Trojan.Siggen32.27331

Technical Information

Malicious functions

Patches code

in dll

tsm-pro-edition.exe process, d3d9.dll module

Modifies file system

Creates the following files

%TEMP%\aut4a77.tmp
<Current directory>\tsm-pro-edition.exe
%TEMP%\aut515d.tmp
<Current directory>\modified_scripts.ps1
%TEMP%\rockstar_games\config.txt
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-17b4.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-166c.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-1688.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-1780.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-17e0.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eac4-13fc.pma
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\log
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\14348b415ed0bb9f_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4f44edaab2028db1_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5ce13763d0075e89_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4d9c1a4a15778515_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\13898b2da061abcb_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4e21740ad8f1b42d_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9925167c44400372_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\357d5b598f939c57_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000003
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\index
%LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\46326404fefddc80_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000004
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000005
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\94044a3208c8a409_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e80eb477-898b-4f1d-8bcc-d74011e6b9ff\index
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e80eb477-898b-4f1d-8bcc-d74011e6b9ff\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db
%LOCALAPPDATA%\microsoft\edge\user data\default\extension state\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\extension state\log
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000006
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000007
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000008
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000009
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000a
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\2cc80dabc69f58b6_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\4cb013792b196a35_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000b
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000c
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\4cb013792b196a35_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\2cc80dabc69f58b6_1
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000d
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000e
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\index
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3f873bb8382425a5_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\279f0598e97ffc1a_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\279f0598e97ffc1a_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\47e012ab47ac21fc_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\47e012ab47ac21fc_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\fb52f10a838bb6dd_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\fb52f10a838bb6dd_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\0edabd8466234697_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\0edabd8466234697_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\6e74ec907b898975_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\6e74ec907b898975_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\1984ce9e2ecf64a7_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\1984ce9e2ecf64a7_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\4af60222ec859684_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000f
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\f6396f9ca07037e4_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\474688adb5465c90_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000010
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\70ec1cc2934d608d_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\70ec1cc2934d608d_1
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000011
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\3ff585f1b1c251d9_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\3ff585f1b1c251d9_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\07ab369bf0634ac4_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\eb6d248c2aeb5b33_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\eb6d248c2aeb5b33_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\f831bd02efcf0075_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\f831bd02efcf0075_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\bbb4623e647ed3c8_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\bbb4623e647ed3c8_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\d0953bf743830f19_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\d0953bf743830f19_1
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\1b7a79c0180285e4_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\27909b64bd2c2fbb_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\27909b64bd2c2fbb_1
%LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\log
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\66eb1201e2820f33_0
%TEMP%\a89081a5-43c1-41ee-8a16-c9453810e344.tmp
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\b2141b088ee5e98c_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\2e2413a06637b0ec_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\9fd5f62bf71b3d75_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\87b78db93ca06597_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\223969586a5208ab_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2accd545e37d9b3b_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\d414c9b5c0f51122_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\22063dd5403b833c_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\335e69ddec2b9ac6_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\3107558eea9ba321_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\afbf989a8c95bf2e_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\3941d9264340cece_0
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c8e3d243213c2816_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\aab204e4e2e6cad8_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\06c49d2fa0ad4bcd_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\6e4793c7310c13cd_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\653223ab8de6613d_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\d11452d255b1ec57_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\cde968a267e2506f_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\fad7b2239e784870_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\b2fbae2c63b2cd10_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\467fb418b0ce6c3f_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\57976939f24b399a_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\2e573c0dc9b34d3f_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\467fb418b0ce6c3f_1
%LOCALAPPDATA%\microsoft\edge\user data\default\blob_storage\65a886e3-db84-40bf-82a5-6b53b89a35ce\0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\55248bf5cdb1f722_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\98a16392447e67ac_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\d3d3117da1954c11_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\a8861e49fb8957aa_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\0b8c705721509f10_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\a14b1d1ba3ffefc8_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\9f4ad6f7051df145_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\7e3a44784e45603e_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\e1edea18f7adf49f_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\91bffe440af90184_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\e939b9c74705d0f2_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\40a9bd45a75375db_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\c9adc58020b2b3de_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\9527542be48ffabc_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\c09d11a05755e8de_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\f549ece535126cd0_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\bca21f99472447f3_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\31e976f7a1432fcc_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\060922aa969f6e46_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\a6f27ff03ba78ebe_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\551f311ce70a041a_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\58f7361e97789594_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\5d069704bf4c26d6_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\88c1d03bb90903c8_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\be581dea90cddde7_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\9f4760bedb7a3d58_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\50ec495042a41f6d_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\63650b2efa24c917_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\cfe29cc8cb5e67ff_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\8ab4bfc157c68e03_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\4bfb0fd95edd59d2_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\ee0df4a02bea74ec_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\b3f87b55d8dbfa47_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\d48cca5b61f158fe_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\3761f940ae901389_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\c3d986f17b5dc565_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\366f560b67a386ee_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\dec87465aca36c9e_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\8383e54a78e96fc0_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\0e68ef3e3bc686b2_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\6b991611054a2e9f_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\74a2daa43fe548f6_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\a569fb884ecb8d39_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\ca5a67fda3466f4d_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\cd85acb1c0e5f8f6_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\ff7d190261fb21f8_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\f6f13d7893cf7781_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\a6b7c04cc881aa8f_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\aa2af9656088cce5_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\f5c2a024e9699574_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\2927bf79fa9ae909_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\4816386a87d7566c_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\44fdad3a201128f8_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\38720ab1369ba567_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\5c695baeff126a86_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\5c8d4d7ed1188a33_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\3865648767564005_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\4c4800b635ae2098_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\e31f7a7e623b4b27_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\6635a01024910e7c_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\3dd738a47abc8dee_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\577dbf0b91a4fd20_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\7a80e0d12aa14c6c_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\375db0c2ac836167_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\741fc424fe55dac6_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\d6a3d77fbb64715a_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\0db7075bc130b313_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\1ada7ade10cca105_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\db529ccd665da8b5_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\0dbec196046ed063_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\e0679885439abda2_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\fc496558f77f6d37_0
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\fff368752d794b37_0
%LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002
%LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\4e2a53684428dc19_0
%LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\4e2a53684428dc19_1
%LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\0a41c5226f4ea45c_0
%LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
%LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
%LOCALAPPDATA%\microsoft\edge\user data\last browser
%LOCALAPPDATA%\microsoft\edge\user data\default\preferredapps
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
%LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal

