Analysis

  • user interaction
    yes
  • max time kernel
    101s
  • max time network
    103s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 15:24

General

  • Target
    GLP_installer_900223150_market.exe
  • Size 3.6MB
  • Sample260602-stadhagy9w
  • SHA256 bb68113cfaba1def162b8a0df4b1d41b83ea34ce4fd5b23e0a0b75b259b62bfc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Renames multiple (91) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Modifies Windows Firewall 2 TTPs 6 IoCs
  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 4 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 18 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 20 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 2 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 7 IoCs
  • Gathers system information 1 TTPs 1 IoCs

    Runs systeminfo.exe.

  • Modifies data under HKEY_USERS 5 IoCs
  • Modifies registry class 27 IoCs
  • Modifies system certificate store 2 TTPs 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 40 IoCs
  • Suspicious use of AdjustPrivilegeToken 45 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GLP_installer_900223150_market.exe
    "C:\Users\Admin\AppData\Local\Temp\GLP_installer_900223150_market.exe"
    1⤵
    • Loads dropped DLL
    • Enumerates connected drives
    • Writes to the Master Boot Record (MBR)
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4436
    • C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Market.exe
      "C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Market.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:3916
    • C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Tinst.exe
      "C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Tinst.exe"
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4500
      • C:\Windows\SysWOW64\Netsh.exe
        "C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="AppMarket" dir=in program="c:\program files\txgameassistant\appmarket\AppMarket.exe" action=allow
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:1284
      • C:\Windows\SysWOW64\Netsh.exe
        "C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="TInst" dir=in program="c:\program files\txgameassistant\appmarket\TInst.exe" action=allow
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:492
      • C:\Windows\SysWOW64\Netsh.exe
        "C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="bugreport" dir=in program="c:\program files\txgameassistant\appmarket\bugreport.exe" action=allow
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:3128
      • C:\Windows\SysWOW64\Netsh.exe
        "C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="QQExternal" dir=in program="c:\program files\txgameassistant\appmarket\QQExternal.exe" action=allow
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:2460
      • C:\Windows\SysWOW64\Netsh.exe
        "C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="GameDownload" dir=in program="c:\program files\txgameassistant\appmarket\GameDownload.exe" action=allow
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:4536
      • C:\Windows\SysWOW64\Netsh.exe
        "C:\Windows\system32\Netsh.exe" advfirewall firewall add rule name="TUpdate" dir=in program="c:\program files\txgameassistant\appmarket\GF186\TUpdate.exe" action=allow
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:4016
    • C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe
      "C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe" -apksupplyid 900223150 -from TGBDownloader
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Enumerates connected drives
      • Writes to the Master Boot Record (MBR)
      • System Location Discovery: System Language Discovery
      • Checks SCSI registry key(s)
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3976
      • C:\Program Files\TxGameAssistant\AppMarket\PcyybAssistant.exe
        "C:\Program Files\TxGameAssistant\AppMarket\PcyybAssistant.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Writes to the Master Boot Record (MBR)
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3340
        • C:\Windows\SysWOW64\Wbem\wmic.exe
          wmic path Win32_ComputerSystem get HypervisorPresent
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of AdjustPrivilegeToken
          PID:1608
      • C:\Program Files\TxGameAssistant\AppMarket\wmpf_installer.exe
        wmpf_installer.exe --log-level=0 --product-id=1004 --wmpf-sdk-version=50056 --mojo-platform-channel-handle=1860
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:4724
      • C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe
        "C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe" --conf-path="C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.cfg" --daemon --log="C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.log" --rpc-secret=0dfd4687154ba3c8b8d5a9c61a681d89
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1724
      • C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe
        "C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=gpu-process --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --no-sandbox --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --lang=en-US --gpu-preferences=KAAAAAAAAADgAAAgAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --service-request-channel-token=4277273424723731912 --mojo-platform-channel-handle=2844 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        PID:3156
      • C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe
        "C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=utility --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --lang=en-US --service-sandbox-type=network --no-sandbox --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --lang=en-US --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --service-request-channel-token=11312284299468939597 --mojo-platform-channel-handle=3468 /prefetch:8
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        PID:3576
      • C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe
        "C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --force-device-scale-factor=1.00 --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --lang=en-US --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --disable-pdf-extension=1 --ppapi-flash-path="PepperFlash\pepflashplayer.dll" --ppapi-flash-version=18.0.0.209 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=4791641779397553832 --renderer-client-id=3 --mojo-platform-channel-handle=3516 /prefetch:1
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:4976
      • C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe
        "C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --force-device-scale-factor=1.00 --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --field-trial-handle=2320,14129371306598568896,8345025455311058682,131072 --disable-features=OutOfBlinkCors --disable-gpu-compositing --lang=en-US --log-file="C:\Program Files\TxGameAssistant\AppMarket\debug.log" --log-severity=disable --user-agent="Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Tencent AppMarket/3.71.3146.81" --disable-pdf-extension=1 --ppapi-flash-path="PepperFlash\pepflashplayer.dll" --ppapi-flash-version=18.0.0.209 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=7069588903592727936 --renderer-client-id=5 --mojo-platform-channel-handle=3984 /prefetch:1
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:196
      • C:\Windows\SysWOW64\systeminfo.exe
        systeminfo
        3⤵
        • System Location Discovery: System Language Discovery
        • Gathers system information
        PID:1568
  • C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
    "C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Enumerates connected drives
    • Writes to the Master Boot Record (MBR)
    • Drops file in System32 directory
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    PID:4928

