Analysis
- user interaction
yes - max time kernel
101s - max time network
103s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 15:24
Static task
static1
Behavioral task
behavioral1
Sample
GLP_installer_900223150_market.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
GLP_installer_900223150_market.exe
Resource
win11-20260513-en
General
- Target GLP_installer_900223150_market.exe
- Size 3.6MB
- Sample260602-stadhagy9w
- SHA256 bb68113cfaba1def162b8a0df4b1d41b83ea34ce4fd5b23e0a0b75b259b62bfc
- MD5 0ac1fd602f5ec2d2231fe311777791e8
- SHA1 52ca6ccd121faf4f3aad9e7760ee1a519b323d83
- SHA512 10fb445ccf904c20b1b3736d02f53bc43a3b9161465c6915c89a06e978be9e988342f40d4c895acbfdabf236fbdbaa87c8470577626cbc2ba1838dba48e57623
- SSDEEP 49152:808OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LBg:808vdsGaQNgS1C6e6ngKpqM
- TLSH T15206BE12BA828472F5930271957EAB7B48BDFA304B3585D7D3E41A5E5D301E23B3A34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Renames multiple (91) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Modifies Windows Firewall 2 TTPs 6 IoCs
pid Process 3128 Netsh.exe 2460 Netsh.exe 4536 Netsh.exe 4016 Netsh.exe 1284 Netsh.exe 492 Netsh.exe - Executes dropped EXE 11 IoCs
pid Process 3916 Market.exe 4500 Tinst.exe 4928 QMEmulatorService.exe 3976 AppMarket.exe 3340 PcyybAssistant.exe 4724 wmpf_installer.exe 1724 syzs_dl_svr.exe 3156 cef_frame_render.exe 3576 cef_frame_render.exe 4976 cef_frame_render.exe 196 cef_frame_render.exe - Loads dropped DLL 64 IoCs
pid Process 4436 GLP_installer_900223150_market.exe 4928 QMEmulatorService.exe 4928 QMEmulatorService.exe 4928 QMEmulatorService.exe 4928 QMEmulatorService.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3340 PcyybAssistant.exe 3976 AppMarket.exe 4724 wmpf_installer.exe 3156 cef_frame_render.exe 3156 cef_frame_render.exe 3156 cef_frame_render.exe 3156 cef_frame_render.exe 3156 cef_frame_render.exe 3156 cef_frame_render.exe 3976 AppMarket.exe 3156 cef_frame_render.exe 3156 cef_frame_render.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 4 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: GLP_installer_900223150_market.exe File opened (read-only) \??\F: Tinst.exe File opened (read-only) \??\F: QMEmulatorService.exe File opened (read-only) \??\F: AppMarket.exe - Writes to the Master Boot Record (MBR) 1 TTPs 4 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 QMEmulatorService.exe File opened for modification \??\PhysicalDrive0 AppMarket.exe File opened for modification \??\PhysicalDrive0 PcyybAssistant.exe File opened for modification \??\PhysicalDrive0 GLP_installer_900223150_market.exe - Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Tencent\DeskUpdate\GlobalMgr.db QMEmulatorService.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Tencent\DeskUpdate\GlobalMgr.db QMEmulatorService.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\CheckButton\checkbutton_uncheckedhoverTexture.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\recognizationPC.html Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\static\media\checked.05568521.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\static\media\title.09b1666e.svg Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\QQApplet\client_extension.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\I18N\2052\GFStringBundle.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\normal\53.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\static\libs\beacon_web.4.5.1.min.js Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\TabCtrl\Xtml\.gitkeep Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\module\component-hooks.3a3522b1.js Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\static\media\guideTips.1c0529b0.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\button\btn_focus.gft Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\button\qqfeedback_splitline.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\hover\14.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\normal\16.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\normal\66.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\oversea\normal\82.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\QQApplet\Resources\assets\scripts\syntax_adjust_regenerator_runtime.js Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\module\lib-thumbplayer-h5.81556e2d.js Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\api-ms-win-crt-runtime-l1-1-0.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\hardwarecheck\animation\engine1.apng Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\webctrl\loading\5.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\window\tab\hot_game_hover.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\loading\index.html Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\QQApplet\api-ms-win-crt-runtime-l1-1-0.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\tinyxml.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\I18N\1042\GFStringBundle.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\normal\3.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\oversea\normal\73.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\oversea\normal\9.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AsyncTask.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\locale\ja.pak Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\button\ae_disconnect_server_down.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\recognizationMobileError.html Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\RICHED20.DLL Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\oversea\normal\81.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\GameDownload.exe Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\static\media\about-logo-oversea.1db3cb82.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\PocoCrypto.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\TGVoiceBuddy\I18N\1042\StringBundle.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\TGVoiceBuddy\I18N\1046\StringBundle.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\hover\22.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\hardwarecheck\transition2.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\hover\9.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\api-ms-win-core-util-l1-1-0.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\oversea\hover\12.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\oversea\normal\57.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\TBSCoreConfig.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\module\component-assets.aa51e65a.js Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\TGVoiceBuddy\I18N\1066\StringBundle.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\TGVoiceBuddy\Res\window\404.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\WMPF\file_component.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\hardwarecheck\mem_tip.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\button\ae_connect_server_down.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\hardwarecheck\animation\color.apng Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\window\tab\new_game_hover.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\QQApplet\api-ms-win-core-datetime-l1-1-0.dll Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\tvoice_entry\hover\4.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\button\retry_normal.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\I18N\1049\GFStringBundle.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\TGVoiceBuddy\I18N\1049\GFStringBundle.xml Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\pages\syzsweb\module\lib-halo-util.33d995e8.js Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\button\close_down.png Tinst.exe File created \??\c:\program files\txgameassistant\appmarket\AppMarket\Res\Config\GFConfigAgent.xml Tinst.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Event Triggered Execution: Netsh Helper DLL 1 TTPs 18 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
description ioc Process Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh Netsh.exe - System Location Discovery: System Language Discovery 1 TTPs 20 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language GLP_installer_900223150_market.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language syzs_dl_svr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cef_frame_render.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Market.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Tinst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language QMEmulatorService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cef_frame_render.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PcyybAssistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cef_frame_render.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AppMarket.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wmpf_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wmic.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cef_frame_render.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language systeminfo.exe - Checks SCSI registry key(s) 3 TTPs 2 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 AppMarket.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName AppMarket.exe - Enumerates system info in registry 2 TTPs 7 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSReleaseDate AppMarket.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS AppMarket.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion AppMarket.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer AppMarket.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName AppMarket.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVendor AppMarket.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion AppMarket.exe - Gathers system information 1 TTPs 1 IoCs
Runs systeminfo.exe.
pid Process 1568 systeminfo.exe - Modifies data under HKEY_USERS 5 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Tencent\MobileGamePC QMEmulatorService.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE QMEmulatorService.exe Key created \REGISTRY\USER\.DEFAULT\Software\Tencent QMEmulatorService.exe Key created \REGISTRY\USER\.DEFAULT\Software\Tencent\MobileGamePC QMEmulatorService.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Tencent\MobileGamePC\sf = "F:\\Temp\\TxGameDownload\\MobileGamePCShared" QMEmulatorService.exe - Modifies registry class 27 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\.xapk AppMarket.exe Set value (str) \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\.xapk\ = "syzs.apk" AppMarket.exe Key created \REGISTRY\MACHINE\Software\Classes\syzs.apk\DefalutIcon AppMarket.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\DefalutIcon\ = "C:\\Program Files\\TxGameAssistant\\AppMarket\\apk.ico" AppMarket.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\URL Protocol = "C:\\Program Files\\TxGameAssistant\\AppMarket\\AppMarket.exe" Tinst.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\shell\open\command Tinst.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\Software\Classes\syzs.apk\Shell\Open\Command GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\Shell GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\Shell\Open\Command GLP_installer_900223150_market.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\Shell\Open\Command\ = "C:\\Program Files\\TxGameAssistant\\AppMarket\\AppMarket.exe -localpkg %1 -from localapk" GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\Software\Classes\syzs.apk\Shell\Open\Command AppMarket.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\DefaultIcon\DefaultIcon = "C:\\Program Files\\TxGameAssistant\\AppMarket\\AppMarket.exe,1\uff00" Tinst.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\Shell\Open\Command\ = "C:\\Program Files\\TxGameAssistant\\AppMarket\\AppMarket.exe -localpkg %1 -from localapk" AppMarket.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2654269261-3199571979-4291878722-1000\{954C4F6C-70FC-4B67-90B4-3DA6E6D006B4} cef_frame_render.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant Tinst.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\ = "TMGAProtocol툀" Tinst.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\DefaultIcon Tinst.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\shell\open\command\ = "\"C:\\Program Files\\TxGameAssistant\\AppMarket\\AppMarket.exe\" \"%1\"" Tinst.exe Set value (str) \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\.apk\ = "syzs.apk" GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\DefalutIcon GLP_installer_900223150_market.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\DefalutIcon\ = "C:\\Program Files\\TxGameAssistant\\AppMarket\\apk.ico" GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\syzs.apk\Shell\Open GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\shell Tinst.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TencentMobileGameAssistant\shell\open Tinst.exe Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\.apk GLP_installer_900223150_market.exe Key created \REGISTRY\MACHINE\Software\Classes\syzs.apk\DefalutIcon GLP_installer_900223150_market.exe - Modifies system certificate store 2 TTPs 8 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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 cef_frame_render.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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 cef_frame_render.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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 cef_frame_render.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD cef_frame_render.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 cef_frame_render.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 cef_frame_render.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 cef_frame_render.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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 cef_frame_render.exe - Suspicious behavior: EnumeratesProcesses 40 IoCs
pid Process 4436 GLP_installer_900223150_market.exe 4436 GLP_installer_900223150_market.exe 4500 Tinst.exe 4500 Tinst.exe 4928 QMEmulatorService.exe 4928 QMEmulatorService.exe 4928 QMEmulatorService.exe 4928 QMEmulatorService.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3156 cef_frame_render.exe 3156 cef_frame_render.exe 3576 cef_frame_render.exe 3576 cef_frame_render.exe 4976 cef_frame_render.exe 4976 cef_frame_render.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 196 cef_frame_render.exe 196 cef_frame_render.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe 3976 AppMarket.exe - Suspicious use of AdjustPrivilegeToken 45 IoCs