Sets the 'hidden' attribute to the following files

<Current directory>\tsm-pro-edition.exe
<Current directory>\modified_scripts.ps1

Deletes following files that it created itself

%TEMP%\aut4a77.tmp
%TEMP%\aut515d.tmp
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e80eb477-898b-4f1d-8bcc-d74011e6b9ff\index
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e80eb477-898b-4f1d-8bcc-d74011e6b9ff\index-dir\the-real-index
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-166c.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-1688.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-1780.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-17b4.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eabc-17e0.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-69a4eac4-13fc.pma
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\blob_storage\65a886e3-db84-40bf-82a5-6b53b89a35ce\0

Moves the following files

from %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\index-dir\temp-index to %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\index-dir\the-real-index
from %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e80eb477-898b-4f1d-8bcc-d74011e6b9ff\index-dir\temp-index to %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e80eb477-898b-4f1d-8bcc-d74011e6b9ff\index-dir\the-real-index
from %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index to %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\the-real-index
from %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\index-dir\temp-index to %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\index-dir\the-real-index
from %LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current

Modifies the following files

%LOCALAPPDATA%\microsoft\edge\user data\last version
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\web data
%LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
%LOCALAPPDATA%\microsoft\edge\user data\default\visited links
%LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\favicons-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\history
%LOCALAPPDATA%\microsoft\edge\user data\default\favicons
%TEMP%\.ses

Substitutes the following files

%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6c7607e5-6b45-49c7-ae1c-2f79fbfcd4dd\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\17379126-2335-4e75-85fe-fe88058ab1d6\index-dir\temp-index

Network activity

Connects to

'ma#####all.github.io':443
'co####.edge.skype.com':443
'yo##ube.com':443
'i.##img.com':443
'fo###.#oogleapis.com':443
'fo###.gstatic.com':443
'accounts.google.com':443
'go######s.g.doubleclick.net':443
'yt#.####leusercontent.com':443
'go##le.ru':443
'st####.doubleclick.net':443

TCP

Other

'ma#####all.github.io':443
'co####.edge.skype.com':443
'yo##ube.com':443
'i.##img.com':443
'fo###.#oogleapis.com':443
'fo###.gstatic.com':443
'accounts.google.com':443
'go######s.g.doubleclick.net':443
'google.com':443
'gs##tic.com':443
'yt#.####leusercontent.com':443
'go##le.ru':443
'st####.doubleclick.net':443

UDP

DNS ASK ma#####all.github.io
DNS ASK co####.edge.skype.com
DNS ASK yo##ube.com
DNS ASK i.##img.com
DNS ASK fo###.#oogleapis.com
DNS ASK fo###.gstatic.com
DNS ASK accounts.google.com
DNS ASK go######s.g.doubleclick.net
DNS ASK google.com
DNS ASK gs##tic.com
DNS ASK yt#.####leusercontent.com
DNS ASK go##le.ru
DNS ASK st####.doubleclick.net

Miscellaneous

Searches for the following windows

ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'

Creates and executes the following

'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "<Current directory>\Modified_Scripts.ps1"
'<Current directory>\tsm-pro-edition.exe'

Executes the following

'%WINDIR%\syswow64\wbem\wmic.exe' os get Caption, Version
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://www.facebook.com/tsm.tool.pro/
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://www.youtube.com/@TSM_TOOL?sub_confirmation=1
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://t.me/TSMPRO
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://whatsapp.com/channel/0029VabgcaYBVJl375ePPN0Q
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://www.youtube.com/watch?v=KWvLaGjiKMk
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate https://www.youtube.com/@TSM_TOOL?sub_confirmation=1
'%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1808,11853252382812319735,300569404852046402,131072 --lang=en-US --service-sandbox-type=none --mojo-p...
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "<Current directory>\Modified_Scripts.ps1"' (with hidden window)
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate https://www.youtube.com/@TSM_TOOL?sub_confirmation=1' (with hidden window)

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial