I've been excited about Edge moving to Chromium for a while and yesterday the public dev version of Edge was released! I downloaded it from https://www.microsoftedgeinsider.com/en-us/ and was very curious to see how it compared (forensically) to Chrome.

Short version: it looks a lot like Chrome and it should be easy to parse.

I ran Edge through my normal testing process for a new Chrome version (installing it in a VM and running a consistent set of "user" actions). It looked remarkable similar to Chrome (no surprise there) but with the Google-related stuff stripped out; the settings pages start with edge:// instead of chrome://, Bing is used by default instead of Google, and the account for signing into the browser is a Microsoft one rather than Google. I'm sure there are many more subtle differences that I didn't see in my quick pass, but if you use it you are sure to get a sense of déjà vu. Microsoft says it has changed or removed quite a few features beyond the three I mentioned:

Source: https://onedrive.live.com/view.aspx?resid=40AD2A59FD334E8C!400130&ithint=file%2cpptx&authkey=!ADAerq8JH6E4yRA

Despite these changes, behind the scenes the underlying browser data looks remarkable similar to Chrome. I processed the Edge profile like I did for the Chrome Evolution comparison, and it looks very, very similar (again, not a surprise for a Chromium-based browser). It uses SQLite databases, LevelDB, JSON, Chromium Cache files, and even SNSS for the Current Session/Tabs files:


Hindsight also parses it just fine, at least at a quick pass (I'll do more verification later):

That's it for the quick first look! I'll definitely be looking closer at Edge as it progresses towards a stable release, and look for Hindsight to parse more browsers in the future!