description pid Process Token: SeDebugPrivilege 4500 Tinst.exe Token: SeIncreaseQuotaPrivilege 1608 wmic.exe Token: SeSecurityPrivilege 1608 wmic.exe Token: SeTakeOwnershipPrivilege 1608 wmic.exe Token: SeLoadDriverPrivilege 1608 wmic.exe Token: SeSystemProfilePrivilege 1608 wmic.exe Token: SeSystemtimePrivilege 1608 wmic.exe Token: SeProfSingleProcessPrivilege 1608 wmic.exe Token: SeIncBasePriorityPrivilege 1608 wmic.exe Token: SeCreatePagefilePrivilege 1608 wmic.exe Token: SeBackupPrivilege 1608 wmic.exe Token: SeRestorePrivilege 1608 wmic.exe Token: SeShutdownPrivilege 1608 wmic.exe Token: SeDebugPrivilege 1608 wmic.exe Token: SeSystemEnvironmentPrivilege 1608 wmic.exe Token: SeRemoteShutdownPrivilege 1608 wmic.exe Token: SeUndockPrivilege 1608 wmic.exe Token: SeManageVolumePrivilege 1608 wmic.exe Token: 33 1608 wmic.exe Token: 34 1608 wmic.exe Token: 35 1608 wmic.exe Token: 36 1608 wmic.exe Token: SeIncreaseQuotaPrivilege 1608 wmic.exe Token: SeSecurityPrivilege 1608 wmic.exe Token: SeTakeOwnershipPrivilege 1608 wmic.exe Token: SeLoadDriverPrivilege 1608 wmic.exe Token: SeSystemProfilePrivilege 1608 wmic.exe Token: SeSystemtimePrivilege 1608 wmic.exe Token: SeProfSingleProcessPrivilege 1608 wmic.exe Token: SeIncBasePriorityPrivilege 1608 wmic.exe Token: SeCreatePagefilePrivilege 1608 wmic.exe Token: SeBackupPrivilege 1608 wmic.exe Token: SeRestorePrivilege 1608 wmic.exe Token: SeShutdownPrivilege 1608 wmic.exe Token: SeDebugPrivilege 1608 wmic.exe Token: SeSystemEnvironmentPrivilege 1608 wmic.exe Token: SeRemoteShutdownPrivilege 1608 wmic.exe Token: SeUndockPrivilege 1608 wmic.exe Token: SeManageVolumePrivilege 1608 wmic.exe Token: 33 1608 wmic.exe Token: 34 1608 wmic.exe Token: 35 1608 wmic.exe Token: 36 1608 wmic.exe Token: SeBackupPrivilege 3976 AppMarket.exe Token: SeSecurityPrivilege 3976 AppMarket.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3976 AppMarket.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3976 AppMarket.exe - Suspicious use of WriteProcessMemory 18 IoCs
description pid Process procid_target PID 4436 wrote to memory of 3916 4436 GLP_installer_900223150_market.exe 81 PID 4436 wrote to memory of 4500 4436 GLP_installer_900223150_market.exe 82 PID 4500 wrote to memory of 1284 4500 Tinst.exe 85 PID 4500 wrote to memory of 492 4500 Tinst.exe 88 PID 4500 wrote to memory of 3128 4500 Tinst.exe 90 PID 4500 wrote to memory of 2460 4500 Tinst.exe 92 PID 4500 wrote to memory of 4536 4500 Tinst.exe 94 PID 4500 wrote to memory of 4016 4500 Tinst.exe 96 PID 4436 wrote to memory of 3976 4436 GLP_installer_900223150_market.exe 98 PID 3976 wrote to memory of 3340 3976 AppMarket.exe 99 PID 3976 wrote to memory of 4724 3976 AppMarket.exe 100 PID 3340 wrote to memory of 1608 3340 PcyybAssistant.exe 101 PID 3976 wrote to memory of 1724 3976 AppMarket.exe 105 PID 3976 wrote to memory of 3156 3976 AppMarket.exe 107 PID 3976 wrote to memory of 3576 3976 AppMarket.exe 108 PID 3976 wrote to memory of 4976 3976 AppMarket.exe 109 PID 3976 wrote to memory of 196 3976 AppMarket.exe 110 PID 3976 wrote to memory of 1568 3976 AppMarket.exe 111
Processes
-
C:\Users\Admin\AppData\Local\Temp\GLP_installer_900223150_market.exe"C:\Users\Admin\AppData\Local\Temp\GLP_installer_900223150_market.exe"1⤵
- Loads dropped DLL
- Enumerates connected drives
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4436 -
C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Market.exe"C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Market.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3916
-
-
C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Tinst.exe"C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Tinst.exe"2⤵
- Executes dropped EXE
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4500 -
C:\Windows\SysWOW64\Netsh.exe"C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="AppMarket" dir=in program="c:\program files\txgameassistant\appmarket\AppMarket.exe" action=allow3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:1284
-
-
C:\Windows\SysWOW64\Netsh.exe"C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="TInst" dir=in program="c:\program files\txgameassistant\appmarket\TInst.exe" action=allow3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:492
-
-
C:\Windows\SysWOW64\Netsh.exe"C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="bugreport" dir=in program="c:\program files\txgameassistant\appmarket\bugreport.exe" action=allow3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:3128
-
-
C:\Windows\SysWOW64\Netsh.exe"C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="QQExternal" dir=in program="c:\program files\txgameassistant\appmarket\QQExternal.exe" action=allow3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:2460
-
-
C:\Windows\SysWOW64\Netsh.exe"C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="GameDownload" dir=in program="c:\program files\txgameassistant\appmarket\GameDownload.exe" action=allow3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:4536
-
-
C:\Windows\SysWOW64\Netsh.exe"C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="TUpdate" dir=in program="c:\program files\txgameassistant\appmarket\GF186\TUpdate.exe" action=allow3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:4016
-
-
-
C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe"C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe" -apksupplyid 900223150 -from TGBDownloader2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3976 -
C:\Program Files\TxGameAssistant\AppMarket\PcyybAssistant.exe"C:\Program Files\TxGameAssistant\AppMarket\PcyybAssistant.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3340 -
C:\Windows\SysWOW64\Wbem\wmic.exewmic path Win32_ComputerSystem get HypervisorPresent4⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:1608
-
-
-
C:\Program Files\TxGameAssistant\AppMarket\wmpf_installer.exewmpf_installer.exe --log-level=0 --product-id=1004 --wmpf-sdk-version=50056 --mojo-platform-channel-handle=18603⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4724
-
-
C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe"C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe" --conf-path="C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.cfg" --daemon --log="C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.log" --rpc-secret=0dfd4687154ba3c8b8d5a9c61a681d893⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1724
-
-
C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe"C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=gpu-process --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --no-sandbox --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --lang=en-US --gpu-preferences=KAAAAAAAAADgAAAgAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --service-request-channel-token=4277273424723731912 --mojo-platform-channel-handle=2844 /prefetch:23⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:3156
-
-
C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe"C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=utility --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --lang=en-US --service-sandbox-type=network --no-sandbox --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --lang=en-US --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --service-request-channel-token=11312284299468939597 --mojo-platform-channel-handle=3468 /prefetch:83⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
PID:3576
-
-
C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe"C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --force-device-scale-factor=1.00 --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --lang=en-US --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --disable-pdf-extension=1 --ppapi-flash-path="PepperFlash\pepflashplayer.dll" --ppapi-flash-version=18.0.0.209 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=4791641779397553832 --renderer-client-id=3 --mojo-platform-channel-handle=3516 /prefetch:13⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4976
-
-
C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe"C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --force-device-scale-factor=1.00 --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --disable-gpu-compositing --lang=en-US --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --disable-pdf-extension=1 --ppapi-flash-path="PepperFlash\pepflashplayer.dll" --ppapi-flash-version=18.0.0.209 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=7069588903592727936 --renderer-client-id=5 --mojo-platform-channel-handle=3984 /prefetch:13⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:196
-
-
C:\Windows\SysWOW64\systeminfo.exesysteminfo3⤵
- System Location Discovery: System Language Discovery
- Gathers system information
PID:1568
-
-
-
C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe"C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
- Writes to the Master Boot Record (MBR)
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
PID:4928
Network
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\TxGameAssistant\AppMarket\AowGame.xml
- Size 326KB
- SHA256 93cc516b94ae232ef42d714ddc362bfcd34ef42359b024bb6e61902d5dfac0c0
- MD5 8110b1cd8ee4266d3aa39a3c1ce855bb
- SHA1 2816535db8e065e642a034bd717b4e9edfe4103c
- SHA512 8d62dd0329a9fabbc679b518ae1d279e791c416ce2a66fa8f84ca55da9c9b760e98dba33866da4ed0e5a4cea06834d634398e0aa7849b69068baa29c221bc1e2
- SSDEEP 1536:PMJGEo93u5sjyZLghw0MrH38VlKRdkfekmV4DUi5FTWj9H/8:PGo93fjUSKfk+Vrv9H/8
- TLSH T11D64A82448826E13417F63359EBEF651CC7F8EF79D5A32A817DEB2F4E8418846162D38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe
- Size 6.4MB
- SHA256 6068aea2fcf490fe6e2125a1eb50b7059424b6d3da5394bf4ab3245ba2f25cf3
- MD5 b32964b1f283ce35a96e14fdf8f8f6fa
- SHA1 5cf288aba9cfecea125bda66d2359a7266169404
- SHA512 8856c6275f0f68e1eb203b925ad98267718f35673938ebd8f1ae1604467f2bddbc290d06f40631fc56eb7389a05029312c5750616789cf57b4621c8435ce2f7a
- SSDEEP 98304:aruISuaSkYpzwmJOBMT32kubUm7QYS5t2FyBzkwo2TRlecBkq:6Ja0JOBMz3HmcYS72ELTR4En
- TLSH T1DF666D213A09C13AE99342B1AE2CAF6F446CDA744BA504CBF3D81F5D65B45D32F32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\StringState.xml
- Size 183B
- SHA256 aee0cacdf2eb6d8f5a0168a0756f1834c21632cb5238fcb366763e93b7c5d011
- MD5 bba8d8127e3eb9e91679885c5f42a8f8
- SHA1 b7583827b29251253eb476d8553b78b8ec111725
- SHA512 931d257f9a689e0fefaad5c7d3699fb998716638c03aa501575d9ad9dffff0d2bce3f485ac3dcbfa868380fda0bdbff84ac3a1e110c1ab0734f585c1a1dd5cd5
- TLSH T1BBC08C00322E5E3C8FA28F115B6DC40D8FACA1AC02B481F8FCE20D93060B0F1036D7AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-en.xml
- Size 268B
- SHA256 e97f7ada887eb751c6e6927ab57b04f5121fd7c14eb266c45954abb72833327c
- MD5 1f8732c2fffb83b09abae916afa417ea
- SHA1 26102b442325fcdc3e7f72f0855f03d353f2a55f
- SHA512 1ac6c7ccf50e69489c8e7fbd8d825d1a5e9e32d9e8764bd54de58efc0def5fa0c935097aed921c8cc89638e02154962ab9e8265e10843e3aa0a3e8cbfb7f6491
- TLSH T16AD02B085859BC12620494F4AFA265817E23ED9B71BC2AA4E02B2C45D52D45083403C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-id.xml
- Size 269B
- SHA256 76994bea62ad8c19e2ac0c193d05f87b2acfd7a4387c5adfbc24cd5e2d3da29c
- MD5 80c5d8008844619df82e2d5ad65b5da8
- SHA1 03bfb95bcac5f2b52de056deb089e6495e7f9b30
- SHA512 d3ac11a03843383cb3496fe963df3665e879a5ef28a359bcbff3640ac084137aeb30d9bdf937c651762e6ba09d45b5722c4019290ba8e16d3f9f4a1f96548fcf
- TLSH T161D02B089859BC12620094F4AF22A5843E22FDD772BC2AA4F02B2D45DE2D44083423C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-ko.xml
- Size 269B
- SHA256 17e9689057e15cf5a4e51a4db9cf97524a07f3ce7acc2c9c1ced8dfab6fdc048
- MD5 b96fa0a7ce5d7baf6467d17db4112338
- SHA1 06ffdb34e6aabe8e52d9f5c44c56b611700abe75
- SHA512 5cb997230ec2552e881dd32f2732d5ce4920b2f56f58e54bb0cfe840bbce3973094958ed2a0f77110f2f6eff265091ad4a2ad6a3c3d48467611482ebee5f6100
- TLSH T185D02B08985DBC12620094F4AF6265843E22FD9772BC3AA4F02B2D45DA6E44083413C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-pt.xml
- Size 269B
- SHA256 a418aac47f73420d812b9947229e9bab36b991629a3dd9a5f6c4649e8b02c955
- MD5 051a004b05cb01bc4c7fa92ff498d390
- SHA1 215c2f4dc6ab14fad406dfc287f7e134e783c5bb
- SHA512 7d2f70e8e54199c8c0bbc784a65022a1239af6adb8498ee676ae1e2114692b273211b45bede99123a339e05d92f132d05d1b86f86ad5f4aa39408e4911d4003d
- TLSH T166D02B089859BC12620094F4AF6265843E22FD9BB1BC3AA4F06B2D45DA2D44083413C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-ru.xml
- Size 269B
- SHA256 f15fd6d344c1f926c818b18104a463e345c74a17dfda688c4d6af3a8ce8eafba
- MD5 0910e48c7ef6ee3cacba63d19b1d81f4
- SHA1 b9cf52f8ab64a5ac5095cd70a4c8d24873a486e4
- SHA512 025437e36dc8f783afea950805b8cbc931677322985b98310fe86d9e1c96844193b9aa4bffa291d033e9e3513070a619695e037074cc48dc29fb961973aa7d0f
- TLSH T139D02B089859BC12A20094F4AF6265843E22FDD772BC3EA4F02F2D45DA2D44083413C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-th.xml
- Size 269B
- SHA256 a6d47646219f993a45eb8cb1b33625cfb357b1c2ecb69ec165fc6d62b91949ad
- MD5 a737838e3c93e95f1f8555c83e19bdf8
- SHA1 01a3c3427c5badbc38ab065913a0f1ecba81aed4
- SHA512 1e2dcfc4a01a43f16c9f5f89fe372b31b0e4f35ed4d2f7670c9edf2fd55feaebc96a409b47bf02a9e5485a5b05b11878cfb4132a73ef024797de54d11620a877
- TLSH T1FBD02B089859BC12620094F4AF32A5843E22FD9772BC2AA4F02B2D45DE2D44083413C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-tr.xml
- Size 269B
- SHA256 7f28d495375253347d1d947fb12a9d25082309b8288dd7af058f4cddb427245e
- MD5 d27fbebb5f581b0c9960d4cdaa093cbd
- SHA1 aa6238139cc6a48b83f226667806e4ac009d31ac
- SHA512 e79fce5afe37b7d44dcb7b1aada2f5f07209723dd71c5e4195658f125b18d2c4be23123079e30f8a12a0bf5c52717b701d01bd892e8ce0579060da4080c70d92
- TLSH T1A1D02B089C59BC12620095F4AF22A5843E22FD9772BC2AA4F02B2D45DE6D44083417C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-vi.xml
- Size 269B
- SHA256 6c071064476b4bed118072014abf8075046dd5fc2afd9b0c9527b3c2722bfc8b
- MD5 a3cc17103e2f161042fa24dee1ebd243
- SHA1 1e03ad708bc7b3c9878f367a4241bc9d83c02079
- SHA512 e4f71f4f2c6814a6ef50ce6260f22024a670c0768114ed048de38e1db62c8c3e105cd1f7f204f7dae03256ec5ee54d09b190a5f2cc1e851a61deb4a44890e0f0
- TLSH T190D02B089859BC12620095F4AF2265843E22FD9BB1BC3BA4F02B2D55DA2D44083413C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\AERequire\feedback_down.png
- Size 123B
- SHA256 766afb00a71210fd8a97331dc936aeb3bf5832da4011e0faf3de111479618604
- MD5 db1e630f6a2edbcbd4d6351de1e23178
- SHA1 c4a9444c25207fca2f66108dea4d3e00af2f7f44