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AowGame.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AowGame.xml
        • Size 326KB
        • SHA256 93cc516b94ae232ef42d714ddc362bfcd34ef42359b024bb6e61902d5dfac0c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppMarket.exe

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe
        • Size 6.4MB
        • SHA256 6068aea2fcf490fe6e2125a1eb50b7059424b6d3da5394bf4ab3245ba2f25cf3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StringState.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\StringState.xml
        • Size 183B
        • SHA256 aee0cacdf2eb6d8f5a0168a0756f1834c21632cb5238fcb366763e93b7c5d011
        • MD5 SHA1 SHA512 TLSH

        config-en.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-en.xml
        • Size 268B
        • SHA256 e97f7ada887eb751c6e6927ab57b04f5121fd7c14eb266c45954abb72833327c
        • MD5 SHA1 SHA512 TLSH

        config-id.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-id.xml
        • Size 269B
        • SHA256 76994bea62ad8c19e2ac0c193d05f87b2acfd7a4387c5adfbc24cd5e2d3da29c
        • MD5 SHA1 SHA512 TLSH

        config-ko.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-ko.xml
        • Size 269B
        • SHA256 17e9689057e15cf5a4e51a4db9cf97524a07f3ce7acc2c9c1ced8dfab6fdc048
        • MD5 SHA1 SHA512 TLSH

        config-pt.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-pt.xml
        • Size 269B
        • SHA256 a418aac47f73420d812b9947229e9bab36b991629a3dd9a5f6c4649e8b02c955
        • MD5 SHA1 SHA512 TLSH

        config-ru.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-ru.xml
        • Size 269B
        • SHA256 f15fd6d344c1f926c818b18104a463e345c74a17dfda688c4d6af3a8ce8eafba
        • MD5 SHA1 SHA512 TLSH

        config-th.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-th.xml
        • Size 269B
        • SHA256 a6d47646219f993a45eb8cb1b33625cfb357b1c2ecb69ec165fc6d62b91949ad
        • MD5 SHA1 SHA512 TLSH

        config-tr.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-tr.xml
        • Size 269B
        • SHA256 7f28d495375253347d1d947fb12a9d25082309b8288dd7af058f4cddb427245e
        • MD5 SHA1 SHA512 TLSH

        config-vi.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\I18N\config-vi.xml
        • Size 269B
        • SHA256 6c071064476b4bed118072014abf8075046dd5fc2afd9b0c9527b3c2722bfc8b
        • MD5 SHA1 SHA512 TLSH

        feedback_down.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\AERequire\feedback_down.png
        • Size 123B
        • SHA256 766afb00a71210fd8a97331dc936aeb3bf5832da4011e0faf3de111479618604
        • MD5 SHA1 SHA512 TLSH

        close_down.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\close_down.png
        • Size 135B
        • SHA256 3ad5369cf8b5e7c371c161dc222da9339da443d6f0d19192a75654a540211800
        • MD5 SHA1 SHA512 TLSH

        close_hover.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\close_hover.png
        • Size 134B
        • SHA256 a04f3175fd7d6d26bf58c0dde03b6f6e8c9edee5c0eebf6aedaafde6a6b968aa
        • MD5 SHA1 SHA512 TLSH

        close_normal.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\close_normal.png
        • Size 135B
        • SHA256 bb7e6b43a8d86aee131a31d84ebf71f592b89f45f9ec26b194406f90510c54c9
        • MD5 SHA1 SHA512 TLSH

