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2cac6a4636e90928_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\612986907763d1e8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\786a111dff6d23ad_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\858066a7157c1d7d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\1e78deca6072880c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c77a655ca19a9d40_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c930181e57e066a3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\46fdf5cbf3bbb0ff_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c5db270fdf9a7960_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\42e92f105ec5fd8e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a1db647767e7af2f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b97d710d12a436b3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\1af793593f0017d5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\df8783b9de892efd_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bc499776188c562a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4332aac40162ac4a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\25e8a2fc985c1c8d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\1db2dd0e66888083_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\e737695c8d0c954e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\866f92c400fe8179_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\55528e475f4be5a5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\42cff3360aeaf9b6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000e
- %TEMP%\528dedf7-1056-489a-a68c-af661c7123a0.tmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000f
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000010
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000011
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000012
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000013
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000014
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000015
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000016
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000017
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000018
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000019
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\af5ec58cfcd605e3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cc55fc565beae2dd_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\27ad061b92e11c9c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00001a
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cd3ffeda3b6ff67f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\264d3805ae4abf84_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\8b3b1ecb34eeb920_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\95b1c63564225832_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\00a55d89d3556513_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00001b
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00001c
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00001d
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9d9db5780b44a7b1_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a10eefa703c18e61_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00001e
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00001f
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000020
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\eb1ba03dedf457c2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b57a6e9abf529068_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\40d882399bfeff97_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a3b234d82a12f5d2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000021
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000022
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000023
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\041a6c0c0f436562_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000024
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3cc17aab962cfcd5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\025f1d67ff63c175_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000025
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000026
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000027
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000028
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000029
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00002a
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cc4f8079395f2bfb_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00002b
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\da3d18d4c0ca2196_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00002c
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3ef0a2a7bc21c4e5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00002d
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00002e
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\312a04da429edc46_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00002f
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000030
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000031
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\99520c103af8fa08_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3553728158bc71be_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3df055659ba35a7c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bd82c0499682f85a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5537e0340573f91c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0042cab704f66f48_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000032
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000033
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000034
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000035
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4a39f5b39d4fe467_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a418f7082d716cc7_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5ff6e44ba9520b94_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000036
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\1a3c07ee7826b265_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\8e447428e67125d9_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\35818c0e14be9c9b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\1270b13f78da82a1_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2bab9b0ad4646ac3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bbd933ee9a3438c2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7aedcb0711311536_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0dee42085ea64d92_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\d11b735aa37880d5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\aac5f3ee5c7411b2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000037
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000038
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000039
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00003a
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00003b
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00003c
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00003d
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00003e
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00003f
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000040
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000041
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000042
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000043
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000044
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000045
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000046
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000047
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000048
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000049
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00004a
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00004b
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00004c
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00004d
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00004e
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00004f
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000050
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000051
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000052
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000053
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000054
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000004
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000004.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
- %LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal
- %TEMP%\2784_1972989185\manifest.json
- %TEMP%\2784_1972989185\recovery-component-inner.crx
- %TEMP%\2784_1972989185\manifest.fingerprint
Deletes following files that it created itself
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\42cff3360aeaf9b6_0
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6912845f-12e4.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69128462-ae0.pma
- %TEMP%\edge_bits_2784_1730935788\0c17d4e3-9d9d-44b6-9280-2b041bbaf3d9
Moves the following files
- from %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current
Modifies the following files
- %LOCALAPPDATA%\microsoft\edge\user data\last version
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data
- %LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
- %LOCALAPPDATA%\microsoft\edge\user data\default\visited links
- %LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\history
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons-journal
- %LOCALAPPDATA%\microsoft\edge\user data\last browser
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons
- %TEMP%\.ses
Substitutes the following files
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\42cff3360aeaf9b6_0
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\LOG
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\BudgetDatabase\LOG
Network activity
Connects to
- 'co####.edge.skype.com':443
- 'ww#####eam.2345cdn.net':80
- 'ww#####eam.2345cdn.net':443
- 'pa######-plugin.hao184.com':443
- 'cp##.##idustatic.com':443
- 'ww####n.2345cdn.net':443
- 'dh###t.2345.com':443
- 'gu####api.2345.com':443
- 'in####api.2345.com':443
- 'dh##.2345.com':443
- 'dh#####static.2345.com':443
- 'ex####.browser.360.cn':443
- 'we#.##bangzh.com':443
- 'po#.#aidu.com':443
- 'sh####.mediav.com':443
- 'ss#.#aidu.com':443
- 'to####api.2345.com':443
- 'v-###.2345.com':443
- 'im####.toutiaoyule.com':443
- 'lu###.#dn.bcebos.com':443
- 'im####.nccontrol.com.cn':443
TCP
HTTP GET requests
- http://www.23##.com/?hz######################
Other
- 'co####.edge.skype.com':443
- 'ww#####eam.2345cdn.net':443
- 'pa######-plugin.hao184.com':443
- 'cp##.##idustatic.com':443
- 'ww####n.2345cdn.net':443
- 'dh###t.2345.com':443
- 'gu####api.2345.com':443
- 'in####api.2345.com':443
- 'dh#####static.2345.com':443
- 'dh##.2345.com':443
- 'ex####.browser.360.cn':443
- 'we#.##bangzh.com':443
- 'ss#.#aidu.com':443
- 'po#.#aidu.com':443
- 'sh####.mediav.com':443
- 'ba##u.com':443
- 'to####api.2345.com':443
- 'wn.###.baidu.com':443
- 'im####.toutiaoyule.com':443
- 'lu###.#dn.bcebos.com':443
- 'im####.nccontrol.com.cn':443
- 'ec####.baidu.com':443
UDP
- DNS ASK co####.edge.skype.com
- DNS ASK 23##.com
- DNS ASK ww#####eam.2345cdn.net
- DNS ASK gm#.#licdn.com
- DNS ASK p.##nx.com
- DNS ASK pa######-plugin.hao184.com
- DNS ASK po#.#aidu.com
- DNS ASK cp##.##idustatic.com
- DNS ASK we#.##bangzh.com
- DNS ASK ww####n.2345cdn.net
- DNS ASK dh##.2345.com
- DNS ASK in####api.2345.com
- DNS ASK gu####api.2345.com
- DNS ASK dh#####static.2345.com
- DNS ASK dh###t.2345.com
- DNS ASK ex####.browser.360.cn
- DNS ASK sh####.mediav.com
- DNS ASK ss#.#aidu.com
- DNS ASK ba##u.com
- DNS ASK to####api.2345.com
- DNS ASK im####.nccontrol.com.cn
- DNS ASK im####.toutiaoyule.com
- DNS ASK v-###.2345.com
- DNS ASK wn.###.baidu.com
- DNS ASK lu###.#dn.bcebos.com
- DNS ASK ec####.baidu.com
Miscellaneous
Searches for the following windows
- ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'
Executes the following
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument http://www.2345.com/?hzdesk01&f=x1_x2_h1&p=x3
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://www.2345.com/?hzdesk01&f=x1_x2_h1&p=x3
- '%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1860,2302349582277004206,4889986245456137222,131072 --lang=en-US --service-sandbox-type=none --mojo-p...
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://www.2345.com/?hzdesk01&f=x1_x2_h1&p=x3' (with hidden window)