- SHA512 23732bf4a2c530fbd5bf3f85593b33ac0ce47cd45369f7772299613b301a5b2099baa47f63268e823f7ed8d87458980c4ca262aa5148a59bb6f14442e4fd7d52
- TLSH T1BCB09BD225402C12839852AB52189486D8385D5459F51C575C1054EC6535104D244141
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\close_down.png
- Size 135B
- SHA256 3ad5369cf8b5e7c371c161dc222da9339da443d6f0d19192a75654a540211800
- MD5 ac8663eeb86f730ba61ea1eb7a305517
- SHA1 ed84d55fba2870b06a05a0366c1bcea5a18a1d32
- SHA512 00d3fc94e8a243b35a4317b32e0c8b98a7c68bce54eed73341247bfacdb3c20f5194edad99ac14c7e3664fb5bc54f574d87346557812d1a53f53337712644a78
- TLSH T1E4C02B93CE115D31C1C683A382380505EC380160236760431B4EC033F112304D2D010F
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\close_hover.png
- Size 134B
- SHA256 a04f3175fd7d6d26bf58c0dde03b6f6e8c9edee5c0eebf6aedaafde6a6b968aa
- MD5 f63b0bcdefce2dc6c560ee6dafc8305f
- SHA1 e01d7b5a99798e1b46d96a14daba6173cb51f428
- SHA512 1164aae024122600225649640079c49191b679d16b469ffadf806c9d0de1482032b235ec1ccfcde8b618393399b09c8115c20b45ccc9a0d68d7b2e2884f62ef8
- TLSH T1A9C02BD78A008D36C1D9036302380908E81840A1635F1143960EC433A020304E1C014E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\close_normal.png
- Size 135B
- SHA256 bb7e6b43a8d86aee131a31d84ebf71f592b89f45f9ec26b194406f90510c54c9
- MD5 58d267466f6716c513d8867d361e42d3
- SHA1 f1257787f3748c9298cf43ab435d2088b1e9fcaa
- SHA512 cd967beb40ebc0bf54630041296ed9cabe23472775474d6af5a350a1e39cccbb72d3cd38757115c7a86ee40d89975d076b4fcc3248639241b73cfb4345a1076f
- TLSH T11BC02BD3AB004C31C2D5022B13382501EC1548A827AB1047150FD01E6030304D5C420E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\max_down.png
- Size 111B
- SHA256 28d44de3a3ed3039324730883b5ee7f36ecd77c351f0dd470f0addd3c90d7c46
- MD5 069a5181128070af374b7eacd0f1a9f2
- SHA1 e08c6e8ff34edcb59bb3e067f3297b0cf29fc203
- SHA512 dee9c6bd584aba5049daed7e845f49d7485d311a0f8a431376a2ba09a802b9f24b1f9c6fd25fda250e76ad7998b72fb792e542a0a885c7c0a72ce87d08144a89
- TLSH T12DB012D39B153C228D838333735CD080C469C5999F03B11F8335B4339931805D8E836B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\max_hover.png
- Size 110B
- SHA256 8862c6c91917a10615bd4ef11d1afcdc4f5c03cd498b15be1f00c6c7fd9e704d
- MD5 19f33a66c1bbd4e8b1fc2208ebe8738e
- SHA1 2a944bc87758f87877795716576594002bee0920
- SHA512 92d4ceeb4500e5f183f3df4a1a8501945b16a8eff9f68273e89dc6d20711dc9931fca6153bc5c239d0f273aee43ebf2a824f5d9aaed25d1fad62fad2171197a3
- TLSH T1DCB012E39B153C318E814323735C9040C45A8AA85F02B25BC331A433953290AC5E838A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\max_normal.png
- Size 111B
- SHA256 495df5662da43a916eef4451f046526697b518c796d529d7a4afa0c4f62adf0b
- MD5 3979eb2a7f4f11cf739af806e55dcf24
- SHA1 aea935b02b9eee4a6787ab40d1b66d06ba479827
- SHA512 2ef413d624c7d74daadb7e403aa34724597f395ffdb21cad5f65b38dceb44574e570cc8ff01885cba9212b1f4e8b1b9c114a45b3aaa5544f5890953823031485
- TLSH T14FB012D3BF142D239E8142237BBCD081DC95C19D4A01B31AC230813A5931419A4D434A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\min_down.png
- Size 110B
- SHA256 0651b1f15c33c959064acac84021bb92739dd0c36d59a4d37cd6e738257255b2
- MD5 ef106171918eb3ea4a60ee955f851fbb
- SHA1 45052d56ee73fecba4816f4ebfb23e5c4a114fa4
- SHA512 67fd33d62ab89a37478b829449b3eb795fbed37c3e38e8dd33801a28d7ab9a8460f688747d1f48e5ddbcfed514cbb808517e1c035e00a66a6c3625711a5bae82
- TLSH T1EDB012C35A519C28C24B413313590010EC2D1C36565486471C2BF034CE7A258C1C854F
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\min_hover.png
- Size 109B
- SHA256 4909bf144b1e5641ca945ed9046f46d5c6eb3d01f43581a575df826399e6097d
- MD5 a8963c9a7d5f4e262cff6d6a3b7063aa
- SHA1 de2d4494bd44a8cf8f81944bf1966083102448af
- SHA512 ddb78a911e297e84e67c5f3bc37034c27e7c8ca629da610d9b11df44f15fb40344024b4b847d1130df31107c406f694ac73daddf10e350d3ed93bd4f54260c9e
- TLSH T194B012D3B9516C2D814643F3C3144110F8278C775A91E2430CAEB4368570348E2CE54E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\min_normal.png
- Size 110B
- SHA256 bbd72095f035e68f319040b538d7af46e23c7222d5ecaba6404a1c96d647cd71
- MD5 19ab5e38c56c0859b8d18c1bb84903d6
- SHA1 081319712069f6446a1ef792a287cb72845b4b37
- SHA512 8c111d80ef37480ae7775c1fede09552708dab51b42c3481b658ea3a6640c555737b30fb50e64bbcb42cb412750d078f0f0e2b84b59f485c2427e81aaa640d56
- TLSH T16FB012C37F409D25839B0177131D5581FC1E59785A6486571C6A902C8930125C1C854A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\retry_down.png
- Size 112B
- SHA256 0b86dd63dc5087e6e5eaee29e08f32f866586f608263fb900262b065c28043fb
- MD5 f0d939af0ddafaf08f9e4bf980796515
- SHA1 ab2a9c979f419e342f7b0240cc29eb2ff092ac3e
- SHA512 cc8319c323d07cad1efaeedb362a644446c61688d0e897ecca305f6e460cda98817b002e4866c67b3f3c4bf49a7c48cd3e1b7378d798ce5afa9d1f20dcf56ba5
- TLSH T1A5B012F322500C77DB6B13776F7CC502DEA08359171113071007C93D4921024A9A07C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TBSCoreConfig.xml
- Size 260B
- SHA256 605161e8a540fc3c50381b7f25baad5bb5ea4a6ebd3efef31c41c4b8075615cd
- MD5 12748b15d251c4708df86cbf00544929
- SHA1 132f82c4570045b92e25f8e68e34c4a6a03605cf
- SHA512 0fba6314e5664ec88251abcc292d40a31327dd0ff0ef9f7d9dd292964c4d90a7378999a21c49278d6fc655885b3a499026f7ea6fcb45a8c2fdbb45b04871ef4c
- TLSH T1D8D02B0AA11BCC62D7348B10ED50485CBF12F2B516BD25542AC8FFF48A25040884A416
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Theme.xml
- Size 9KB
- SHA256 1690526c13ed1ba0a8a3b811eb6358a09e145a2161a7fa0028c346388f866184
- MD5 f340d3ff3bda959d8966bfbf56d34d8c
- SHA1 2bb7e187be9f74fdc42e11e5e4e7abf52a1caf48
- SHA512 a2c6d48bd95d16b1dc90c265202f74e02683448ba8ca203f74ab04b1e3957a0f7c694770ce107bfa3f8f5239290ffcc3331a37f00062bfbed3b616ee6c0d46a1
- SSDEEP 192:/cb1rE0hZcabNbQHUTVXam/VJXLPhziiSVlqJOsja+WC5RisZmmNCGsxGZww639R:/cb9E0hZcapEHUTVXaSV9DhziiSVlqJw
- TLSH T11A128C21A6C9FE364525591BAE10DA005B4F9E72030DAEC9F48F2CA16B45D81F4277FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TypeDef\BasicTypeDef.xml
- Size 965B
- SHA256 2d34f1afda13d8eebb8fc1232f280214b27fa77196dd29a72bf175c44c5b3a1c
- MD5 d1683ebfa9a9885a5319a11018ab795e
- SHA1 bb581cb096504b8c502853acbf20a239028e1577
- SHA512 1db13bc2272d34761154c822e3a717dbc46870e6428ce306e915e589c7b9194d9d320e5674cb1d2b1435f8f64908d20a38f785f69569ce699eade454e9288145
- TLSH T14511FB40B879FC23D63A298BAEEE78A478C9B3CC53CC12A444455CF7F6496A464027FC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TypeDef\ExtraTypeDef.xml
- Size 83KB
- SHA256 ba32bf96a3ba1ddd301399160398319378386e229937b7fea8c2daf2fc3e01e1
- MD5 9725b213ac7129d7ea32be460cd85e41
- SHA1 2d020148c5ab4d4cb523cca56d17cc255511e7b9
- SHA512 d8951bd3f79175274e309137bd6c69ce22e120c4379ca742033984e3f591740eb59c1ede24addc691f2d0aeaa337cbf1e3dd4554f89e2b13bfa861e996f6ddac
- SSDEEP 768:sVUATprl8ebhziOSXBxxKTKn0IWr1LEfuEVbKScDf+QN9:aUATVRiOSxz0IGwuCbKScDf+Q7
- TLSH T1B983BF10F4D2FEA05C492C856195EB5416879703D7202E99E7C9812BF4EA8E8EF3C7E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TypeDef\TBSCoreTypeDef.xml
- Size 380B
- SHA256 0954e5e36d0f11e6cd6088b421844b21405c569565dfcdc1431ec849279ad56a
- MD5 98fa6d64788dce991ee9d308e58cc4e9
- SHA1 5fa038f6cca6c3e4fc4f1e48673194c2bcb95e97
- SHA512 71ea6c7f0154674a0e0b65b16ecce681f891e615b7f443117bd0bf4f69ea2e7f6e45fd1e964b2d9b54f4d0e19067b0174c4473ce52e93add74df02aaa3563401
- TLSH T1D3E02B20B8B2DC5544410C1026D8CB4423717343A3640C56A7E89937ADC78C89B076E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\common.xml
- Size 9KB
- SHA256 175760389e292e7bbdc8ba697551dee44d9e3727e54df1d50a6bbbb3db6d503c
- MD5 c771097a1d490053e97638198f2f02d8
- SHA1 f2d060f6e91688425e56e4b4f846f4ba4425f0ba
- SHA512 28a70542fa4a2e1d6d434512bf46c92297a96266c40d46e54ce7e00a80bce438165d705e1828385dce434f59360b0e7135134e09da27eb4d72a5bbc7e26fc54d
- SSDEEP 192:EvpiJzhmB9VR0nhPR0JJVZAaFrj8rMqu4pBUUKXK:EvpiJzhmB9AnhCV+aXf4pcK
- TLSH T1F4122040D9F19C569A204C4AAEDAAC0C7D5F62F35A9C739076EDBAC44FA6C40C8473F9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\gf-config.xml
- Size 450B
- SHA256 9ce36b7d7b85d4c1b23b773cf78eb7c688ea3f0abe00a2bdbec30b6f9994b384
- MD5 f7b1bcf930a68845930ac056877658e1
- SHA1 2b97e403cfe29f39f0b908404d293af077c47a3f
- SHA512 bc5be9f320607a89d3c84c2c481cf12c046f132cbbcf0753a32aee94d0b3c3ac7f60eb13f21c218487461fb927645f2771d6457abb19ace1266865dc6e1e85f3
- TLSH T1BDF0E5995C89BE83659C2E52DF0855298ECF23EF0086CE84B3912D3A3D0D2F560503C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\GF186\TUninstall.exe
- Size 4.8MB
- SHA256 a53ab0e94c7c763b1dee2761d4fd66b38fc13c5a2b5906797146446e22d09866
- MD5 456b7f7a9706c0acfe82bb7ae88c3406
- SHA1 264ea2a57626a314e8bdd5b6d923e7ee1329904a
- SHA512 b8ae70f7e163254663efb667625fd8e9d3195e55a442eee290a221c988bc2657a49738309b67f07116a53a6ba678d25b62181b1fa6b9e7686830916d86c2f6bb
- SSDEEP 98304:VsDqW8fEiJI1M1gdppEBL+txAXTEoZuIYe3RzW+u+mxBUUWVtZq5VWP:VcqTZzgT85XTOiW+u+mxNj+
- TLSH T19A36B022BED14173E5A303319AAEF77D657DE6600B2580D793D00B5A2D301E27B3AB97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
- Size 236KB
- SHA256 2a49f8f46f90097824952e58ed65cb4c76957d00e86a9c5d329e9e74bef1cf6e
- MD5 09edb5a9bf963d0020e7fdfda2d79c34
- SHA1 f83bffeb58ec8b16340ff84ac25235252687b52c
- SHA512 01d7af03cfe7fdb2a8ee8b9488c9e71518c4f09f11d10b3595498caf87cb6e709f2ccffc25d3ed7b71ec3eefef751d83a555c8265d18debc95e3d85fb1d6a10f
- SSDEEP 6144:WzzqibCZ6nb2RTsPG/P0vFM2x+DEGjXgz/:Wz9E6nb2hcG/Pe+DF4
- TLSH T10D343B3132468475FBD603B16CA8FAB94468AE790B9091CFE3B87E3969314D31A7351F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\TGVoiceBuddy\I18N\1028\StringBundle.xml
- Size 1KB
- SHA256 d1cf9e7d5c67d1fd4c12fb317813f4c4ad1d4a94d992d3758b0ca30d7ee513d2
- MD5 ddfc333a5cf6c05dc44f45bcd729a42e
- SHA1 cc452db43266b5cd6576af59c2393945d79b6aa3
- SHA512 4988792ab971496a822615e2665f9c0653c02846a782af410e6b981f162b8e968426ade697ba835d357f5dfdfc62dd1041f6c25db2e5f240e0fac6c8b6c0fadc
- TLSH T1AF312BD9333E5486D5EA7298E8AD7008D5EC22DF17B482F9F412301ECA199746330F55
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\liveplayer.html.old
- Size 3KB
- SHA256 28d9fb50468ceb55f01cd44153aec920038589349e86097a9e5f61d534fe77fc
- MD5 00aa757ab13bc8b6b2910b0ae8533cf3
- SHA1 f3bec91cc669e05527c7ac9094155e466c8cc721
- SHA512 a3fd92ad920ab61fc49e296d90d47d947fcab41b529961fa371afb4eb12bcb02f449c1d152ea3bb872d4ce96bb8c86f64366372406a7754df972e139b083f032
- TLSH T1D381D92E745056BD50EB0A26776F77097071248695018620F83AECB9A7DDECB4042FAF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\module\lib-syzs-login-sdk-v2.ac53bf12.js.LICENSE.txt
- Size 808B
- SHA256 0d8f66cd4afb566cb5b7e1540c68f43b939d3eba12ace290f18abc4f4cb53ed0
- MD5 783f14fa45b10e088e68f98251448010
- SHA1 cd522246a57b87ba54b1b6b92174b9091f70e983
- SHA512 b7c82962cb44702c31572d8d4057561649bf47fe553441f54a9527c14f5b4f0fd747bc346e0ebd108879a9482f5afc3cf73229ac52143c5914139e108b8b58d3
- TLSH T1BD01F4DE70A19EC569959FA13C713DC411D9F1A7B802EA1424A9F284CB7F04FD47F400
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\recognizationMobileError.html
- Size 80KB
- SHA256 4f29fdcc65a006e9de11ecf94a82288ca73850271ca908214cbf1a167fe9127e
- MD5 f9057c1192a7f5b1d180816137f0e730
- SHA1 9b4795815e73d7f3ff9949ecb8d22a42deb66315
- SHA512 c1bffb4a7aa116bddb502f6e8875674a76fc8a7f44cbad1bbb56c0b66c4f89e2e021033381059449dcfc0261744f7fb86cefb4a4699568c7e8ba1781aee37eaf
- SSDEEP 768:SVBY39OjmjW0BKH8iPAqTWOTiTHR1fm9/9J8vxDKNSIf/fQ72sh:SLrRQ/rR1e9FLq
- TLSH T13A83298EFB99707206A76474803F210F733AAB99540D8464F525EEE56CB8A4F6217F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\img\playzy-tip.png.old
- Size 16KB
- SHA256 266d447260366b3952638a4b579096bafcd4ce6b1eb36ea87de4040c595f42bf
- MD5 37a81c422383949c82ef3c87b87caf1c
- SHA1 e1cc6af8c16d83eb2b7f0c3d68a989a569b2e45a
- SHA512 2bb80be95be71fbcf449111cc049cb70527ac5b3c082474fe69d3bc793603bd7a7796c4b4cb949dee95ae8749f1ccda0450dc45eb711b785ea45d250ee8cd8d6
- SSDEEP 384:+fcbKtvMLDshdZ4stZ+y656oAlPiMuAnzp8RTauMVpC0vmX5V:Ec2tkLDshdZ4si6oAlPiMJniNauupCgW
- TLSH T1B972BF385C843D4FFED1597F59883ECA386AACA2801774CC23A3556ACBC51767A1ACC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\libs\jquery-3.6.0.min.js.old
- Size 159KB
- SHA256 1f20afe2298cb15bcefafbcaa7ac8f5d7253b7e47ea52601f6f4ca3ea62fbb3c
- MD5 1881464337728d17657b7c23c6d0ee02
- SHA1 bfc5c3542c7b6f8e1fc28db3d1a0defe79ae539e
- SHA512 701b7bb16b6e496f96cb037da0581d0c6f4d7d1c7e6e4d80217899faf24c34909ed90c83b649f4677dc543ea327ecd7d63feff5d6189d34632358275631fa1f1
- SSDEEP 1536:EeYnfmmXPRJrQh2nTEQLYh2A1KU8+2NUoAkWeMQVtPbZSQ7q07lhpXhjLcwFwpHN:EQvKUnOUoAkVxbw4hgwFwlNE0CtKr
- TLSH T1CAF31B8ABAE621319213F03E896FD808B176545F1E8CFD05790C42A55F1993C97FAFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\libs\wx_sdk.js.old
- Size 3KB
- SHA256 a42306a21a0faa17b36e78a4f25503cf58f161082db4babc587ac2d15f8f7742
- MD5 b319838dc55fa679d5ec38c671796b2d
- SHA1 fe8f2bdc12b8d2a3371ca6ff02549f5a8fee0e7c
- SHA512 5252192021fd2e1a97a9863d4403a827b0906c9ac677deb638fa49685d9dccc7fe8736ca589018205a08808b8bca7353c43b136dc6c8358c52314726c2235be0
- TLSH T11081A6DEB184FDF50143A474503F210FB737246A611ED0909365EAE67E28A8F7116FAD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\libs\wxsdk.MD.old
- Size 302B
- SHA256 4c8c5aa8d5fcd32db82cf6caf18ca52c144b5b559298ec6e4fd527c12d7fd9ec
- MD5 8f021e0c7e6a699810382aa7b95d38cc
- SHA1 11311156a5d230a07253b825ef594f994050258d
- SHA512 2e532d62780eca764c4fa8238dd09724b188d27fcacd04fa5cec8b647a264bd79770e0fab67eb7644528a21683379ca3e179d43fca420064a802a8cc5e12e950
- TLSH T1D3E07D9A694C5C7FFCDA55EC3495DC7C58121B2FE450F1519D0DC84864043770259207
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\Close.224ea384.png.old
- Size 441B
- SHA256 f535ecab5f2bf5d797da60caee9438d097389f91c49fbf2a8414f97fc326b6dd
- MD5 224ea384d24029ce8ca8c0e44803bb88
- SHA1 432ca47e034a0c6096528e69f93fce022989b7af
- SHA512 f4f0343be8bbc983a434f0b3f3085073cacbad3fa0896c97f4d53094206b0049ed81e6eaba334aa84aef8b029a288839974e8f410889bc8a1c7b666abc05e4d9
- TLSH T177F0DCD7AF924C34481C92AA919630C03A5A2DDB053E93ADD41492A22AA56C191ADB5E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\Close_hover.374e4045.png.old
- Size 389B
- SHA256 92164990579dd866f0882e7679f78df8eaf3006346ae7cb3ae8fe8e4ac86b054
- MD5 374e40458924d7ef173d117fdf71a844
- SHA1 920eb76babe7004cde1cb0b7bf70df8ea1c15c54
- SHA512 bec29a1764469821ce6d49668b7123403f904d28b6c0d2a8278eb8bd1cae96175292fde613dac157fda32df6c34c5e1c3a0c699641e499c8d3748c0632efab4b
- TLSH T1F8E0F1F2F720B9F8C90902F8411A64856F2118CD7B605714F12400A4AA3F9007246307
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\DINMedium.ttf.old
- Size 43KB
- SHA256 39cddb576e0e62f6b9f9553dac9be7a5d41565907546f3c30e5af49cc62ad832
- MD5 902d51bb5dfdc3a3b8c11af3cc56f901
- SHA1 14df878f65df7447c14e690f1041da6968d4c4b9
