Technical Information
Modifies file system
Creates the following files
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a3dff70-10f0.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a3dff75-11a4.pma
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000003
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000004
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000005
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000006
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000007
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000008
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000009
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000a
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000b
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000c
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000d
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000e
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000f
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000010
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000011
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000012
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000013
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6c55632814939885_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a67abc5be2b49311_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\921437e2b7518f2b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2c730bd89f1d688e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\babc8b960da77c1e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000014
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000015
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a3aaea04f9a9f6e1_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\057b8092387643c7_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2149f3c1bf74af88_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\809c6dd423f46301_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000016
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2b9a8efd64b5f959_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\70a083fec7bd16a4_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000017
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000018
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_github.com_0.indexeddb.leveldb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_github.com_0.indexeddb.leveldb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_github.com_0.indexeddb.leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_github.com_0.indexeddb.leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\21b6270dd50affcc_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\ac5dc31fb0281bc0_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\dcfd15d91221511e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\08057057f68fa297_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9d826bae782c7587_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\198517e8798dfcda_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a8b55c2e3fdabb8a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\ea282e4fbc9c42d0_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7b5204de62b9c3a3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\8db58e5b5914612c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\613d8f9382312391_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4a4edd2cbc2322d7_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f9fd336da6439431_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\01d48a5e9a4b0f1c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\d9dff506341a7ba2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6902f398270b0250_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6d67df95969850ae_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\39f1c85f4cdf13cc_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\409d1acebdb976c5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\28d60533e86e3ecd_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5f1d0800164a8fe2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b43dc480d973f570_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b85e557c958fb647_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\15086bdb2d8c1dcd_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b5c84f27962bc656_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\caed8e0e840da9a2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cafaaac4a6d0c937_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\1aca00992f17a61d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\19dfbad2ccba28c5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\22f8931fecf6cccf_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f770f24d0375e64c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c1edcd8cbe9284a5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\aeea08a68b3b7cd1_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\23bf1ccce1d5817d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7066322738cd7121_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\39ca12357a4d7109_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f7b509196f65dafe_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\590fbaf6422b2e58_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c4e05a7dbcf6a4aa_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\eeb31d72a6708178_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\13c2d17ad63db8f3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\43d0194f7674c416_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c9ccd97c61584a01_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f06f80ca8c9c6ace_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0599626007d236fb_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a3d77e5728dcaac0_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\dcf34163c7a45546_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9de31e3f074affea_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\942feeb779974a70_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b4051342870dc5ea_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\603699a7ae6a0432_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\adc19a76fe9984ab_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\661d199a745a1606_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9622146ffea5d358_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\744045168c63dbba_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a1331e40ab511cf7_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\fb3e3f5f179dcf63_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9b0a6f876f11a219_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\440bc67e3a559f42_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\37e52cc7b52263ba_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b100dc9e63632555_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\729a7dca67e8a18a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\297f1f0a9a875488_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a00980d8877a14e1_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5c9f37b2aabf3dde_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\791e6e1b40101a1e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5c767613c2ab8448_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\ba2a084d8a8be052_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b458833b6d1b266b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\e64a43d2a63690a8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cfef6ca0abbd645a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\99a9c9c11c8003d3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\75eca9f8e0f00179_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7dc3fdde23b04dca_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7d66c92046d3d046_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bc527024671187ff_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2b0d7209bcd679bb_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\aec09c3803fc4b20_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\72071f01335eb098_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9fa3390d7b494deb_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3c0dbd82c4948e22_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a21c449539e9ed73_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\79c484ceb660ddf2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\39746e9654cc4c4c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\d03875ad19b8d92b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\23036b856da7f546_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\e01cd05d88bf1df2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4bfa0aafe3bc901a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7c5af58947576e73_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\84662ed3b7266cff_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\39c1c95e5af360f9_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5d76561892ce6696_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3e34db676309db10_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\64585238c9230333_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\76e50e25e54b5a5d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\39b48d4acd08a8f8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9ced194a4a20c975_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c9a10e41aa5d4de6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6fad9af1cc8a01e3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cc1e2d582d48da30_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\484a9aebeb971231_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\15cd9559b91870d0_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6a93f47d4823ad03_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\00503ad5511a464e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\dfc9ae4577ecb4a1_0
- %TEMP%\4620ca60-721c-4a56-bb00-cd70b52b042f.tmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
- %LOCALAPPDATA%\microsoft\edge\user data\last browser
- %LOCALAPPDATA%\microsoft\edge\user data\default\preferredapps
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
- %LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal
- %TEMP%\4516_1241097864\manifest.json
- %TEMP%\4516_1241097864\license.txt
- %TEMP%\4516_1241097864\filtering rules
- %TEMP%\4516_1241097864\_metadata\verified_contents.json
- %TEMP%\4516_1241097864\manifest.fingerprint
- %LOCALAPPDATA%\microsoft\edge\user data\subresource filter\indexed rules\27\9.33.0\indexing in progress
- %LOCALAPPDATA%\microsoft\edge\user data\subresource filter\indexed rules\27\scoped_dir4516_668835097\ruleset data
Deletes following files that it created itself
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a3dff70-10f0.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a3dff75-11a4.pma
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
- %TEMP%\edge_bits_4516_364321321\dde93974-5cbc-4ecc-898f-436e62207c34
- %LOCALAPPDATA%\microsoft\edge\user data\subresource filter\indexed rules\27\9.33.0\indexing in progress
Moves the following files
- from %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_github.com_0.indexeddb.leveldb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_github.com_0.indexeddb.leveldb\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current
- from %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current
Modifies the following files
- %LOCALAPPDATA%\microsoft\edge\user data\last version
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data
- %LOCALAPPDATA%\microsoft\edge\user data\default\visited links
- %LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
- %LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\history
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons
- %LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\000003.log
- %TEMP%\.ses
Substitutes the following files
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG
Network activity
Connects to
- 'co####.edge.skype.com':443
- 'gi##ub.com':443
- '2.##.56.45':80
- 'gi####.githubassets.com':443
- 'av#####.#ithubusercontent.com':443
- 'x1.#.lencr.org':80
TCP
HTTP GET requests
- http://x1.#.lencr.org/
Other
- 'co####.edge.skype.com':443
- 'gi##ub.com':443
- 'gi####.githubassets.com':443
- 'av#####.#ithubusercontent.com':443
- 'co#####or.github.com':443
- 'ap#.#ithub.com':443
UDP
- DNS ASK co####.edge.skype.com
- DNS ASK gi##ub.com
- DNS ASK gi####.githubassets.com
- DNS ASK av#####.#ithubusercontent.com
- DNS ASK gi#######oud.s3.amazonaws.com
- DNS ASK us########s.githubusercontent.com
- DNS ASK x1.#.lencr.org
- DNS ASK co#####or.github.com
- DNS ASK ap#.#ithub.com
Miscellaneous
Searches for the following windows
- ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'
Executes the following
- '%WINDIR%\syswow64\cmd.exe' /c start https://github.com/KoMaR1911/C4USMultiHack-Metin2
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://github.com/KoMaR1911/C4USMultiHack-Metin2
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate https://github.com/KoMaR1911/C4USMultiHack-Metin2
- '%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1772,7535200515672030678,12755494025660636457,131072 --lang=en-US --service-sandbox-type=none --mojo-...
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate https://github.com/KoMaR1911/C4USMultiHack-Metin2' (with hidden window)