- SHA512 6be27b65fd5b50f78b07d5d91215ab094216e81b06a11541045f406b95ec4c512165484707b652ae8b07ec1610e73a9cc77a4dcc39d43c4fdc6f01678c591969
- SSDEEP 768:eSScnzCoonSGB0wHaAV50xnazTv66gV6tSau4euBSlJ5cTzcdBVS:eS87nfB0IvVKpiC6gM4Z4eASlDSAhS
- TLSH T12613A443CEFE8D0BE35A57F88DD2439A4AA0F402EB796B1D294290F6DD5F2614807E74
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\FontsFree-Net-D-DINCondensed-Bold.ttf.old
- Size 38KB
- SHA256 954d998202722eadeb5d1174457d25723f2add665f0448d2f23e8c42fe344002
- MD5 5846f45b4c6987e591316047f0840020
- SHA1 a241a05ce8c9e8102af34050527e233365dfe732
- SHA512 0cfbca843fa5e7ef498ea3561775aac5d8affc657a547c399eb03c8956f339c2174b9cf1a1195490de6b53e5375ca1ce4f25828057085db476cc67a3f0389b63
- SSDEEP 768:HWfADj9VMeHl3U3Ib/9mEj5M9GgAO/BfGKiwSrw83n9YPnt7w88k4i7Gv:2fAX9VMw32IFj63peKiwJntKk4Tv
- TLSH T10203E714B7EA8605F5F7BF306EB59398DB35FD146A39DB0E1484402F5DA5A808CB4B23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\GP.cad24f18.svg.old
- Size 18KB
- SHA256 c21264af4db3b76c28b6f74d6ff10f6d69342faf0033f18911fb6a85e1e240f7
- MD5 cad24f189ae96628318a697e7b37305d
- SHA1 9a2db8961a31a37cb4797874829bfe95fdd8b00e
- SHA512 f81c711b141c4a4d7e49097708c94ed33947795067f2cd95b273496aeb4c8142b5eef6f64ae7146e3323cca4f8e84fb4089d8b6a67019c1d473999be7483c398
- SSDEEP 384:Up4MD/l36A4B4C3HnrrLvcDvRCXi2dE1NYvuXGJEoE+hIe0cLwb8dRq/:U+MEAwrrQRCXihYGGuoxzvAYq/
- TLSH T13A82D0B970DBCC571A20A40074A374375C6D34EF770964F9944035DA059CDAB9FE927B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\Logo.339f6000.svg.old
- Size 8KB
- SHA256 e3e59e4b32af5cda6073e7c39b77ae1e0fc0405fba4323813644cb5ed2f5a0af
- MD5 339f6000254daedc8773ae6efcc89acb
- SHA1 91b0e63eff58249d4ae4c6ddf56aef19c4ef087d
- SHA512 6ce330b2e67b2b07cc45dfaa306c6725a6c1aa1a66d6652b2ff088a4cd46d42632f46ca235de59f217eb6ba3e811f10181f86c50926a2d8cf1c2eccc86bf7b90
- SSDEEP 192:eW31cHQ90av6+Ef+26T+3OEyecc3MZu4yQA2IF4kSbs:T31cHQ9vvFpT+3iemZuHQA2IFubs
- TLSH T1A10281D9A3E862F5D402E3B1D7154462776F34FBBB62CA488B492E90F45146DCD9EC80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\SourceHanSansCN-Normal.ttf.old
- Size 7.8MB
- SHA256 cd1c5b9c6740c570ab7289402d1af2f39437c5e095e83baf81c74d80e56a75ba
- MD5 1def9981faa460e4e4529d4656f28ff8
- SHA1 1b9c02984a79104c455f25835d75a70825a885b3
- SHA512 cb6f798014b05bbe8f822063d309df9d1539232919346e1ed521cc5b9441b26917b61cd6ef51af638a11da8012f1fc2877449977153d1166fceddd61d6ec20ce
- SSDEEP 98304:2Mq2bPTm7XsqkNtd/O4jhUOsYBGzXajRM06jYVBQGMu9R9ZXM:2Mq2QcqkNX/OP+GzXQM065GMu9R9ZM
- TLSH T105865BE257C4AD699D11BDFDC700A06AF385D1289A05D7F1CEAB5E3D3869F680C48EE0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\TENGXZTB.ttf.old
- Size 2KB
- SHA256 9e8b81fce344100ba628b33aaaf4e797998211e770e2e82985cbe2f5673538d6
- MD5 b02e269889ca9a96bff1afeab2b3eb86
- SHA1 b47ac993cef945659fb9e8b2d75186eaa7b5780f
- SHA512 7e079c9139902e50b6f4e68840d268d05996d7a741c0dbf6d30c2ecf1c84e5bc53b4b06e1dd75b93136ceb2c8de9163d6806aab6aac6f7f161871d4002cf05c3
- TLSH T1CF51545A83A38B19DD164F314D662B10EAD3EC02A3E6D35F1240D365594FA902D701EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\WelfareIcon.bb215fa8.png.old
- Size 16KB
- SHA256 b5f03327bd8ce54057730f4241b3eb12609f27c3376f24c18958e44b5c6d1329
- MD5 bb215fa807270e76f1b10875419994f8
- SHA1 fc7449af0833fded4f50a662f48205319c4674d6
- SHA512 341c2cdf93fc7545d7eb652e3441192ee999df5061684b5ed6384428806d2d660809d221c8401c7df5140e249abbbd22aaa37f0f53d931a4e18573ab9ec8ff42
- SSDEEP 384:5hX0RJ7vwfZAaC4etrYpbkAxhB9FltRjiyOwlq7DUNv:f0RBuADrYpbkA/NlniXcNv
- TLSH T1D272C0DB4E42F842E5EFC4E0D027B329ED5330012CD5A587689B505D447CA7B875A2F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\about-logo-oversea.1db3cb82.png.old
- Size 54KB
- SHA256 2131c1444334e92a949c668c768e9f13a10ceb153a421ce15f71aa6f538ebc3a
- MD5 1db3cb826f48df2106114a6afd3a4e4a
- SHA1 e4fe155f291af39f509aff9f42ab115690159108
- SHA512 14689f7f1eea5c5a96bd19cdcb1ed8f03905b5515146c8271e0a66e9ab04b67e6ff1f9d51115e58c7d7d910d8b695dc9a97d6153d3cd70bf8badeace67d1bfdc
- SSDEEP 768:AKAyN5cJCbCJk2qD1wXePEJnaWkuEf0zO3Of/WGxEzE+SspkoU1vtsu4Z9dwICo4:uyjcJyCaBwucJnF0fEhTk5XDU9tCyu07
- TLSH T1F843025207C631F26A8C2674EEBACFE6D64E287ED4227875B57BD147432F32274820D0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\about-logo-uptodown.f4b36feb.png.old
- Size 23KB
- SHA256 7dea199c961b22190fb00f27a30a6393a7457668d0303b7a982abc8b8af99edb
- MD5 f4b36feb94fcf2dff1c704c05ebc9865
- SHA1 946e0a8be7651959fe19f9c34e63934c40c48e17
- SHA512 bcd1d8b36b9e2aa9c99f57db92d91775c43cc41f553ab5786cb27e013a2b69617f4b5b2f86fedec14e0675c27036d6e1a6b3e4d7fe0d9364ce41db453fd264bc
- SSDEEP 384:ZhDER4v5kU/z114+fJ9CkkM8wIMLkoWcG95Vd9syeL6j1LAMW1ce73N/naQeE+A:xRX/B1ZBNLJ25VI3ujGFbRaQeE+A
- TLSH T12BB2D1162872E44A6C9DC87571E304C1EC320FE4BADBB297765EA4062F6BD902FD9485
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\about-logo.37448401.png.old
- Size 14KB
- SHA256 b4ec90ac64403b00799d8d4ec872c5e2c45ad74597ffc4587de2f6550df43fbf
- MD5 37448401493d55bf36cab8a2cb988561
- SHA1 0b734bcda25744769c1349465a230e039ed9a34c
- SHA512 68bee5298e26ae244f060a2c76a998ad5b62cb8526ddc979879cd396d29ade09f1a28580552b5cedb525aaeb4a92f72a4ce34b60b9a4574ed54b9666a6fa9bce
- SSDEEP 192:cYltJ0lT2Cuerc9QCkrxBwkUWdInvanxAulLv2bxlc2XyjgqGZMxa484MOAdG37h:T+FEQhwtFvanfIzc2OgqGSipGrh
- TLSH T15962D05C15E64511F8872F34326F31700324811A88AAEAADA6725A6D78FB59CCD73A93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\aboutBg.c2ec7658.png.old
- Size 72KB
- SHA256 f46308e39efabb1df8216c12abd9fcd982372f741d609c19ab17070cf27d1746
- MD5 c2ec7658a58a6befbc5dbe99a7ec31cf
- SHA1 15ff3e5c77f430f894c766c66f8663edc66902da
- SHA512 b87dacdf8b1f928784d4eeda964a6907c88cba3d105e18785af52919455ef579e4ab525076993499200d12109d98f5a4f57d98d4ad6d3eb82a092c536ad67108
- SSDEEP 1536:PsZfABHtWZA37+F/XvmxlR5ufxOQqIb2MZFaeti9D+7jbEX/:UZce/+xlR0pOQbfFPY9D+XoX/
- TLSH T10173122267C1FA63117CF6162A19861A6F101C7BB7B285DE3884D03FFA4FD844D8766D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\ajax-loader.c5cd7f53.gif.old
- Size 4KB
- SHA256 e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
- MD5 c5cd7f5300576ab4c88202b42f6ded62
- SHA1 7a1aa43614396382bb15e5fde574d9cdcd21698f
- SHA512 f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38
- SSDEEP 48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS
- TLSH T1E2810B9CE8A0F631C59936B78DD92D1A9ADC5796AC3CCF5215986808F91F223028735D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\android.03fe0024.png.old
- Size 18KB
- SHA256 3f623c66ba79b46c29cd687e2176ba8c14654cb837373826d30c1ad74fe731c0
- MD5 03fe002464016d9ef2bb8cacabe08ba7
- SHA1 315d7c6caa6b85be2b394436d171f66743cfc114
- SHA512 2e470b27cc28dc0ea1ed7dc9a609e2f113a63cb5690a8df7963fc853a7e5d8a03f9656671e96300d31188433fdbb630a1ce8e5d41e3664efe88a4c58a1eef81a
- SSDEEP 384:oRQrdzsl5pVGIS7M0sFY6/KltesBNHhT4/JjltxNMf/Qob5cbAoGX:oRQrdM/ZS7irKlt/1hTCpNEQooAoGX
- TLSH T16A82E197AE27DC1C995B4782DA364B1E69C795CD3F8382B8310C48ECE514FF5E2661B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\background.2f301ae6.png.old
- Size 8KB
- SHA256 398c7d9731e7ca31bb2321d1a2d4b94dc756624a370e5077a98e62cfcdad9b14
- MD5 2f301ae6176f39b0bfa7d295ab15a005
- SHA1 bac9a8324c7cb531100e8334447e6fdd2f542016
- SHA512 994578788290215518488dff1b7989ddf75d723facd5655b926883c17598600ab1b81e52b7acf22be2f425f3d598c185d5f00823febd5edc61145d3484fb46b5
- SSDEEP 192:ASYoV1AWh/477QpFu3dcrdA9Rb13gRA+EpEzhpaHN4QRp9kH:n1V1DSvQpFIeAR13gK+k0nL
- TLSH T147028E6290EC80FFE22240F3F9CD0AD52CF88195D795EF16515C618A2D1B6BE036B949
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\battlePass.6c1d0bb1.TTF.old
- Size 1.3MB
- SHA256 00aaeeba5b3887173248f050beeb8bd7c05ec9063dd9d9f2452ffa2132cbc53c
- MD5 6c1d0bb14fbebcc2c6ccc6c9dd21d97f
- SHA1 3fdc7436086bb15718f0cfc99f8d16aa029bdcb6
- SHA512 f14e19f8f1d4e07ecd84182735400235e41b9942a86b6d0e4d09dc1e1d2b4f56c5abe52052821d0d1d6e22566d17b2f00d383dcc5321824e2d35b0c44db1722b
- SSDEEP 12288:KFd/78Cvrz3D4aGp22w8EiqFpbCwT/NpTTDcyuDozxxXVmJ7Tsy28bae:KF9f3DQq5iw/bbXVgMEae
- TLSH T13D5508529A9CFD29CF23EA3D1B31328CF21ADEE553884BC5DE5C1E664D6944F0818C7A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg-large.1a662cff.png.old
- Size 115KB
- SHA256 4b7158efb66fc15ad7453392073a9e8b06e15dd3c77b92513e79d98d86f68b1f
- MD5 1a662cff1d69a71a3aef1f55140d356b
- SHA1 399ccdd1f09da09c1172554e0b79753246692628
- SHA512 21fb57eb9df8caa3d71c048c39c7928951c5909eea42f474eff3628bb09f214779ba9604c93cc489c084c0211e5b98cb9a9df1c7a5a4ddd83f673198e4c0dda6
- SSDEEP 3072:IbdEzXxDGb7XOVmpk+slY2cWEYyZW7dnJxlYd6cY:IOzXNU+Vmy+WvEdc7rP03Y
- TLSH T154C3138114FAE3B26753B43E6B08251EBE943587D6C38BE398E09315EC6DC85DCB6074
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg.3ea671d3.png.old
- Size 167KB
- SHA256 8210ecb596defb0467db7fe3dc4300ff48742e8fc81921f134ebe5ed52e531e9
- MD5 3ea671d3314c837be2470038c5d1a95f
- SHA1 a45ec699e606b0b4f4850e9416151aea6a5ad58d
- SHA512 ae2487b042a6a5b04d92f887050fc41083bff9362189dde5878b7814460813072757877624610afe2dfb4d5095855930178292fe9e1b6524d01dc007c99afa91
- SSDEEP 3072:u/REon2xVtSYfn4QwITqsxithDq/n8Xc6cV6JJ399DYeL7HOcU80VA/iOE4ucg9N:upB2xVtSYf4ITqsxitJqEXkg7399DYoY
- TLSH T1B3F322B3C4E643FDED5C058008F56515A4BD6D3302CA4A38FDA8A76D6AC6D0CA98A3DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg.81b1dbdc.png.old
- Size 94KB
- SHA256 135bddf4cb6e42f0616875b1d519753edde1720adf9b13abe2910db9db917655
- MD5 81b1dbdc26501410a580168f457e6205
- SHA1 f35803940af60e1e731375b9d2815cacbff5b766
- SHA512 1ab9a4e5f739adc81ad4a0435431adb423ad15475c06ca96036de61a6e99a14ca4b74397dbfaae83f36e17b6a61a0818d6e42c7e37c4308d7b4ad2193a19f7a2
- SSDEEP 1536:RsLXXBPOTsTAJIbSPJk0gPHpbtaoNv7etS4IWiTQ768uCBSTKH6S80Vhu:RsLXXBOgcJvC0gvpx6HIRTQ768DSWH65
- TLSH T14A93022C9C3CD4B4C2D27B658DE783BE051895AC5B07522D5804B04AFFD9CEDA279BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg.846d4ca3.png.old
- Size 978KB
- SHA256 c365916c4287643bf3c88722adc88dc40ca8e59ea1dd34f4f58b23ac22e6aa63
- MD5 846d4ca3038fddf01b726a2f4d04f806
- SHA1 06b09d8122d02178455f35925d6c3c6274111bc1
- SHA512 a9b5e01b19d45d4227527f08a209f6c0f455e0b9d0f0b505a3ec0bdc6dd22accd0e90d1d90f0a5b18340dfff97c0e8c151f332a9f270a8b4b2d5cf7382210908
- SSDEEP 24576:cT5P6Pwk09yoeDA8DDIZcQXJRFfvENcCEc3Gq/UTK0VXU0UUtZhk49:+lww7yzDXIOQXXuuCFcVXU030o
- TLSH T11E253355A5A9BDB0CE07E6B51581FF468245108FBD7D294F0FB6129C3A082E2C3F3B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg_complete_task.321f45c1.png.old
- Size 14KB
- SHA256 4b1119d8b1934648fcecae567a79c0b90ecbc874512a046664d504f09443bdcc
- MD5 321f45c1db908621755c98db87db9bc2
- SHA1 33fcb9c82716a7181783ef5035f424a23630bdfc
- SHA512 91624217e967ae29c876160662c24cea04681faaa6edc40f6193c9324f1e150f3b907bda217c1aca881322194dd098e6ff0fd4aadf5b2f895979792d027f6f80
- SSDEEP 384:6iIJ1f3YfSJqgCCb0KdCKLVHwAOUtC9NAJi0L+mI:6J9YKc7KtZhOUtC9N00
- TLSH T1EB62C0271EC95BFC92D1082EA5685A1F1139E0457F23EDCB2225E3598409AEF47E9A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg_gradient.2eddd6d2.png.old
- Size 10KB
- SHA256 2b07e1d82a6134ce498bc15ced4b101d2cf141b8b3a55a9412867b2e2a8f5976
- MD5 2eddd6d278303fe831ede70a0450171a
- SHA1 dd4d6cd7cc3603d11c2c69684611ffa2126570fc
- SHA512 21510105f816e389b76bca0f28d6306e1854198097713783176e2fb76d04b578f25f6647af8384d3b21d9c68bc5c0da29a64c270f011fbf3ebf8b37150b902cc
- SSDEEP 192:gkszD+ocAGpv2TLkoEo2jkua1pIXvkJQ1TfLUfAK/fwq/ft0bbyiwTHs9y:gD+ocPvwko5Fua/OkJQlwb37/fs+THoy
- TLSH T1A732BFE618FD3DBEB890C4A4596327D85F12D3BDEAAE58173865C10D42173C0F471BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg_incomplete_task.48285349.png.old
- Size 12KB
- SHA256 8ed80645f298cd85f66bbfd2cccfcf1502cf15f05f9828cde6c63851f6b11996
- MD5 48285349595126daed523546a64a3c22
- SHA1 a287e0358127f9d87981f5f807d97c81a1039cd0
- SHA512 2cf426688bf1972e0d1bff8e12981ba8642b1c65080b67977d96a829e403770d5f61bae242d5923efa66e1b45b81f6c851bf3f9d020340d3421e82b01f3fdd6b
- SSDEEP 192:16Kj7ZH0m1gHKYNY0mUzBtK6vsHpGbFDG3Kzknb29PGVFE1x8Va0vnPr6Gg:wKjVHLgqYfviabC3lb29PwcxqJPr6Gg
- TLSH T1B942BF1776DE17B4B0ABD27866861EF34630FE3EB2873B541276D0268562F853CCC568
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\cdkey1.9fa025f0.png.old
- Size 4KB
- SHA256 e3779114edfee021b64f62be5640ae23482914c09b31b4e1af154cab88c9573c
- MD5 9fa025f054f4e904fd9958de830d03d6
- SHA1 462a39d9d9048279c841904168a862536511972c
- SHA512 f2849d79a7934958251936c6a89fbc35dca525a2b44409c7161ff139c7f02e97844cabe4a32ef981219b1b832243195d1c330bf20c14c4f2514f41fd8923f46b
- SSDEEP 96:lSKs5syHXoLZPD4y8iVlROXHYva8kU2hite/gvDsW:lSOy3UZPD4ypV7OXHYFNPT7sW
- TLSH T11D817C4AEB6C721AC68DCC8A5DEF1B3CAB560924E2E2834453E9B4089A0C1A025820E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\cdkey2.ff9babc0.png.old
- Size 4KB
- SHA256 26e15bf243bf369595c68af14f68d2072ee41ce99cf148ca72ff45aa493bc1f3
- MD5 ff9babc0fa823abc0c2c3a1345db0f5c
- SHA1 8a33dc2e17f1060faa02ab4a6363a471ee8d8aab
- SHA512 3bc5dc3e30261a5ca7d52f7a2e71851b79746032a90b80bba6ed8ce33eaf0bd2dfa5be3a974801d7d76126ce58f96f9c5d8ce5e27611d1590043da9d837f6196
- SSDEEP 96:ASVAypcwqazcIhCyeEO6Bu8bFyvXIwDy79YTBQaIFbnRP5TJ:ASV/cszZbea7w4BxnBZJ
- TLSH T17F818EF8DBFF349F034E005ACA54B6F2E6E7055B2919381ABF731258D8C3580D65920A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\checked.05568521.png.old
- Size 5KB
- SHA256 f1de84602dd322f99138c47603bb6788289fb92b0c471a6c0ab2f34ef012e533
- MD5 055685219fddc93d79f4e4c1abf87721
- SHA1 3b3dc06171ad57dfb80ee1de4c21f751d7973f53
- SHA512 e3a25436c9ac81601abce2a40a1964770ff47a0187fa788644247045e4644c1ed23d93cee71ee165496a3cd972c00cf3045c9840433586311ffd69d5cfb01a39
- SSDEEP 96:OaaZun1CqHMor1nocCqghkCqlEyFTETBQnX6i1tyiW4oR3xK:Rn8qHMorxCqIKNIQXjDW4oR3I
- TLSH T1E1B18EE990295AA2F48607910EDA22E4DDA11DCF602EC91C093D77E85787B25C03F78E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\default-icon.d631fb1f.png.old
- Size 10KB
- SHA256 0e8db8ae2e31b531d54acdef59279b3d3ca16230ebfb41dfbfa7d7d790cc6905
- MD5 d631fb1f9f72cf20e77193470f343c7c
- SHA1 2e9690acdb2a5b52ee1c5266c161c220b266fa6b
- SHA512 e00b5276811089c0f051243c2057bf03b4ff5087392bfeafa933a59b6e3fff4e553ffb36af2aab27bc953c29eee26fb1acc60be6fa811fb992b3325ee7620267
- SSDEEP 192:bxDiJLkgVFUMBd+Gx0g5F/OJM1or9I+bxIULXX6Zrv154rpGndJuIrDgM:bx+L/VFUMBEGegrW5K8xIUz6Zrt5+ylL
- TLSH T19522AE42EE2B06E4F39D58A4C9EC34547F0ABBED792F58DDC4C20E156821B09125EE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\defaultIcon.e78c301e.png.old
- Size 17KB
- SHA256 36400e4a9d7f9fa7715ad4033c9d886e7febba1782077b8abd57cba6e3716427
- MD5 e78c301ecd617da8a85093937423258e
- SHA1 2a0432e05fa7d526016a1077a51718fc80a4d061
- SHA512 f6d00fc24f4364e2936644bd9356be5cc4c614917e297620a82a3fec1041d26e659b367cffc2329024bc7b3b29bdfdfd850966e3b418ac21cf3070340ba1d81b
- SSDEEP 384:Ea5DyWgdcGNFEl/1IlDxJECw9cQUlfu4Jbf1hFHykVmEVvymJrARL:Ea5DyWQcMFEl/1IlDxmTTsBJbjFS2pvA
- TLSH T15082D12A0B54EE32A9389627741D5C6C5109CD8339A938C3173AE4C51A3B5F1E21BEE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\defaultIcon_oversea.a16bcae9.png.old
- Size 4KB
- SHA256 3d8f64b763a0793bcebc22cf79201e85bf4663794ede991d1c5ce0a7edced67c
- MD5 a16bcae99f0a1079b8f0981faf8fc71e
- SHA1 65230e816fd67a442bba3cfa4119dc2a2be3baf7
- SHA512 f0776e1116af5119ee07509ad494cc09ee993558fa2722d3e3e688255c9e70b555cc71653df222f2d3d7e20124b19e42a3df8ca980efc68a61e287e903be7877
- SSDEEP 96:tZArcQKEs95T9yrkc8+O2akau28yP68PC8y4/wrFQubxZ:tZ2S5c4clO27au326uyNiAZ
- TLSH T1B3917EBF44095B95E744287EA09EEADE14BC8BBE5CD0A354788AC04047EDA441DD46FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\description-yyb-logo.c4a4b824.svg.old
- Size 9KB
- SHA256 e5b8aa8eb288ddad07d3de21cf779579677b7704d8f74a3f623f6aa2bdfeef1b
- MD5 c4a4b8243dce83fc395e680dbb1f9e64
- SHA1 a0dab4ee176b6c2525c5c27f1647650447ae244c
- SHA512 12969a9066b91ab6aeca838332a8832a455c3511d0f91a2b29ea6f510cd4b529b0ecff3f622e5b37eb1ca0fc8f4389e050f5248fb423f1272d87d4e2e7f85503
- SSDEEP 192:DlXNxDJLLLKI7stT9VGjs6JCJp3usdr0XoWuALxp17PPkgnKM7XX1:ZXDDJLLLKesx9V0rCv9rXW7xPkgKM7XF
- TLSH T1F21292D0535672E5ED01A7E5C22649703A6B24FF7EA5CB69C749EF30F81ACACC5888C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\dot.7a96dfea.png.old
- Size 6KB
- SHA256 7655a4a2b66c09e7fcec1ca3f544fa19d3e27c9ecfec98f28171504be0cfa77e
- MD5 7a96dfea8357864d3c63cda0a3875862
- SHA1 de89315c7b37223280e6c00383144cc58a74bcb7
- SHA512 c6a01afd7776a1cb000a1f3d3bc4fc895215a8f4b73b290f4a2aef8f16c18316fd35561aaaa32d7d23313cb5d80a7de786944a49c282560ce6973588a2c48b72
- SSDEEP 96:iUNhO5oG14XBaPgCSVX1KJJUAgpgHHQED2+dCWQTcYaoVJ1XfHB+aJM2l0j/U:iUNIPgvVX0JJxn0fWBEJ1vHBBMZU
- TLSH T190D1299BD57DBF41CEF1499040E78A4CBDB43B102274825FE345BAD99EFC483E62918A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\entry-bg.1edd25de.png.old
- Size 53KB
- SHA256 f6f27e5cde105db9b33321a6de48aba13bc809a9285d963a02bdc37f86e1af4c
- MD5 1edd25de5f4defe501f810e0f0eaf685
- SHA1 b8bfaccdcb3221304a680611222a0e11323e6909
- SHA512 61b9473551b4fc2806885cee2dc8c21595b83677b245275916f4dedfa9de8c0201bfa92dcb14dc8c6c6904144b1e40ce9b27a60a6879505f5da9497ffa550e87
- SSDEEP 1536:sviu7BKFBhPkAh1aAEMdbeBZhF80mfXzU:i1W8Y1aAu81fXzU
- TLSH T1A743016536014C15AEA85503EB4633E88CEE5EFC4B236AF645D7E33699C830024F7ADA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gift-loading.ae16e16f.webm.old
- Size 29KB
- SHA256 cc7714c6ef444133d5ac345d54e09ad7eda0ff7ee59797037f75bf45d677c038
- MD5 ae16e16feac614bcf99706ed40d0e734
- SHA1 0f99a0c744d56b6643ac5d774fde1175df85228f
- SHA512 379733e0a71de74a0025ab6b1c3d82ee9a13bc1c914466bbdf0988738c54a323f7df2cc224a703fac1f5e42db3ea7d7c9a8b8ef55606b7d2c5c864208b4f771f
- SSDEEP 384:DIQtDw0yL3282Wr5z+oL6Rwtyv3upApZcPj7EyIdcCifbIP3A:5Dw0yj29cl2M9pk2j4Obn
- TLSH T1F2D21AF67321C546C1829CB5B6434F619D01FB232DAEC30BA7C147EC0FA021AB8A75D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gift_bg_normal.13d51e4a.png.old
- Size 4KB
- SHA256 18c7c0ba6001ee43b464ecb3554d151fdbdb8eb2c4c9a1fa0772fb0d46ef7d57
- MD5 13d51e4a0b8277905e442b1d900df92f
- SHA1 c7a1decaf878126e719f622ca792976df26bc1bc
- SHA512 7c3b875299865a399aee55475186c066eff7857e29c0254e68d3d59bd0fc39041c64571db1055fd21160e6feeb0d949ae32bf50aea3fa6e28c5d52bf410fd5f7
- SSDEEP 96:6nxFfoanIuBK7JpXrQDI6uUXSVgEhmB44IPqAtzr8JNnM23j:6nxFop7TrQElLt4IPJQJNr
- TLSH T11DA17D72BD8BA7756EDAA930E70EA61183C7BE4910F3130765494624008721C7BE7DB2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gift_bg_vip.0b211d75.png.old
- Size 7KB
- SHA256 6d83712a89d88b53ebeae370ce10fc85a8fe08e98639b1bc45ea0251ade548aa
- MD5 0b211d759807a65a50e8f257a0f2420e
- SHA1 0fac404b29629b85b20fcf4fb3fa7ebf658a8c6b
- SHA512 75c7af5ac59989e72285b8e0ddcc375422088ca7e89c4b2067173248bf9235729568003b45f87f3f112e81f81700d91d648e409ff8dbd8eafcd2eb0712abfeac
- SSDEEP 192:6nxFFEbkHZC02Ex5JTNQ5KmG9XL26RA0pCXNeY:6nBQ0NJRQ5Kmy7TqXMY
- TLSH T18DE1AE182E169E338E7137388E521A674B6F2E10593A61EA914EDB315C81A2F837DF35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gp.d1ba99a1.svg.old
- Size 52KB
- SHA256 d62aa275af6642f9f3e544d80321cc97bf9dc92690566a4bd8c22d9e7e149df9
- MD5 d1ba99a111e4dc36190e276f11895a14
- SHA1 e93c50fdef20e18d60d354dca92bcbe468154747
- SHA512 f58554847939749f8e4e20cbee623a16538672575088689800962f47becdb214d18b9bab663a2acd0f03cf3b835b50772cfe279ecf7dbef5765c749361dd02e1
- SSDEEP 768:QuSX4BAi9yt5nJZOijqplPlaj751luIr8pyOi3Bgh08GgWQ:QxX4BAYyFEtvPUjIy1uG8/
- TLSH T16D33F1359BE38D2D1C25D70D93A688033C5AD380401E6CD9BADCEDE1AACD5A8249DD76
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\guideTips.1c0529b0.png.old
- Size 154KB
- SHA256 473aa04a2f6d997093de710493a4487084b6caec0029f1859e8c81adb027198d
- MD5 1c0529b0bd785b4cdba37dda169be707
- SHA1 d9b7fdc7c23a8d278222a1bc4481c4c0a955e7b6
- SHA512 ff929aeab03f0a53afc28ae5bebfb93199d519447ff963ffce4a229954bf411592a57eedaff4b87ce4a18edf3cdd4cfaa4bb5252d3a8dab088ee648785931a30
- SSDEEP 3072:e0NJ1Rcl5OFfLMW2j8eCuH6OQnZGiaqKVy6Y6U/onWNSDJ8xNT:lr1RcnW14RQ89qIZ6okoa7T
- TLSH T1E9F3125EB6F0F478FEC24B3361484E17176A125364E6A46C83077888AC5AC7F0BA597F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\icon_normal.c6e1e1e3.png.old
- Size 7KB
- SHA256 649f982820d9caf4540ffac713cdc8c4d3a31bb12ddc11b6cb075c1052c0de92
- MD5 c6e1e1e314c4f61a520bd0b50376977f
- SHA1 aa5fe9597f8cd0792b18490c45c00a2d026cf9b0
- SHA512 670f434c6b015d8c154c3e8a89ea756cfb02cfbc7b9f483caa9ac574cc89f700d7f0898bd0778f6feb11fc9c444520a49b4ef77e09599dbe5a65ba57a1bc95b4
- SSDEEP 192:GnxFssndysbau5lUSpYOtvSE+GDECZxLWcutowRqHIXCAt4Rq9w0s:GnhUsY8/MdoNHsKg9w0s
- TLSH T1C8F1AE505F1E522963CA3B306A98724046F6047F3C00D23A1666F6EDF63E36B95C2E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\icon_vip.c3df2d09.png.old
- Size 9KB
- SHA256 024e468cd79a2a77e8ab3b9324dac9d1374ce89c703d7c693c675f417e39821d
- MD5 c3df2d090aa216ba942fe0f20c958ee2
- SHA1 6cc19ad7dffdecce1681b1f792f9dfe20ec96d3c
- SHA512 32f36584fc061d87b567b3bad33ff630887f2e14f4e42062936cb222e30addbddd04d01c32ccd4a67c59bd102821394ad91cd1975e479f2a9fe989c4119c6194
- SSDEEP 192:GnxFjZ44IJEhhjm3WN997t/MaKe8enQqEn6zROWFi94WXZDp/3qZC:GnX8J3oXt/MaKexQqhzNFiG613T
- TLSH T16F12AE26128EB3BCFAC3EDF4D9ADF503875B16C34606538E3916240A09636649B6CD3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\liner.9b9d79a5.png.old
- Size 4KB
- SHA256 df1d1e1693f395313fb9e4eb5c46e67d8c6bfe45386eedcc2626f658992883d9
- MD5 9b9d79a585e51be94bcd58e42d655e89
- SHA1 235f1d5f8d8a5bd4f9f2c9f5e3654505d3cd340e
- SHA512 038977f338b521e644d641c1170987679af94977132db476eb986374cd145560c7a2c225c9de99c9d38d713252875fe66525f9e94bc065e77b2b5b69985b04c4
- SSDEEP 96:AS0o7FmWlknNY4UtAHffmHYNGVZGpwr7Etkql3iwsWm5CyfqR/tV/IvqhVi:ASZ7FrkncG/O4MfEPnxn/jIibi
- TLSH T1A1918E0CDF7369326DAEF9440CE465721BB3BF8055521559ECDCCB021E70074CE196CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\loading-oversea.54e4db97.png.old
- Size 18KB
- SHA256 064508290665a3110f129d0127e747ae80c59ba2ba995f33083b08160c76f527
- MD5 54e4db97aa581c72ada118ea8e3116ef
- SHA1 2e77533d7d9936ec05b22d42815bace937b71af8
- SHA512 d4756f629e74c45e6dc0aea84bbefee7c637a5b90ba66c98076aea7199b4e710ef6bf8437a79a98d9a954e37e18b7e30dd82928b01805629c921e2ac0e2b4bdf
- SSDEEP 384:rDnqY+JOaimzXG9UvduXA++Gvw67qQo8ECLEO+jKnBmWJI1Adv58V/f:HqYoim7G9qduQWvwiqYYO+jQI1Adv5uf
- TLSH T1DD82D0C0B968C9B7DA7E8D7ACB41FC703A44802D897B786D1313A21515E7D0B982BBD7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\loading-uptodown.b3670225.png.old
- Size 22KB
- SHA256 6112fce1e01f1f31b841bc1496d1fbdfbc1c2b97be73d15f4c6a0d912e71b70c
- MD5 b36702255ed6173a67d31166dd30e60b
- SHA1 ab832cb4c3a77172b91dd9340003804db3ff7ea0
- SHA512 d595e7387db012d27215b85f64e0f627d7b2f6d3f1c7480dd575d8d98fa3a75c6a4fd3249032abf8546dc6148f42d592ecb3e343df74449b04b0b9ab2704d715
- SSDEEP 384:gW/DObaXGwr8/IqrE7NazfYwWGvBGSYpfzhP0ls4NBKssm+X3fMvX70ZU+3Dc:LwaWISrEhGVWAJkVM64NBNr+XMX7
- TLSH T164A2D1F16352E3BE25768047301684239B5ED3ED5CD27673209EB5268BEE84F0734197
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\loading.60bf42e6.png.old
- Size 19KB
- SHA256 3f5fa7afd7acc5e3d73de74bf0252d2edcd9864b65da7369263d0a0eeefa1bbd
- MD5 60bf42e6f8472eb824f7c215c816f155
- SHA1 16eb6612822f18d720593edaffdb4883a0e62e02
- SHA512 755af12fc80c812973cc14d4cdc3cb79657f8f7c0cec365dc2a0715e0f25c012b07ba86ea783b6a3ef5ca649cc6925ed499bd6ec59a7ec7606026c0296035213
- SSDEEP 384:F+kYZeIPtwgsdDESvME0Wfc3LQQc4t9GznwgtfhLXJ6qe86DXusvas8R36DKyO0r:QkYIIigEPMWU4nwaBEFfXyR3gBNoB2
- TLSH T11A92D118994D0DDA0FEDE15FD84362568E7069DE595030BE2B02CF4B618AF06AE60CBF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-about-edu.f4e07ec5.png.old
- Size 19KB
- SHA256 a61f72bf2c583974d5b8c76376dfc5cfb8f6d0b229565988a884f43a10583e6a
- MD5 f4e07ec53f000456714d80faafe4adf8
- SHA1 52fb187eb1afa18333cc34688d0476e06bc12411
- SHA512 456a78835b2965ac33337789eca67a1eafdff61607f16513cc9945bfa7859a779db53948087232d48d02b67daeed2e12b2fc1c120cc461dfd796c51491dabf95
- SSDEEP 384:1hdUm5WmheJJ0WXnZnatNcuN8iGHF4poOaa8RGNSQg706PxD:1QiWWemka8iGHojg715D
- TLSH T1AB92D0576B7BFEC72A2FC72A05D1AF279937D40879020B038512609DF670E6E90296F9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-edu.5be32200.png.old
- Size 6KB
- SHA256 e80ffeed1a6779335ca28906da1072849b662223c0f776dae3bc9e4ce1de69f9
- MD5 5be3220076a14a19f5fde9d25907356e
- SHA1 bf0e942b43f981b624b12728883ed6d784fe4bd2
- SHA512 de49f581a7c3d88add885132bc03da96e51c2ef7ab65eb43919a7bf1350297f42eaebe9f438fc303bffcb3faa47cfcb73c2ad55e221679763122b65bb904e12f
- SSDEEP 96:uX2iCypCNtML4/x8hspmlz1Mn/3t1h3tmP6fW7539NRIYidIGBWLIg+ufSKnHz:u7MtM3ypd11cP6CbTsdJW0gBfSKnT
- TLSH T1A0D18D12FA4035596B7ACEF44EA8C5B7F27042C491A9F876739810AB4549279B021DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-oversea.1aa2bd26.png.old
- Size 35KB
- SHA256 8bbb0cef40176b111c96ac0bd4a3cac0447a730166c8f6c23bdad60ddb1f9697
- MD5 1aa2bd2627782333c51277d3827b5b22
- SHA1 0e0fbefd4cc5d8a229dc7d029cea1fc0bbc4cfda
- SHA512 ad2af46ec78a6928b9eef4149362749a9a5b473d4cc1f8821f294cc4e264113c423bbb68faf17f9ce01c68c175bfe25deb1e55761994a1c3a386e54cfcd5aeca
- SSDEEP 768:fnYSMA8zXOd9X+IhbAK7jW4Wuv0TR/77KrJKIU0iL8Ranc/SMsCcc:gSMAwOd9nbttmTl77ygIU0iLcT6MsCcc
- TLSH T113F202B354521AA0F2D4F77A8DFD2DEBE9D0C1D01D7510868E2BE075B4E83B9A84067A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-uptodown-simple.b218277c.png
- Size 10KB
- SHA256 b2ad11221f75608e311561fc6fd05993e328a3b86e839eba9a80cfa2b522dbf1
- MD5 b218277c112ffe9b6f1f1fe57c064e25
- SHA1 d007a13ecfc40d5567706234b9b70206f065182e
- SHA512 5650a31d28d8a22925d9e3eff289473258ccea5d18e57489d633a7ec46da3dfa8d6375eaf55e287749c1dae95d7c81e785c40ae1e368eadf2710de3efa61f980
- SSDEEP 192:alK088UvHd0q+pkgKVC0bXnr2VUwhDZBw2vLHaFM7HLEnF8J9qSRWaf4xj57:alK088iHdofKVC0bXnAUwhD1TaFELUS2
- TLSH T1B722B0A92DDEC5434D31CEC0193B69F1E159442B2E54E70AC8716ACF8B23BE00837D8B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo.2d57816e.svg.old
- Size 8KB
- SHA256 e5eafc50188ec4bbefc1da8aaccded19820988cd466eebf5dcb2ea2786ea99ac
- MD5 2d57816ed75556725280ac1daac08338
- SHA1 1755de38f7533603437ba7fe34d78fcbca423208
- SHA512 ce26da1df642d4fcb0bd5e1958fcfea5df74f5cafcd64a560a8bc099819a5051d06eb0168761e4b7cbfe5a0b464b2874d145fc50699461ebd15539d2bed6a30f
- SSDEEP 192:/7ie8WIA+4q2iNTa93C7W8WmeBCSDjqP38FhaXP5Gu0GJdeQa:2gq2iNuJCK8CCbkWXP58GTRa
- TLSH T15502D7E972B993E8D802FFA4DE279870992F3CFC7B9186D5C2A19F2156645DC8D18CC0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo.679094ed.png.old
- Size 6KB
- SHA256 bb4fb444b33c46d797e4124060175b79ae704390359a4829feb847451536b621
- MD5 679094ed9828e0ccd83b45e21fb19e01
- SHA1 319fb461b200fdf75a63160a9edae60581ca6748
- SHA512 c1d7140ab2da5eded8884991fa4fa1c46391795f553b8a0e77accb480fdb1a24264872231a7b74424c3750135c997d37b1252c3a26a8f684c6d7027197013e7a
- SSDEEP 192:ydwsQdL4DgtBEsBctovW5hdXQW27RFZOSK:iy5HtTBcsKQp7XZlK
- TLSH T1E7D18DA368DB0EBAD37C6BFF5577402678EB2D51F40AB46D793B29790D3C10121D2818
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo.a0435d4b.png.old
- Size 901B
- SHA256 3b6f429e5209d988a297e288a74c096688c1c1e71daa6217ddbde80de110b29a
- MD5 a0435d4b592b6bce4203d7a833047a7c
- SHA1 3c71058e8995b04649988741d907d3150ba94daf
- SHA512 1d4bfe2207e3c56fb6b0a098c2394cb52e6fd851c71e950d1469c7bb489dc864a2dca93ef4868dcd80e33183acdb0e1607c23364a87a7386a33bdd18e5c47a86
- TLSH T15211B3F90B3ED4BE0CB90F5C23FA00336867904D45B5B80A360C862D7C19386A9CDEE2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo_oversea.53b6f88b.png.old
- Size 8KB
- SHA256 3bbd6f3853d5556de52e6300ab3cdb839e7f66d2e36a976f1eb7022e6e1e931e
- MD5 53b6f88bd4375ece1b5cc9ad14bb42b8
- SHA1 820381965071a44fd41327c965a8d8788dfe25ce
- SHA512 09e9bc0af6a3c5aa8e01a7673adb7fd894e066cd0443091d7134d43dd5326a68e9b17a06bbf23b7866947ff5710eacbdc093c164eccc68c179fda86104288637
- SSDEEP 192:8JS9tAsRV/9iwHXjT9iADr929m0DqS1gBNvnYzbX/eloQyCYIfav:8EPAsRV/YbL9n1gBtYfXWlnyCYIfk
- TLSH T1B002C122D03F006DB349D6B84D8F1D10D0BC575EBEE16188A5568862FEE5B5F3982D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo_uptodown.1d1ea0f2.png.old
- Size 4KB
- SHA256 6cf731340cd9e8cb99fa1f6144cafb9b5d282ec0ffba5fd81b5b11bda1267c76
- MD5 1d1ea0f2536afe5ca163c6bdebd2901a
- SHA1 fce00df759304e57915c53accc9936ef38b06cc5
- SHA512 abbd3c155d6dc41c3deab2f5264c85486352bfb8c8ce2c4f2bc73bb2015691ab0c15aba4dfc3819930d688871be368117432f0ecb1262fa58be559e08094ccaa
- SSDEEP 96:vPY3ojXE1S5C+ENhSVD3N+pqm9DnaN2WIUmvkQdKnfo6en+:nY3or2S5GNE5Nq2N2UTnR
- TLSH T150A18EFBD47EAD3F9A5247361469188E3A3A2632F11F05E06EB254A106CCC2F0F99215
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\modal-tip.f838f7c7.png.old
- Size 10KB
- SHA256 9bfdce32cf916a2b220564966ad75b72e52a3320bd73ce42dfcda8b91574bf71
- MD5 f838f7c72f1731b4eb1ec991e0c671b1
- SHA1 25b9e6052bb770eb1102c52e584581eea92d1aed
- SHA512 f7c40190174426de9241c5d5484bed575fe3cb73af032b1d4630a09f05b2280d4056feb33bcb13694c1d7f13693e9c0aeeeb0a12f84b2b0f81c618e7b8af18b5
- SSDEEP 192:vu48Ou0TR6WtGFFm+Yz+3F1wsuiYaoPNxxnAPOQNDK94VOLakChr2y:vu48OhTIWt00C3F1wqYXPxAPB0Laj3
- TLSH T1C122B06921E8CFE38E2ECD7E077A416ECD54114CF56CCA48272936C5322AE4AF55F412
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\model_normal.72e6cb29.png.old
- Size 37KB
- SHA256 2db41802f5d6dc78cf35f6c6f75b09cbc9a9f152f01ac9fbc4cb556278b04626
- MD5 72e6cb29365c8f5f83c18040095cd228
- SHA1 8101b1e35664f70126f247934f25ec1cf2075739
- SHA512 a9843525b570ef7b51d28fb5c9624d6d117dd9dc3e88c470d9c0b70b3549890d0151b5a6fc2caccffa188464831ca748ebe309de5da6afacca9b0df39d1b7bae
- SSDEEP 768:E+jRsIZdo8bdzRaZqSBBBBzesKqwhII3XXK0yqajDsxMKAiE6iO4EzjjheoznoRV:jRsIroxwhXbyQmKAbA4ejUEnoef6
- TLSH T1DE03E19B4A3098049AD2E51E603F6AF7C6B46875D9C086D6731A129180DCB11FE627BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\model_vip.44ace2d2.png.old
- Size 100KB
- SHA256 7775e50a8fb564c3d17b8e3276d033d3852e52dfede0ab3fb8291a621ead40c9
- MD5 44ace2d22c6ad86c0913e3d05c9c3f74
- SHA1 08ae15f4c6d299ad765357f8f428ecbcaab0b659
- SHA512 0fe365cfb1f2338078496d77dc958f001003b8cd301574e74969ac5e859e75ba808bd84f7078c7bf59f4245aae20ca7ffcb01d8ccc73f959cead04fbccf4ac54
- SSDEEP 3072:xDZW1U8Fl1LtQUFbNpT1pqO5PJG8y/2nrsTEdxi:xQU8X15Dy3CcV
- TLSH T179A312CE544C1FE9BABF988281E25714959612B401A2B1EA370FF50F15D632CBBB0771
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\newback_video.9862b89c.webm.old
- Size 25KB
- SHA256 f362dd87dde5fe132ea6d91b6a382dba788a8bb1667400b50bbb4bb34966fe8f
- MD5 9862b89c97560057f2e4783159e5e82e
- SHA1 ea2c23d16ef3d6b0345e65e21b49b218d4bee260
- SHA512 1d7fdfd8ba8565eb674367e5aeb8b25bfb4e2268d2cd99405d76f75261ce10ac74a56b70262f59a8dfea22ebd12f2bdf00ea27571ed32c709237123dc3c0bd17
- SSDEEP 768:6ub3jVmi+Rylyn16x2GNMyKkbHu/TxBFXaC:6uTBm1RylOa2WudjXaC
- TLSH T130B2D0A74D1EC218D9CC2C72F0271466800D69FE3343A36182966B9CD8313CBEA3AD77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\noResult.0220faa8.png.old
- Size 168KB
- SHA256 ee91fae5ef6c4d018d01b67a2845e4f2899390f27cb4ed1f38ff700e376beda4
- MD5 0220faa8381e473a302d60eea06babe1
- SHA1 3958ab249d6759942a3dfa1d534055dd7edb5c9e
- SHA512 5ad4cb4d15050e55da1105425748958cdbf215de8544bdd3d2babede79c780d1e8bbc3d32c1f88efcc2f158d254b62fa4b1c38881792ccd9a25e84957e2053f4
- SSDEEP 3072:j3gKioAd6DGcqlaligANwlIhfuEozQaGr6XX5zzSCZXrYclEKNKtzsg3zmRB/:T+V/bhWQpSNxrIK6V3QB/
- TLSH T1EDF3129875819304BD56A693E1275C77F08C893A3FEB1CA24049E41CA3BE7AC42FD4ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\page-common-background.43681e74.svg.old
- Size 5KB
- SHA256 4e8c66811f416c7a237d4ea590be4d6c4a6771754a673b06ca792f50871e59bd
- MD5 43681e74ebd51767600d2fc57637b4f1
- SHA1 ac9ea81eca17aa1499181e2482aefbd6a77f6ec8
- SHA512 29770cb3b47b70e359510a56cbf1f532a0bd8d07f4c1bf000b8087854d34a1c0ac0c33b543f5aec40a2cbce748f505ee690ac20218780e28197400066039039a
- SSDEEP 96:KZRlDdsxUreFLbc7dCY3PT9JSjhmAWRQC6TyIihWdk2k8EKVy/RutuCg9Cu6u3uS:4RYVFShgsQqIe8Dy/RYl/mH9
- TLSH T1E6B124DC950D50AD8305548F9D0AFD87024E43F9D8E4C6EE8353B93A6F1EC90ECB66A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\scrollTopSprites.abc41cc5.png.old
- Size 20KB
- SHA256 129fd569cc6a8116fcaa5f7512a62c3273d362fda3e9b4e9a78b3eea1337a821
- MD5 abc41cc5ed9921bfdcd57b13013fe18f
- SHA1 2e142b09621abb064be80e33a557c9a1384eb1a5
- SHA512 bcf0a774ee32a2a344f94c5d49b75f080c93cd49f5aaa29f4f89c31bc4e5de4f3d550413063ad72b2a6ab20379b36d9e5398d241b96d7fcad8623a80aaae467e
- SSDEEP 384:2wwdcccccccccHlE0LCgojMXdpdf7ovA0BjnCmJ64UVHSgAwb5Bd9p6QQz:2wwAlsgojMXdptf08X4UVHSnw19p2
- TLSH T1FB92BFF3E55B3B9437F00B34281A7A8D19053BB7D1AD738AD40C9ABD9A40D1F1A2E919
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\skeleton.7f8f861c.png.old
- Size 158KB
- SHA256 00a69a3b5ce25a7eedf88bce0619ed8da7607618de85cb7f8f2c132a4a0081bd
- MD5 7f8f861c6c2d91f0f49cb26d0a6cfed7
- SHA1 b7f004cb202222bee586cc449f0c5a4be246bd6f
- SHA512 334d085a2ebb1b2288a75a50f35f0f2bf82cf80ff05d1a61d3a157599373a5dd822d984fde146bb1def856cba4bec55fe585b99d428364dcb85ac2ef55576ef0
- SSDEEP 3072:MHYNUDS/jgqWKPs4Y4Fd26i9XsiIejHUmywfFtnYTH+ioxS:rUeL3JxdRysRm5fABow
- TLSH T119F302F3C29D0C0BF80E244B9F3A3BC7026291235AD5A44159E84ADDEF6DB7575A22C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\slick.eot.old
- Size 2KB
- SHA256 06d80cf01250132fd1068701108453feee68854b750d22c344ffc0de395e1dcb
- MD5 ced611daf7709cc778da928fec876475
- SHA1 2dff0768f4c0a53228761eab917e2c65556042d4
- SHA512 715e81b2e85cd3de2c31001a08a84647e4b222c674aa60e3cbe80032043b2d5cec7b364e8cdc24b7fe29e373ad2ca66c2ee5d22b327adc349d576951104c8f51
- TLSH T1AA41DD0893409E4ED12297349EB7D307BF74A8109B23538BE174ED386CD47D9AD947D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\slick.ttf.old
- Size 1KB
- SHA256 37bc99cfdbbc046193a26396787374d00e7b10d3a758a36045c07bd8886360d2
- MD5 d41f55a78e6f49a5512878df1737e58a
- SHA1 3331eebdd4ba348ef25abe00c39ffbe867d46575
- SHA512 29b8e7b7b2f6a81c1e6ccee7c8b816485c6b7b0831a641ec7204b2cc9486b4258f2819a144b122e57f74c3ac13ae41c2cded4154044e5094048e4e74277a88eb
- TLSH T1C741C908A3409E4AD21287349EB3D3077F70A410AB22438BE174ED38ADD87D96DD47E5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\slick.woff.old
- Size 1KB
- SHA256 26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc
- MD5 b7c9e1e479de3b53f1e4e30ebac2403a
- SHA1 af91c12f0f406a4f801aeb3b398768fe41d8f864
- SHA512 976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911
- TLSH T1CB21A55DBDA5EB19FE9ED376738497E1BB1E849DB2A20246990E2E3DB280040A880655
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\title.09b1666e.svg.old
- Size 8KB
- SHA256 459dfea3665da172a442f5973f40f0fd10061e787634866117cb6d5971ef6d84
- MD5 09b1666e426c82e32b94cb44947d9f6b
- SHA1 1f16641097deeccd6b6b5b63dbf9ecdb3070edae
- SHA512 f039eaa233c30b84cbcaf2710ee794d9f7a1cc7e15a47c1be21031d3033db22a173334df7d29baa3a4f81002934ef598d24af13dda2e07b4d07a15ac08633638
- SSDEEP 192:jX6F8vujhK5iff/g63xK2fKAKZxxKQG1KP5j3KpNK+Kd6qKJUDKKEGKNiKlYfKiY:Sg4UE/v3QPGYjKEhKJKETl
- TLSH T1B80285E5E35483C0AA02A7A4FD23D872E8FF24F4AF96C6D783A49D55B6510B9488CCD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\title.4f8ea11f.png.old
- Size 86KB
- SHA256 458bbd7488a244bf0b843c13a16791924f5e3e6fd88b2d470313dad515732d83
- MD5 4f8ea11f15166ff6eca18aafe067355e
- SHA1 27bd450402187a135aa417e7a76eec29a3aab65c
- SHA512 1d9b84209697e2a6c49125d24e4191264de569e3c9130432bc531e84a884bfecfa74d06899979487aedd751597fb34c4b299f4ff4bf7c560fab53cd22b00c5c1
- SSDEEP 1536:MAqkcekeKE2g3+iUdgxOV2/WMHso2/xB1pj7vAo+XRXgGuRAMz:Wenf2gogM2uWV2/1p3vx+BwXRAMz
- TLSH T1E2830162A5A6D89EE4CF2B329C181FDA73605676CD8C73D259FBA1373644FE03201B24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\toast-loading.de809d29.gif.old
- Size 14KB
- SHA256 b2e70655375661b93b4b76928fdabd83c4bc18f13952419501e8e81e1d70beb4
- MD5 de809d29d49e3c49ec37b45fd6512f21
- SHA1 04b434b12b92f98905e09b33ba5ef53d8b580ffa
- SHA512 2babaf81eb131456f1de28266d2fa07ae09f36a9aae336ea786ca2dad2b84d51affbff6d68531564328dc39dc57e67fd948d4dccd204a8299a77c8ffc99c8cea
- SSDEEP 384:qnC+L086ZxVmxA/2lNiTUoIFN1m8e0QxthjVN1BsoQqi6tQonR1W3PPLRFTi/LO2:0C0NKxQx82lNiTUoIFNk8e0Qxthj/1BJ
- TLSH T1DA624B1D867D5870B6672EFE117E13FA09CD8C6A6299811F1B41B8D32CD86BC200DEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\video-error.e06059f9.png.old
- Size 232KB
- SHA256 bf8349d7095eb91a6be53e12af5fa8527fe847f268eb1ac0a2183df9c44c9edd
- MD5 e06059f9d6e1242728db97927b0cadda
- SHA1 989f3590e32673eb0d33f6bcf032317f798faafe
- SHA512 ab6a936cecd473d2e8bafa61a48efd6123c6cbe16df58f9bd9b174aa159dee0bac15162e9c3dcb33b4a12d8cb96d4a1d73b8a819d233536193a5a1d0eb9c4eb1
- SSDEEP 6144:Kd3BbgKoibOKJZt74XbEuH1lQpOg0jNbgR8QP0gfPU1O/7hWl:O3hgqJZWEuH1pBjNbEffP0l
- TLSH T1E1342399927FB8C3CE1D25381AE0FA81B34A7AFBD45600E37173B91403B6859DD29E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\wx-auth-tip.cb1fbc2f.png.old
- Size 49KB
- SHA256 2fb903a9b875102c10f8af54894a8d778e6c3907ef36df6343c29266dbdbd51a
- MD5 cb1fbc2ff2ec4248ef2eaee3f2a93e4b
- SHA1 92359d458b00f023d99d5663bedfd2a9d6e7d27a
- SHA512 0d520dd6d2ccb3d2d80642bf556f415a627081ceb0b6166f1b8d8dfe3dd17d01139a4c6cfeac84d6955d85100f4e8a824b4f83af5851f05e330e4fac78d285b2
- SSDEEP 768:oaz/G9xNYi3MD6x002N9UDKCugmBMae2NRFmRZs1tpTfHZ3anjRYRXFe2R6C2dg:orxOuMON2NE92/l1tpLHdaIVe2Rz2u
- TLSH T15A33E1C28C6A4983422845B149666196F7C988DAACACD51D6F4E3A330C4F67373078FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AECommonDll.dll
- Size 527KB
- SHA256 74c2288b4ff073c5c947f96b0c79a01c587981a8b9440290a9ff33aa14f06e6d
- MD5 b58c94617df43430d2342a66eaa0a554
- SHA1 f8eb3f773a9851652bd594cde56ec97c4e58c5db
- SHA512 b312043f96b739eb02c4352fbd4b773c52e04964bd04a9eb8e8cbad1fddb00c683c2001224e264a9220e75c41dc6de0163210a3e372220736eba24ef3524e6db
- SSDEEP 6144:PD9KoctIsvxsEGqSwNyFQbZUdqGv279z9xAz6r0RSEQH9Qo0cg16FYScTBdNGz7y:PBwaEFDyvg9xAqlSoIKYScTwWI6t1
- TLSH T1B6B45B10BB409332E6FD81B0A9FDBE6E546DA5340B2D80C7E3849A6E2C746D27F34657
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AndrowsInstaller.exe
- Size 6.4MB
- SHA256 8e91ebe57ad70a58866abdbaa5a406a3b036e519e9c4463e5abebe3986001792
- MD5 0238214ff5f8a40a66d535e1795fed50
- SHA1 4bae3cc8981968d9ef13232ad731407de7af5f0a
- SHA512 07b2061b6955e74e3e77ed23707bb7f619deb1b96bef639ddd8fed5cff470d60e0bd55cbf5312790170ddfb590690651e02709ec9210c8043c3d418f464b8c96
- SSDEEP 98304:EWRiGvRa7rjECx5oZn3+/O0U7uclWSV7Sxyqxrr:EIiG5ajRx8n3EObuear
- TLSH T100669D17B6B441E4D0B7C079C5969A67EBB17C85473097DB0290BA7A2F33BE14E7A320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AowGame.xml
- Size 292KB
- SHA256 9937addc0f2eea66ef456a53b21f93e8ae2732cb83f3e0e08e94e763f0150537
- MD5 5fd0b9f7612369bca18996d8aaa9f62c
- SHA1 316f119b126302e20a9eee501614a7a9feeeb3a1
- SHA512 b1020ce74032d033ecec93edecb987a0d9c266b8b022c397e73965c4b89b7d2f873a96aafe193b77774407a6738b0476ca5a5ed13342ab39d377f57ac3545e83
- SSDEEP 1536:7MJLEom3uAMjyZLghwcMrH38VlKRdkve66V4DUc5FTWj9H/o:7Nom36jUS+fkAVrx9H/o
- TLSH T1CE54A92448826E13417F63359FBEF251CC7B8EF79D5A32A817DEB2F4E8418856162D38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1025\GFStringBundle.xml
- Size 4KB
- SHA256 173e6a9c3f2433f1df223a88b9b594fd6fc7ca0466979b01c3dac64e943ef508
- MD5 95fbc628435390e27f0b3e44588efefa
- SHA1 0b3ec4ddbeb28e3bdd46e1d860b130317ad981cb
- SHA512 0001887f88a4e058ac547a32604265ed2af16e4b5f48ad371ee20b0711556d068c5fafbc9377946118caa37f76a05c26e625bcd2f8291276725061e6a9ef32d9
- SSDEEP 96:C+hfQnh0h3kd8+Jg5gFZQ14Jf0+zeRMxDhv9AGUBd7On:CyfQh40TJg5IMbMxDhv9AGUXE
- TLSH T15791AEE1303F806591DA4A29BAF9311CD5E0BBD903B5E9F9F0434A478D8D1A17B78B61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1025\StringBundle.xml
- Size 6KB
- SHA256 f02b76bcafc50f26b54562e8fdc6a01bb3091abf50942f834aaebd0187250df0
- MD5 051ccdfaed4a5e7a3f08018f308389d0
- SHA1 a2fe00ed6f2d348c781620cb52c6bcaa33fbcc37
- SHA512 3a0fc59fa37ea884369780585da4fe5d8b9a8b4b81172712bca9f1058cca8848a9f3aa9b15d14beed133b7f5bc8d09dffbb4fef6d178765c70b9d8072be0f600
- SSDEEP 192:vsJrlv429F/UXcf1F2EX7UgXHasFAbtdzT3:EJBvKA2EXQgX6sFGH
- TLSH T169E146CA373E507045595908A3FA706AD6B67EEB23A2D7F5F0373517CA1A823A334B50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1028\GFStringBundle.xml
- Size 4KB
- SHA256 43166ec540d7f849f4f275a1e3388012ec6076297626dd1fce64a7832c66ac4e
- MD5 eb31e11bee249db5b31768048321da79
- SHA1 b80990cbb863cf6f37d73c3ffff871502ab11d43
- SHA512 0b9f3586b368637b9dbab39a5c325cf3903d89b0ec05a55223d1f3e240c3785c67779e2481153f8ec4c2c0f34f6083827f9986faefe3b77754df115e51116e12
- SSDEEP 48:cCo3AwDI6pYBF3heHx0HttENAZj+ZKxFqb3L7dSBo5n5BaEYymK7i1KQrIlFI:dmAwDzqBBhmE7vWc+z0Q9gIl+
- TLSH T1F081B8D1387F1056E2AA42A4B9FD725DC19067DD4374C9FCF0030A5B984C1667B3AF82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1028\StringBundle.xml
- Size 5KB
- SHA256 4a24395569b3a6423896062b7eb4482c72d94ea585be0ab9cbc2aacab2ca34cf
- MD5 60c7b23dff92d4f4c0e33f46321f1b30
- SHA1 414b7c5972d6b3f4bb5d3083b512887dc3fc6ccc
- SHA512 5ba5aef84d5bd7ede7bf247efee8addc31563ca181985cb954b00e81a1588ed396bece978e288431100079fa8ad3427a63c67c55918b5538950d01e9f1b7ebd0
- SSDEEP 96:n+vFrl+QHPj7UM9O4gjAmQL8gh23nDfPbLHR3BagPDnqTeGxgVhM:+vFrl+aPv/846q8gh27BVmTLgzM
- TLSH T112B12A8E373E257484A960047BFA201B969876CF7B7197F8F47A314BDA189372770B44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1031\GFStringBundle.xml
- Size 4KB
- SHA256 6c4128b96a1ddaa79f15037c78d1b4c764cfae049b25538ab3c158f72ab803c7
- MD5 94e9c8953d4f752d69bf2959fc000574
- SHA1 d702b4d9591fbcb63a1da27b6e7c6300e333f6b2
- SHA512 9aef93a6abc9d4446b5460256abc830821cf1e646bef204d1deae2cb740abbce3304519477cae359608b6eda24f19ebf733d042396fe9001d74ebdd175b6d517
- SSDEEP 48:cvcVcWfjaMPXhg5ktvfR2F7zEM8ZJIHzXsL/PbBoielwbBbeUNmK06DgrfTn:MOcWWMvhNGrIjb+5iEUN94f7
- TLSH T17181EDD5303F2445E6EA1228BABD711DC1D067CD03B4DAFCE0174A9B9D4C260BB75B91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1031\StringBundle.xml
- Size 6KB
- SHA256 d3712ed0f80fe99b25853553295cf08c31b1efc3baa0e0ca8c87ebcb325f2ea1
- MD5 d2e9d761c1f254b218ba543a22407080
- SHA1 4882d462a0e6781fcc2faf448cafc76f74073672
- SHA512 c409ca63ea5539d5a77efd971c9114951f12831ec2b3e41e742d8ed113fdfb930091f593edf58150276d008710f42cdeb8ebfb10c30bfaf61d7d3a1e690b62fd
- SSDEEP 192:vGrlMlx/IrYlidVoIVfYDuJhSgcEh2j4eHVZjT3:eBMlxwUUVf2UeHL
- TLSH T157D16C9E337E203480A962143BEA241BA7997BDF133183F9F07A711BCA499627374B51
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1033\StringBundle.xml
- Size 5KB
- SHA256 42b4ae064d79b8a024eb70641e011979669cac8e406ad8044f47eac11c4cc2cb
- MD5 90453f8aa43a7f5e17a86296bb56941d
- SHA1 42e40e6f0555bdd1d56c1caa4b5e5a1b5b80bba4
- SHA512 5c76051c99670af0a9ec4ec6222ca26867a2d9ad29e22401b49c7a2ab422de717114855c35403b00b00f619be6bcf8d0470983c027df49c690839c22fe0b88ad
- SSDEEP 96:Il+IUrluTUQr113nelehSgZLhLyhD014T3:Il+IUrlElbe0hSgZ6014T3
- TLSH T164C1F69E333E617580A821557BFE701A8A993ACF233083F8F07B711BDA588676375B41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1034\GFStringBundle.xml
- Size 3KB
- SHA256 620ab83068cd322af0adb2d7ddaec618511d61a6b562039d37aa8ed02b522024
- MD5 4998303fa5231e1917ee2137e7db3c1f
- SHA1 2c01ceb6f418caaacaf1855ec47b1fc5e0332334
- SHA512 92be16a66c3e885d08fc2d882d91f3b636fb25a86fe8856fedde89a1223d03bc348980cde5e6f7916cade941b8c736dca1a4e765b88133cb66a18232fabb5515
- TLSH T1638199D2307F1055E6EA5229BAF8711DC09027CD4378CAF9E043599B8C8C2A57B79F41
- MD5 SHA1 SHA512 TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1034\StringBundle.xml
- Size 5KB
- SHA256 1e33c2cf9e160521a957f3b37da09ff4a9fea91653b9192f9c418330f5a25960
- MD5 2ff254a0f814f17ea7cde2125f08256e
- SHA1 763660feb848d4cfb19f5a0b417cc9e216e3caf6
- SHA512 587cdaf36fcf490496eddcc398306e96c92c4c110c02e4121ee476b7570e302d1a17793bf6473cf9d55558e90dae83489a27883aa1de00595345e01fba16f781
- SSDEEP 96:kRrlVPUQnYXMndpvw3u3OEyivt32o512qMod6dxlTx:kRrlVPlnYcbvweeEr3XMo8dxlTx
- TLSH T1CAC17C9A337E257094A920143BEA651B96D83ACF6374C3F8F07B751BC61C8A66772F40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\Res\webctrl\loading\10.png
- Size 8KB
- SHA256 101ecd4b2fe8076a437a4ce1ed4d5c6f92acd6db0f2bb79db64a40bc8cbabe55
- MD5 74a1a84cf7dcd03933a27e414ea1e354
- SHA1 da891deea2b1b8dd1cd15f97dc41abd6cec7c901
- SHA512 5eed2d9c7b426b681703ca1a26671e5dc984de39e6c71b0fc7f8bf0aa27f2154a907a05ce25fae6da25e53220f8a46d31acb7cfccdce33b79acdf9e1a5e5be69
- SSDEEP 192:gSNkn4Ilu8E68EQSWSip9JgaCCkvHo1dpUhPoZ0Qa34nQYOgnJUQLLHm2:Hun4Il10fSWSiuFvHo1D9Z0kQoJ/LHm2
- TLSH T1AC027C4F6D40AD63A989FE4025FD91E38E730BC2892198282EC6ED079560DE4DD4E9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Config.ini
- Size 7KB
- SHA256 1d02987a9b23cb3c11ad6c8123446efcd8e43c0069a616ff09dfc80426a82861
- MD5 ba50063cd1a85f562d5c6a92f28fc062
- SHA1 41d01f5bc2c800424277dc39ddfb4a70bdbaf00e
- SHA512 2fe0aa3e2b6dd171f25d792991328737a15905d290a3d32c4fbe6bc452976c6cd88e157b98a032f1348e53d26e4eeae9928d430e700849baa95e9c73207079b3
- SSDEEP 48:n0HEEYkZtXuCbHIotvsotvxotvWotvNIotvgOrIotvNIotvzotvWIotvdXIotvIM:0kEYpE/pwmF252lP0
- TLSH T13BE1D4236AE16446E2FBBD28EDB510B31B63744AED3DC68A10D9530DE7E588198333D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\TGVoiceBuddy\I18N\1033\GFStringBundle.xml
- Size 3KB
- SHA256 1568009a2e2b87fd2c80bd1238773e11bb096f7db0165c9cb0124a913dc4bbc2
- MD5 fc8ce34f4a62b9303302c1bca236af54
- SHA1 98e924ac192dcf6d76a5e9db51252ffeec16e183
- SHA512 8be121cdf463dd207d436abb758a07f89f83ee73127428fc868eff927c9b14afacf6685bb1e27b681c50eff1eee6f417c403aa4513960c5268a471388f40bbd0
- TLSH T1ED8196D1303F1056E6EA1229BDBC711DC58066CD0378CAFDF0574A5B9E8C2657BB9B81
- MD5 SHA1 SHA512 TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\TGVoiceBuddy\I18N\1055\GFStringBundle.xml
- Size 4KB
- SHA256 d6e1a0b5b8be7703ba735fa33d6f95b24d798e965809558dad356933a32f0838
- MD5 57b3a79c8d67544148b4a3a931755da1
- SHA1 7f4806fec0ca2cbc41f1344e1717ac4e627b5ab7
- SHA512 b5dfca652097cc27d4539212ea526e2fbd6c3db2b8cd33d07822396f2a3d5358a57d462333e6ed4f668554475f8a478f1c8d438c61f1d6b5179fa6ad87d9831a
- SSDEEP 48:cZa+eDpNWsyS+ZmHx0HttENAZj+ZKxFqb3L7z+BoTpn5BLyY6mKUQUi8KQrWJPm:8x8pkslE7vWK+TDhJ69aWJPm
- TLSH T1E781B5E1387F1496D2A64264BAFD315DC0907ACD0374D9FCF0431A578C8C2A6BB76B82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\TGVoiceBuddy\I18N\config-zh_CN.xml
- Size 268B
- SHA256 581f1f16ec516fcefe8b940bd38f936022616d7c0e0665918981f4769e1dec1d
- MD5 c620fd72f8c0dcdfe1ca656da4321d84
- SHA1 84da1abb07d9225e32f1f1cc8dca5e5713f1e2ec
- SHA512 5677644550cbbaf4c136ae04a3ccfb4f4330dc120b561bc0fbc36bc3d311feb58b5a99cc4dddf106720f8e9f0b9f605add92fac5fbfcb07c17ab5b9b40484f03
- TLSH T1AED02B085859BC12620494F5AF62A5813E23ED9B72BC2AA4E02B2C45D56E42083403C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Tinst.exe
- Size 655KB
- SHA256 e090e0cbf39243c8a4625b6f281530cc55609dbcfcfc249300765acfef1105c6
- MD5 3250be17f84e19a44c9a484f54c760e3
- SHA1 4253ef01c20c63a692065ee9a74d4abe1eea3b74
- SHA512 170a6702a1ad1c034973b76c60f3df3dc72646fbae1e8c1767d6803528c7b68041a76f27494b2347ca3f9bfbe0a92a622bcef0b6db4b3e1ef6f56a6d86172ce8
- SSDEEP 12288:uXQedl87ZBjARYTS13j2ZhjfMof5qzgSVB/aSlHp8GrvXX15tOW3T+GuZEtxmNi:7edlQZ+RuS1Kjjf7xSla8vXl5IWj+Guw
- TLSH T197E43B1072D18035F5B309728EBC8569557CFE220B16EDEB63C8191E5AB99E27E31E33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\WXFace\WX_default_face.png
- Size 1KB
- SHA256 7ca81ae30b2b7e92a40b1fbd30dae53344cac06dfeb633915b6407c8731e4727
- MD5 254e845033d51419f8770acf35c931a2
- SHA1 9e267cf86c136d738eb13ce9ccebca95234cce63
- SHA512 5dccaa119fc1d7c8cf17bde8201313c2cf00784bd85542ae8f02dd2a46cca748e38c9d94a8d56f4ba9d805bf3d16b2882314bea0f37c22b7be6a2443a5ac0af4
- TLSH T13411C4CA2397E4FAC20423A60153792ACE818FE204D5B95ADCE075B874F4CCAD680D42
- MD5 SHA1 SHA512 TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\androws_logo.png
- Size 103KB
- SHA256 88dccc3165b30052117c4fb9a17d8bd08ae014c8d6ec65366331fc078abb54ac
- MD5 022fc5c29d8cf5ec7abe4eae57e5e311
- SHA1 4a44c9a91d636bd6aadaf787f83e215a0c690311
- SHA512 223a4d990462770a365bef618d287e84e097a1ea7cfb50043a063105326604296e63246c8f3ad89e1a611c178526e57d55d422caf8620ddb0ec9381cf031a0a7
- SSDEEP 384:xltfm6JK5EJu/qX2AVZIP0AuF2JEc+wBbNPSrYsi6dM41:5Lu/erQnxRlG
- TLSH T18AA325822C04FD90D49B653CC97E96F619182CC61D0952EB694ABE3BFC7364397C1E72
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\aowgameex2.dat
- Size 1KB
- SHA256 010c86cac8101a693c2f35f798c40162fdc510cf809fa2604d42ef2b929a0062
- MD5 c99bcca61c47433e0df19b4a7668eb56
- SHA1 009882353bad84d3cb5ef15a4bce629cbab731d5
- SHA512 9ea53f7f2aeb5ba9a65482694f8fa0becfed2b3abec1918453cc630122e7a9f089e625a736e5f109119aee2f4dd3a40defc2e8a24cce1619dc66a16f3d3136fb
- TLSH T1D721EA3961C5D4A5F6C312358141EC19158039C0986EF881350700625046F2D8D24F7F
- MD5 SHA1 SHA512 TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-console-l1-1-0.dll
- Size 18KB
- SHA256 f6bdc8ffd172b44f4d169707d9a457aeef619872661229b8629ee4f15eefff0d
- MD5 11e55839fcb3a53bdfed2a27fb7d5e80
- SHA1 e585a1ed88696cd310c12f91ffa27f17f354b4f4
- SHA512 bec9419e35de03cc145b3c974833f73f1a5082d886de4739351b93bb4cc6c0234efd0e35ad845faba83fa600c4a7d5343eaae949a837d00d5528e6db79438ee4
- SSDEEP 192:0IO5WMuXhWWpO5A9YOCAs/nGfe4pBjS7oT13iWYyieHaVWQ4SWJvaqnajnR5fXFy:0BW7hWv57A0GftpBjbxIg6ECl9OIVnO
- TLSH T111822A978EFC8543ED869D7062A8E9837C3DABC34D20545520E9F4ED28D33D1EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-datetime-l1-1-0.dll
- Size 18KB
- SHA256 7d588a5a958e32875d7bd346d1371e6ebfd9d5d2ede47755942badfc9c74e207
- MD5 9f3cf9f22836c32d988d7c7e0a977e1b
- SHA1 1e7bbd6175bdb04826e60de07aa496493c9b3a3b
- SHA512 16c98e6aec67ffe4558c6d3f881301490be5d8a714c1adc6735005613251adb8e1c2cb9b1c0d2504a9a99c61a06b0e30c944ca603fc00fbb18cd20ba1c9bd697
- SSDEEP 384:0bW7hWQ57A0GftpBjWwTFg6HPaol9OIVnt:0MXPiwwgH2T
- TLSH T12D8229928ABC8583FDC75D7062A8EE837C3DA7D75D20805614E9F4E92C837D1EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-debug-l1-1-0.dll
- Size 18KB
- SHA256 92b947f1d6236f86ed7e105cff19e23c13d1968861426511b775905e1d26b47a
- MD5 64978e199a7239d2c911876447a7f05b
- SHA1 0048ce6724db08c64441ce6e573676bc8ae94bf9
- SHA512 9c64211895473ffc7162b56b0b8e732dec54cf03ea9b9b36fe3cc3339c35fc71fc7173d4e146989db399cb1bcb063079378bb6f778f7d2591cd545550038397c
- SSDEEP 384:0XW7hWlwIp68A0GftpBjuy1g6al9OIVnQ:046ib1grC
- TLSH T1BC821AD28ABC9583EDC65D7062E8DA837C3DA7C75E20856504ADF5E81CC33D5EB14A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-errorhandling-l1-1-0.dll
- Size 18KB
- SHA256 e207ffc6fef144e5d393e79de75f8f20d223f1ac33a011eeb822d30fa2031046
- MD5 9d74d89f2679c0c5ddb35a1ef30bd182
- SHA1 22eaed07a6e477a4001f9467b5462cf4cc15cc16
- SHA512 725626e961d32398ea5aa120ac0339deeb493fc02ee7ef4d8e586173fdbf768b5cbb1f16f093ae4ecfee87e661170f8f832777640a353df5d651af4a62a2d819
- SSDEEP 384:01z0W7hWDwIp68A0GftpBj8g65l9OIVnB:01zJIiqgI3
- TLSH T12F8218968ABC8183EDD39D7063A8EE837C3DA7C35D20555500AAF5E92CC33D5EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l1-1-0.dll
- Size 21KB
- SHA256 c0e5d482bd93bf71a73c01d0c1ec0722ea3260eba1f4c87e797bae334b5e9870
- MD5 d826d27c73d9f2420fb39fbe0745c7f0
- SHA1 6e68e239f1a58185c7dad0fcfaac9ecfd2e5726c
- SHA512 c49843eb10e4e54c66e0e194dbd29ceab9094bdfe745b6a858cb03e34d73a6326f54804e5e5505deacc87146cbdfba17a0f02e62e76c685bce0cd1ff41962ff4
- SSDEEP 384:0JPvVX/W7hWLwIp68A0GftpBjXeg6L4l6UzPp:0JPvVXAAi8gHV
- TLSH T144A20983C9B8E287FCCF9E7161A5D9836C3983C70820858616D9E6ED2CE73C6E75855C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l1-2-0.dll
- Size 18KB
- SHA256 3816bbb7dd76d8fc6a7b83a0ed2f61b23dd5fc0843d3308ee077cb725d5c9088
- MD5 ec4f2cb68dcf7e96516eb284003be8bb
- SHA1 fb9237719b5e21b9db176e41bdf125e6e7c01b11
- SHA512 6cbda80c476a9fcf46458cac45229c96dc9df251230531e25088e834cd954db9ff4561e744f76495f9c57a4068b7635c72c6f9ff838436c54142297ee310b236
- SSDEEP 384:0sW7hWGwIp68A0GftpBjk2g6PBl5AVgk8g:0h3iVgSeVWg
- TLSH T1EB8219D28ABC8083FDD76D7063E8DA837D3DA7C71D20402511AAF4E928973D5EB14A6C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l1-2-1.dll
- Size 18KB
- SHA256 7068d2b8aea252294e6b5c3bf3630475d0a91e11877f11a04e8ed1f91196410f
- MD5 a32230b9bfdb8813e94d095222aafa11
- SHA1 04b9d7d2a3f92a0054af2547fb6176385cc9738b
- SHA512 6484c7c7fe574d797c74c285353040dfa364b9a9425cbfa4a4c8bba698176656c78e228a33c9eeae39a97caf2ab192f1f02dba472824f8a5757db5f14c76e2b0
- SSDEEP 192:4WBhWlHGG9YOCAs/nGfe4pBjSjR0rq3kWm78RFAII1RHnhWgN7acWR/XTqnajTEZ:4WBhWIJA0GftpBjtWpERHRN7eDlZAHi+
- TLSH T1DE823B85CABC9583ED836D7023E8DD473D3DABC7292095261169F5E82CC33D5EB24A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l2-1-0.dll
- Size 18KB
- SHA256 096409422ecd1894e4d6289fd2d1c7490bd83daff0c1e3d16c36c78bd477b895
- MD5 b9287eb7bcbfdcec2e8d4198fd266509
- SHA1 1375b6ff6121ec140668881f4a0b02f0c517f6c7
- SHA512 b86348d3f42d0ff465066a14c281088c73ec5e03efacdaabe27a410b054a8a81b438d7e5d030b0d95f53b07783911b8b8200581d4e0b6f1b3cc79f4aae1d67df
- SSDEEP 384:dW7hWkwIp68A0GftpBj/mfg6mTxl6Uz8p:21iBmfgDe
- TLSH T185823BC28ABC9183FDC39D7062A8E9837D3DA7C31D20411515E9F5E82C933D5EB1466D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-handle-l1-1-0.dll
- Size 18KB
- SHA256 a369ef130749bf8cd9f67055179e6f537f200c060af47493d49473912a95021e
- MD5 6a35a52d536e34ba060a19d06b1dac80
- SHA1 0494a9cbf898e5babb6e697fc2de04a128d2fc35
- SHA512 a8aeb58bcf4b314212c2ab5a8fd3c2edeb97e680f774171d4a79390aa23bb62a414aef0ecd5286ffb68b7ed8f6e713ff1892d6d4cc2cbb67de916c6062e762d9
- SSDEEP 384:/W7hW6awIp68A0GftpBjasg67llcEbP7JzYl:AwiAsgQ9lzYl
- TLSH T102823BC2CABC9183FDD7AD7052E8DE837D3D97C71920856614AAF4E918873D0EB10A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-heap-l1-1-0.dll
- Size 18KB
- SHA256 efc9f0e32bce971900ddf66a1a9e68daa3bfb2099a1ba9f24c6ee82da2cbd6e8
- MD5 ee5c2fb7bc23bfd06ff32556cc7c3b4d
- SHA1 5d60ebf016219bbec340d353a4fa541fff596d3f
- SHA512 5d1b8a130c27d8eb63ca0c836bdf63e76afb311de26ed4f25b073bda843ebfa25e136849e3882822257e3783058f30af818a96764d60821a40329cff4e1badac
- SSDEEP 384:0aliW7hW5wIp68A0GftpBjQg6nMl9OIVnZ:0imiOgyCX
- TLSH T179821AC68ABC8583FD976D7062A8DE837C3DA7C74920445504EAF1E92CD37D1EB24A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-interlocked-l1-1-0.dll
- Size 18KB
- SHA256 a272ae4fc60e511f48950b08f106fcdd3bc86831df908ee78d630f1ae921880c
- MD5 48a5e206d92f3102256ec65e8d570ee0
- SHA1 76024fad398dfa4734afce0cc2e5ac117f090ba6
- SHA512 65407da566b571e050c25448be6042e84b0c1c7248422cba00b543af9de425a723b0c7c54c4eb6f534e42b1679a058562d500875ddc4f2b52e6b8e6107b1b575
- SSDEEP 384:FlYsF2W7hWewIp68A0GftpBjjUg6plcEbP7Jh:dbiygelh
- TLSH T1EA823A868ABC9143FDD69D7163E8EA837C3D97C60D20811505EAF4ED28DB7D1EB14A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-libraryloader-l1-1-0.dll
- Size 18KB
- SHA256 0bd03e89a539aaa3100e2f7d9a058964730320e55aee1f85be8fd243eea7017a
- MD5 e33f52e89dfc376eaf7aa655f260ca76
- SHA1 b66e1f934f491544190714966031b6dfd2e349ec
- SHA512 95cb889599801ba7fa225b633d0fe25fdcc8b495dee5eba05b15a6e53a8a3643b5defe1a881236c40f4fa4365d6775ece067dbb526afdf2015f4d1355c9dfc57
- SSDEEP 384:0lvuBL3BGW7hW0wIp68A0GftpBjrg6EqlCXpfAPw:0sBL3BDpiFg1wPw
- TLSH T1EF821AC68ABC9183EDD7AD7092B8DE837D3D97C75920986500EDE5D828D33D1EB10A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-localization-l1-2-0.dll
- Size 20KB
- SHA256 f33e6ac5d3e1c4f1d89564fb6aeeac170486c073b67694380755049dbc48eec1
- MD5 dbb81fcc74c59490008ee59bffff5a6d
- SHA1 edbb465ab3bea3a4df3f05e5a4e816edbe195c3b
- SHA512 2847a73e952bd5f2448264e0bfc8dc1dcd37f8b02d6d6f525ef0cb69c8e634fdcc4637876361b22c53244659039ed305c015435834b61eea15015fed45e9c374
- SSDEEP 384:0IOMw3zdp3bwjGjue9/0jCRrndbNW7hWVwIp68A0GftpBj9g6ylcEbP7J3:0IOMwBprwjGjue9/0jCRrndbmOiPg9l3
- TLSH T185922AD2CABCD247FC8E9D717169D9437C3CA3C60C21995501EAFAA828D33D5EB5062C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-memory-l1-1-0.dll
- Size 18KB
- SHA256 8f3f0fd765a37f48162f0bd00c3047e79b4eda355223bfcbed4d35b51349cfcc
- MD5 0ee9e0c830a7534dcfc9be72146796f9
- SHA1 cecc860b494135482ae693f8e252301073a98578
- SHA512 47161e02f4478464ab45c1e3bf9d244d34613e0e68ebe48511a9a0c4e7f8ddb0c1dfd59707c6968c5d76d5027cd19ef748d1235bf74b976410ea6672a6a4bcaf
- SSDEEP 384:epW7hW0wIp68A0GftpBj0Ng6llcEbP7JnKd:rRi6NgalKd
- TLSH T1A18208858ABC9543E8C66D7063A8DA83BD3D97C70D60842611AEF4D92CD33D5EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-namedpipe-l1-1-0.dll
- Size 18KB
- SHA256 3a20635a223e68418c22858413e8c603aac25723de1cb0f54dd675349ec3213d
- MD5 1557093add722d1c5a97c359bfcd0d77
- SHA1 a8ce995f00a12a81a13d3ef47ce0834178ed69a4
- SHA512 b7acd6882b4d36b52f1e49e4b61ddd025de8503f765b72c94ec5a0d85b6ced513c348f7c4898675728c851a2632ad71c78937cdec9dff994b7b27ed2d85cdddd
- SSDEEP 384:0vW7hWkwIp68A0GftpBjZyg6mHPUPlCXpfAPuH:0w1i2gpPUdPk
- TLSH T154821AD58ABC9183FCDBAD7052E8DA837C3D97C71D20852515AAF5D928833E0EB2462D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-processenvironment-l1-1-0.dll
- Size 19KB
- SHA256 64742ee0729cbe72555247b0165fae03bea7a6b0147869253dae3bb0072173e8
- MD5 2a61e4e21bf255107884b6520af5bbcc
- SHA1 884eb1a835bcde4e7fd98134f0be797229f4239a
- SHA512 d0ca104904352586bbd3da654125b3df9355fe250938a465e8e900d135cec397f1118fdf54829b076df82b8e45fcd7656c2c7aa33ad3c0af5189f7a55e43f498
- SSDEEP 192:0vp5WMuXhWWWO5A9YOCAs/nGfe4pBjS7C8WYyieHaVWQ4SWTqnajGppoCfAP3pnO:0vzW7hWa57A0GftpBjYg6ilCXpfAPZN0
- TLSH T19C921AC68ABC9043FDCBAD7062E8E9937C3D97D71D20845601A9F5E928D33E1E71492E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-processthreads-l1-1-0.dll
- Size 20KB
- SHA256 02839f3b2bdf6adfc89d2f800cc8acda59a40c3e7ce14ef3026f4c72e202297d
- MD5 d5c4b8f7260563f72150a84fe884ee31
- SHA1 dae1185359ed25a4974504cd1ceaacde28d4318e
- SHA512 09ca23413eecf1df94aa36e53fc6fff0f402f21eda2ef79be6aa087818a5bb82ed98db790a2b5cf4ef91a8f70d8e27f56313bc2054a26872d2cad611c472f0b7
- SSDEEP 384:07k1JzNcKSIZW7hWZwIp68A0GftpBj3Ng6g/l5AVgkqZ:0CcKSPqipNg+V8
- TLSH T1FE9209D589BCD193FCCAAC706294EA537D3ED7861925402101A9E5E93DEB3C2EB2852C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-processthreads-l1-1-1.dll
- Size 18KB
- SHA256 bfa24f94ba095174b82d3657f8ecc689eab8ff380c69b1c9a7e311eb70d66386
- MD5 f61b9ecb79cd20fc2e8fce87286cfe43
- SHA1 7a48accbe43e156f886f1f2836f74e1043feec59
- SHA512 42ab62087bbc9fc9c9003ae96ebb9e9bbfa3db4eb74bd6746da035d53d1002015d8482ecb92620ec65c42b8b2b41d9b0a7793e105b0cf8cb6f713a2bc03241db
- SSDEEP 384:0mDfIehW7hW+wIp68A0GftpBjnJTYg67l5AVgk99:0xeKHiVJTYg7VX9
- TLSH T14D821AC28ABC9183EDD76D7063A8EA837C3EA7C75920402501AAF5EC2DD73D1EB1456D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-profile-l1-1-0.dll
- Size 17KB
- SHA256 48dceeea29558966c391cda34e5755386c2e7e252ea0a03d8d1f21e3cb370c5b
- MD5 a472bd416bdc12668523670360650910
- SHA1 831d930ef9917e0dccacd8e7f7fd6f3d90082441
- SHA512 166134e6c3403f4437e10afb514a55677481d3b03f7cfdf17917a0bb6fa1f387feae58d7dd5dfbc375eae66d24f10c3163ba5958c22beb6978c0b778c2883b6f
- SSDEEP 384:03adW7hWDwIp68A0GftpBj8ng6YlcEbP7JsNE:07ciingbln
- TLSH T1988209C6CA7C9143ECD7AD7062E8EE837D3DA7C61960852510AAF4D928C33D5EB1452D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-rtlsupport-l1-1-0.dll
- Size 17KB
- SHA256 41c69b545d931045a280f83b2f5fbe0ea18c35ac42dfca54b661b42fe8e4f982
- MD5 525a156e0ff61306fd44bf7937cacfae
- SHA1 6a9a88317a55c939c0cb9f77256f5c3f961d0562
- SHA512 c99147eba45e9561b7a2802b0c15a2df2ac886ce95a95f2980f8bf4d1dff92a69b94f11cd17383b577303f24295b1b7e52b8c80ad26c0bb08862c726b9cd8841
- SSDEEP 192:fGj5WMuXhWBAO5A9YOCAs/nGfe4pBjSfCyefWYyieHaVWQ4mWXvqnajY1n+htP7G:fGtW7hWF57A0GftpBjrnVg6klcEbP7J4
- TLSH T10C8219C68A7C9083FDD76D7062E8EE937C3DA7C70920856614AAF4E918C33D1EB1092D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-string-l1-1-0.dll
- Size 18KB
- SHA256 52c9b061c4c74eeb70019edde2b690c7e9d9744979a3b718d6687b3a83f00def
- MD5 e57ec98e69961e45cc7a4e0666d26b7d
- SHA1 70462a1d68bf49908fcb7186743a47a1affc5d7d
- SHA512 4a450bcbce0eb3f98f78af07673227a55cdf8e7840fa892196cbb8d0f90551b32731f70f171644f8097fda97d57caa4b7430023671b19881764613231a20cdc9
- SSDEEP 384:cyMvhW7hWMwIp68A0GftpBjT0i0g6hlcEbP7JI:cyMvK5iN6galI
- TLSH T1318219D28ABC9083EDD76D7063E8EA877D3D97C70920916510A9F0E928873D5EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-synch-l1-1-0.dll
- Size 20KB
- SHA256 e7d39dcb79d739ec030e9a4e2165b264a24c400566056e1fda267fdd1a8b36bd
- MD5 99572ae21d1c8afe3d02f1124979e911
- SHA1 5b17addc80b1406a3eaa615f5e37d92e953a0bb7
- SHA512 27ca8149d1f0c625de90a3f4cd4a4930ab0c1362ee10a7131ebfd2a88065c2a34c8ad7fb6d95ce33072146b9309488cbfe122984606d631b99d925e3fc42fcff
- SSDEEP 384:Vdv3V0dfpkXc0vVa/W7hWswIp68A0GftpBjuFceg6nlcEbP7JnH:Vdv3VqpkXc0vVaAVioFjgklH
- TLSH T1C0921986C6F8E683FD9BDD7062D8D9837D3897C20920842610EAF5E92DD33D4EB1492D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-synch-l1-2-0.dll
- Size 18KB
- SHA256 01bb32d692b86ebb39a76893125e0f3aaf957c6e4bd682fb46eac32f6fb65be7
- MD5 e4110aa5c8a32b63de2c85e0bc297c54
- SHA1 6039680f47750cf56d0c9a1768de815a44b83de7
- SHA512 0631ea8224403ca113dff9b17852e92c1fcb2820e4f335b668b12689d2a8f058ba33905692f2fd0f4897f8f766db816747ec95478d854b75a0803d2c899e6d98
- SSDEEP 384:FtZ3IW7hWzwIp68A0GftpBjXHg6GTlcEbP7Ji9a:zoiJHgrlD
- TLSH T11C8229D68ABC9543FCD7AD7063E8DA837C3D97C60D20442114AAF0E928D33D1EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-sysinfo-l1-1-0.dll
- Size 19KB
- SHA256 fb23439a5982e723e8e4ae1a5a35f9bbbfba1e76feb4596668f57093b231da6b
- MD5 a13048905fc64cd2103094c871c6d826
- SHA1 cebb1a74bd5196a3fe174a20543335074a1b7397
- SHA512 e23effc6c17177d07f43955cc8ffa17ed05cc2c0a6430078b37de8536170dc3cb4f8970eba1049b10a789ab5acb423745f9d842dac4d63d5714751186a3f071d
- SSDEEP 384:R9UJW7hWLwIp68A0GftpBjv6fcg6DlCXpfAPc:R9USIiVmcg8Pc
- TLSH T164922A92CABC9143ECD65E7062E8DA837C3D97C71920851A01EAE2E969D33D5E72053D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-timezone-l1-1-0.dll
- Size 18KB
- SHA256 d592b91a087c001f9ea38dc5912a90c78fad3a368879d04fd7e5650ed374c8dc
- MD5 00b548bf3eab7a6debce296ee5e877de
- SHA1 ae18022eb78c192ac3baee32664b9eb011194772
- SHA512 3ba15d9a0f1680c2b182cf04fbbfcb0d4f1b607519c161c590928930ad1b3eba8bd417575a51305b9552f0abf0064c74267336ec09cea709aed9228e4eac799e
- SSDEEP 384:JW7hWUwIp68A0GftpBjtSg60TwlcEbP7Jira:SBibSgJElira
- TLSH T14282F7D68ABC8043ECD76D7063E8EA937D3CA7D30920952514EAF4D928873D5EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-util-l1-1-0.dll
- Size 18KB
- SHA256 4f31b2888ca82bd1ff40d71e2d11500456b99940dd469bfb097fcd304676fa38
- MD5 96d9965ea02eefeadf1f122dfa724449
- SHA1 c6f9eb1babe64b30fb1ff6b74e93db8ac41d1294
- SHA512 4018eae1e00899a5bd392c9b4f25561cf03292011f52387edd77058f49bd1b7456570f0108338088e5711bf5d6ba33aeb2c7bcd5d24d2744b173ff75bba0347b
- SSDEEP 384:oW7hW+AwIp68A0GftpBjR71g608lCXpfAPy:NJ2i71gOPy
- TLSH T114822BD28ABC8083FCC7AD7062E8EE837C3D97C75D20555614E9E5D828933D1EB14A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-conio-l1-1-0.dll
- Size 19KB
- SHA256 905f86530c56c9b453dd8bd9770440de0f6f35aa84b171de747a04d112e35aad
- MD5 032a139ea3cc41f2bb801cd580759a75
- SHA1 4d88e10bcc4e75edc83bca578510d53fc827aa1a
- SHA512 4f574dfe92e90c7d6f162c0b69dd56c96031790abe15e52121c7e44980bbab86914ee06fc153fa5f3a77c4f1c6e4c24d7044507880a80b587872477708506a50
- SSDEEP 384:mjsW7hWNwIp68A0GftpBjTqvg6F599QlCXpfAP+:0h6iQvgm599WP+
- TLSH T1D89218C389FC9547E8979E30A3F8EE83BD3D97C729205465049AF4A828C23E5FB1452C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-convert-l1-1-0.dll
- Size 22KB
- SHA256 e4ccd13d5861e3e28984fc7263d79b580a0bc7bbe0d234ed8f1a69706ef908f3
- MD5 94e386a317faa200aa1dc270ce54e5fd
- SHA1 e352ced285c04378bc3f6af4b30fa69df70b8974
- SHA512 f622d303adecdce6ff88acc779d108556c2fdbe1f4140092d2d637c2fc1aaf651c1798291239e1334aabea702d7d380150922abd4e0122cbfc9c079a64dc0e76
- SSDEEP 384:CuyVW7hWr57A0GftpBjt9g67mlCXpfAP24m:l+PiD9gVPDm
- TLSH T1E8A2F88396E86F52E9CB1B7221FDDBC36D395B83196042B48117E49C38827D1FE66C1E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-environment-l1-1-0.dll
- Size 18KB
- SHA256 2cf24c6aac48261ab04eb616e85dd707417697764f860fc29dd3955dd2c49226
- MD5 e8ccecac4f06679b9d5e77333d216ee0
- SHA1 377363813d0fc18083bdb0456a66efb6598a763a
- SHA512 e37db74e11138639e3bb02270589f977bfd803d450ff098d474ca461fd1fabc8e646a177a2082fd0a901fbe15225c4d352567a561c453f56ad8e0097838b945e
- SSDEEP 192:75WMuXhWWbO5A9YOCAs/nGfe4pBjS7kWYyieHaVWQ4SWGoqnajGppoCfAP3unil:1W7hWF57A0GftpBjHg6DolCXpfAP/
- TLSH T1028209C68ABC9543FDC7AD7062F8EA837C3D97C71920542605AAF5D928D33D1EB10A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-filesystem-l1-1-0.dll
- Size 20KB
- SHA256 fcd8b213e2e9962b84d1eec4296bbefdf4465398a235e118be12c878fdc08c05
- MD5 42153324a982f848d7a49bb7406125c2
- SHA1 f0878690d23ad0c905f0a6ec37e9ea1edb813195
- SHA512 1710b3fd90210dd6603f2104de249704cad9d83acdc0c6b96ac24e20c4913679b1e4ee41bb7812d919ba76cadb36f7bd8210ee127325fd9db6b542cf2d0b7f69
- SSDEEP 384:xhQTq6nWm5CtW7hWV57A0GftpBjaOlg6ElWlCXpfAPUQ:xhQm6nWm5CGUPivlgJMPUQ
- TLSH T1729207874AF8AE43EDD75F7162F8DBC37E3D9BC219214566409AE09839C33C0AB1582D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-heap-l1-1-0.dll
- Size 19KB
- SHA256 242cb185643df586a5f55735e8810b8d2b6b095c78be206e42cdaae7665bb2cf
- MD5 aad41d33906cfdb31681ce8276648481
- SHA1 6367d1990873c5af2f5d05d31ea083fb8b127883
- SHA512 43b2cf09fcb13211f5bcab6942050e03dfb9ce36b727727f7c764df3754f332f04dc81f411e55caeecfa676c43dd1e977f29b0042c485babaaad609c239a84a9
- SSDEEP 384:S1W7hWm57A0GftpBjoN6Dg6VAlCXpfAP/:SudPiaugxP/
- TLSH T1C8921AC789BC9543E9C7AE7062F4EE877D3E97C76D204816009AF5D928833D0EB2592D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-locale-l1-1-0.dll
- Size 18KB
- SHA256 81a7a98e11ae94236f34a82a0d450a1100a9b8e752205248de0037a764b91a07
- MD5 bc75b80a80802146e79c383c94542f06
- SHA1 7da2020a855ea6c003d905551a28af456e7519c2
- SHA512 0b6a8f6809f1a39c90bfe58ef0d05d997be307cb18771ff8fed6539bf7e19ee8cc3bedc44e1c22f34441db9b82a6470d3814fc7465d1ea82fa30d37278a0fe65
- SSDEEP 192:AZ5WMuXhWBgO5A9YOCAs/nGfe4pBjSfYPLIDWYyieHaVWQ4mW9qnajuJB0zOk:8W7hWp57A0GftpBjp4g6Sl6UzOk
- TLSH T11C822BC689BC9543E9C35EB066F8EA837D3EA7C35920855510DBF4E82C833D9EB1452D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-math-l1-1-0.dll
- Size 28KB
- SHA256 4a88f73cae12080b9a637f76f8ab1b8ac29829817ff03ddd611a25b6981ee573
- MD5 1028042a84aefe816280f22a4517dc68
- SHA1 b3437beb0e5a6a062678a0b32cea98f3c5e33580
- SHA512 1da4a2d152943447950ae5de80360741c8a827647d1568c18b026376645f15cc9b5d1915dbdb43278adeac1423b20d6e1c97f6ad67ce724a0d91ec84c4e5250c
- SSDEEP 384:/47isbM4Oe5grykfIgTmLOdW7hWX57A0GftpBjBZdIsg6wi0lCXpfAPOm:A1Mq5grxfInO2OPiIsgffPOm
- TLSH T108D2B58789FCFF63E4CB4B7711F4CBCA6A385B9255A1A5B4C48BA0C834927D07E47909
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-multibyte-l1-1-0.dll
- Size 26KB
- SHA256 e7238f5e38d3991e9d6219255e8cd951d6dd431402c4b4b295a68bd43efa3d48
- MD5 b7e1023ebbf0e5018c58b5488c03a643
- SHA1 b10d3a570d4a44b87480d015aac4d04ef3f0a355
- SHA512 c5536416aeba4b37931e2961a29ea4c8679f6d942289325c9067d46b36797e404c0d8dfd01ce997e89bd42a7f084029d2f2d3cd7485b8cec5e66db50ac1df565
- SSDEEP 384:2y+Kr6aLPmIHJI6/CpG3t2G3t4odXL7dW7hW557A0GftpBjubg6bRlCXpfAPl7:2ZKrZPmIHJI6l2oPiKgKPl7
- TLSH T1CFC2946B8DB82A12E58BDBF3B5F5C7C73A354F8204C07375A16B95883841BE9BD02D19
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-private-l1-1-0.dll
- Size 71KB
- SHA256 f8720e9250c5d5aace6918e1f67f6105f2cd08c0cf55633d2b6b28032d904e9a
- MD5 538057da2c6ec8b927904346bb808792
- SHA1 1156a3d1a653678b9f85aa64ff65bd3c10510b5e
- SHA512 228531381ae55e7c1a24cfe36101325cd0b95899f2a125c72e82043f13248236171ad89a497e5b1d6c19a5febb8d2bd38cb43e81fbd753f3088aaee1c1791b7d
- SSDEEP 1536:4t2b2De5c4bFX2Jy2cvxXWpD9d3334BkZnkPBQbrGk:4w2De5c4bFX2Jy2cvxXWpD9d3334BkZj
- TLSH T10F7329DB89E93F22E58FF7B767FB57C91B253A4408806170E9C7956B34853A9BC03A01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-process-l1-1-0.dll
- Size 19KB
- SHA256 ecc116471ccfa09c599d389d71a574ebed01260b9760021a40665c4d8a22257d
- MD5 4aa747ecc612240d522c23b51a8be7c1
- SHA1 b037be0bc321e9329c7cf0dbf609fdb9b2d82fb4
- SHA512 fb8c0d4f661fe6c8ce6cd04a3c0661a2f0b6058223edbfea811891aedd343d006c22a8524bf8508c2cc396853252477d5cf3c520889650a24d661f4964bce5c9
- SSDEEP 384:rKsW7hWywIp68A0GftpBjv6oEg6fwqtlcEbP7JK:Y/isoEgnq1lK
- TLSH T1DC9209CBCABC9593E9935E3152F8DAC37E3A93C25D10816954AAF0DD28833D5EB2052D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-runtime-l1-1-0.dll
- Size 22KB
- SHA256 24bc147f7c8a2dfcbe9296d83ce75a1f2c02076d8f6e6c81f6032c927ed5888a
- MD5 2f10f2255271b09d58af75f58476899c
- SHA1 ca37f8e4c99fb178e718e99eed286d1ef32b00fc
- SHA512 74d85f5a40bd22eb9c85973bda5e596c3688096dc78fb6984f84ded4757ae82d77894c4cae0f24de77d211bbd869f9a4120a104d7c2ed161b4bb7b8568cf5103
- SSDEEP 192:R0CjfhrpIhhf4AN5/jip5WMuXhWBjO5A9YOCAs/nGfe4pBjSfUFWYyieHaVWQ4mn:Rb7hrKYW7hWs57A0GftpBjB/g6Zl6UzJ
- TLSH T1E0A209878AFC6E53E9875F3222F8DBC72E39A3C2191091758497E0D828C37C1FE1611A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-stdio-l1-1-0.dll
- Size 24KB
- SHA256 5a3d9a0a2c1f9b14cb52d9cce92b761ec1fe0460ea7d994179c96648455ead84
- MD5 65fe48962755451a1a5bab26e6fd978d
- SHA1 d1322c477fe4ff61eedf9433b8deddee27f5adb9
- SHA512 940269af2c3a8b5b43ca936df1bb5338ae5166f04c34a163b5938895d19bdd7eadc156add1b96b5508e06088419a7d8f466f40bf01e64b4c547fbc1b20328ed7
- SSDEEP 384:DUFVhzW7hWhwIp68A0GftpBjq+G+g6eVZl6Uz0yE:gmWinG+g3VpQj
- TLSH T1E0B2F68785FC6E42E6874B7366F9FBD76A398383291071798047E8A835C63D9BE0351C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-string-l1-1-0.dll
- Size 24KB
- SHA256 d51dfd972e6df5e8185dce0b4eb26dccb0527c5f1c63bc081677335f69b92b67
- MD5 a3eccd7f2f2c45d1553055593278645a
- SHA1 23cd6aed1b198ca515d7adb213efae780fbf0537
- SHA512 1dbf60f5df95e72b98b72faccb52f83585bc0bc5b1f65c259e8568d812461b738bb37c96e72e2f272370788cc7dcd7a8e5a698d9fb2c773ce0e17978c19ef858
- SSDEEP 768:B6S5yguNvZ5VQgx3SbwA71IkFbZPirgpVo:Bl5yguNvZ5VQgx3SbwA71IsZbpK
- TLSH T1A2B2E7834AF82F42D9CB5BB265F9CBC32D398B8615101275D067E4DC38827E2BE6790D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-time-l1-1-0.dll
- Size 20KB
- SHA256 d5e2fb8495bbbfb66b2612cd5179c1a5f4746dcdd043ecd474363ffe4a8deb4f
- MD5 c8f1a3b19e5103751202010805bce5c9
- SHA1 179cf585ce939d05f9610d4b684e4dda6f452f76
- SHA512 879fbe66e5440cbe01bd1814a36345fce6454196c8457969d2ee9e93b749df91d0d95b1da1d368063b7ef2a3ed538449b456eb2c7507a27de60105a0d37dcb71
- SSDEEP 384:zDW7hWiwIp68A0GftpBjcp+g69xlcEbP7JRR:Avihg+hl3
- TLSH T19292D58389A8AA47EDC75F7122FCDBDB7F3957C20A906165406AE4D839873C4FE1252C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-utility-l1-1-0.dll
- Size 18KB
- SHA256 4eca5b9e5be5750b0bc03fd74b6d5e351cb6d70fd63d5f740a1a122f906390e0
- MD5 e0aeba2d9d9ae584d6c1aa0f5929526b
- SHA1 3f97b977d8877398d350b373fd441867167bd2ba
- SHA512 cfa02a7afa052c5149a741500063f110462d272af417c33bedeac6ad3af424b181144c8045adc04a44a54dffca4639ae3c135f23d64bcfb66f7d3aa980143799
- SSDEEP 192:ZfHQdud5WMuXhWBPO5A9YOCAs/nGfe4pBjSfEWLlhWYyieHaVWQ4mWnqnajuJB08:ZfRW7hWY57A0GftpBjul7g6wl6Uz4
- TLSH T1558209978EBC9543EAC75E70A3E8EA837D3D97C31D20865504AAF4E928837D1FB1052D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\uires\window\logo-oversea.png
- Size 2KB
- SHA256 b45cd60fb9b2659f6b177c63abd3a4eb663912fb9531c97f1942baa36bb2d298
- MD5 1af13060d206bd8c2d07035be2c88ce7
- SHA1 def54fe95fb4109f41c307d809e27311362e93fa
- SHA512 0bddcc1edf3b87d50235af479297ab16d0f9d7d5bde4d5503c5b4607961f416ec4ca67d24f9f4f454c24152a70673045df66351b2590c11f4d93794c159cb3a7
- TLSH T17F51845EFD16DC02CE0CB9496AFC621357E74FC04B80A488ADDA892309208FADD9DDC7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\market_page_17804139540x5d28\module\lib-halo-downloader.32279619.js.LICENSE.txt
- Size 832B
- SHA256 86701d478c8b5cd2981db0c9715b0c27b1d76e1b0bd10dd7447a35b90cb14728
- MD5 b23d7a495722fec387cea56b861b816c
- SHA1 21d9593760be18f0097dadde05824aa52851a086
- SHA512 08f2397203a34ceeabdb9581b07dd65e28e3775b4ae13010bee3d4ca8963a996da93018e92d8713e7a4d8f83d573600678677da916f68d1cf9819284c04d99cb
- TLSH T12201C09E70A1BED5A5A5AFA53CA13DC82189B597B802A70424A8F288DB7F55FD07E000
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\market_page_17804139540x5d28\module\lib-halo-utils.0dbcc55e.js.LICENSE.txt
- Size 449B
- SHA256 90fdd6754a69086abae5c1d02782ddc4c82d179682b2b66c51a21e4c1edce6a7
- MD5 bd995e27eac3745ca6d4ad4022fcb917
- SHA1 469bf7519e238d7987af6a804a6857f91b9e026f
- SHA512 ef9e1848ed9b58fa6f9bfa711254488dd8c04d76eaf00b6e49c89869a4cce2fabbe9057a72326d166d9fb73946e8b28a6aeebd12395c154aeaabc376a0cd8320
- TLSH T1D6F027CB99D82CD34B404DF2CA07A9CAE207505E96073966A42E83C8AE01F376889341
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\market_page_17804139540x5d28\static\media\BigRuixian.6a70385c.TTF
- Size 1.2MB
- SHA256 0f0c2737c40933521a713478d462b1a89e8282791a3cf80408cdd96ab401c668
- MD5 6a70385c7e37b3252ad4665a9aa61bb6
- SHA1 6e35a430fb2440a87976d442d13a20c01cadca73
- SHA512 22aa7349e8a0b88dd483c3365deff2492c6ef7b3178376da883d46de999b73245d514d2081f3cc0db07ba662064acee5795d260d9ebf17704cacb45b09d1450d
- SSDEEP 24576:PoZ+W0teHpR9TBa7pYbhmvEIoZZmWePDvBl5b6dt+l1:u+PIRNMEVIMIDvBl5b6dwl1
- TLSH T114553B43C65EBB3D8F33E93D2562364DE14A89285790C7F68B8F2D76887B4494C48CE6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Tencent\TxGameAssistant\TGBDownloader\dr.dll
- Size 74KB
- SHA256 5904a7e4d97eeac939662c3638a0e145f64ff3dd0198f895c4bf0337595c6a67
- MD5 2814acbd607ba47bdbcdf6ac3076ee95
- SHA1 50ab892071bed2bb2365ca1d4bf5594e71c6b13b
- SHA512 34c73014ffc8d38d6dd29f4f84c8f4f9ea971bc131f665f65b277f453504d5efc2d483a792cdea610c5e0544bf3997b132dcdbe37224912c5234c15cdb89d498
- SSDEEP 768:2fqePMS8NxKDSYkK7U0H8zAqaMRmnJD+7OX4ubjJJYIn8n28zaTQ8PfcQWZcRZip:sPMS8NxpYZCrFiZbmnzIQ+cQtfiqDVQ
- TLSH T15A737C472A1540F2E2C66231B6A5BB3196F5ED610F5A1683C3EF82DC2FB6787E211207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Tencent\MobileGamePC\WebkitCache\AppMarket4\Session Storage\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Tencent\MobileGamePC\WebkitCache\AppMarket4\Session Storage\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512