        max_down.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\max_down.png
        • Size 111B
        • SHA256 28d44de3a3ed3039324730883b5ee7f36ecd77c351f0dd470f0addd3c90d7c46
        • MD5 SHA1 SHA512 TLSH

        max_hover.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\max_hover.png
        • Size 110B
        • SHA256 8862c6c91917a10615bd4ef11d1afcdc4f5c03cd498b15be1f00c6c7fd9e704d
        • MD5 SHA1 SHA512 TLSH

        max_normal.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\max_normal.png
        • Size 111B
        • SHA256 495df5662da43a916eef4451f046526697b518c796d529d7a4afa0c4f62adf0b
        • MD5 SHA1 SHA512 TLSH

        min_down.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\min_down.png
        • Size 110B
        • SHA256 0651b1f15c33c959064acac84021bb92739dd0c36d59a4d37cd6e738257255b2
        • MD5 SHA1 SHA512 TLSH

        min_hover.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\min_hover.png
        • Size 109B
        • SHA256 4909bf144b1e5641ca945ed9046f46d5c6eb3d01f43581a575df826399e6097d
        • MD5 SHA1 SHA512 TLSH

        min_normal.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\min_normal.png
        • Size 110B
        • SHA256 bbd72095f035e68f319040b538d7af46e23c7222d5ecaba6404a1c96d647cd71
        • MD5 SHA1 SHA512 TLSH

        retry_down.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Res\button\retry_down.png
        • Size 112B
        • SHA256 0b86dd63dc5087e6e5eaee29e08f32f866586f608263fb900262b065c28043fb
        • MD5 SHA1 SHA512 TLSH

        TBSCoreConfig.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TBSCoreConfig.xml
        • Size 260B
        • SHA256 605161e8a540fc3c50381b7f25baad5bb5ea4a6ebd3efef31c41c4b8075615cd
        • MD5 SHA1 SHA512 TLSH

        Theme.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\Theme.xml
        • Size 9KB
        • SHA256 1690526c13ed1ba0a8a3b811eb6358a09e145a2161a7fa0028c346388f866184
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BasicTypeDef.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TypeDef\BasicTypeDef.xml
        • Size 965B
        • SHA256 2d34f1afda13d8eebb8fc1232f280214b27fa77196dd29a72bf175c44c5b3a1c
        • MD5 SHA1 SHA512 TLSH

        ExtraTypeDef.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TypeDef\ExtraTypeDef.xml
        • Size 83KB
        • SHA256 ba32bf96a3ba1ddd301399160398319378386e229937b7fea8c2daf2fc3e01e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        TBSCoreTypeDef.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\TypeDef\TBSCoreTypeDef.xml
        • Size 380B
        • SHA256 0954e5e36d0f11e6cd6088b421844b21405c569565dfcdc1431ec849279ad56a
        • MD5 SHA1 SHA512 TLSH

        common.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\common.xml
        • Size 9KB
        • SHA256 175760389e292e7bbdc8ba697551dee44d9e3727e54df1d50a6bbbb3db6d503c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gf-config.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\AppMarket\gf-config.xml
        • Size 450B
        • SHA256 9ce36b7d7b85d4c1b23b773cf78eb7c688ea3f0abe00a2bdbec30b6f9994b384
        • MD5 SHA1 SHA512 TLSH

        TUninstall.exe

        • Path C:\Program Files\TxGameAssistant\AppMarket\GF186\TUninstall.exe
        • Size 4.8MB
        • SHA256 a53ab0e94c7c763b1dee2761d4fd66b38fc13c5a2b5906797146446e22d09866
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QMEmulatorService.exe

        • Path C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
        • Size 236KB
        • SHA256 2a49f8f46f90097824952e58ed65cb4c76957d00e86a9c5d329e9e74bef1cf6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StringBundle.xml

        • Path C:\Program Files\TxGameAssistant\AppMarket\TGVoiceBuddy\I18N\1028\StringBundle.xml
        • Size 1KB
        • SHA256 d1cf9e7d5c67d1fd4c12fb317813f4c4ad1d4a94d992d3758b0ca30d7ee513d2
        • MD5 SHA1 SHA512 TLSH

        liveplayer.html.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\liveplayer.html.old
        • Size 3KB
        • SHA256 28d9fb50468ceb55f01cd44153aec920038589349e86097a9e5f61d534fe77fc
        • MD5 SHA1 SHA512 TLSH

        lib-syzs-login-sdk-v2.ac53bf12.js.LICENSE.txt

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\module\lib-syzs-login-sdk-v2.ac53bf12.js.LICENSE.txt
        • Size 808B
        • SHA256 0d8f66cd4afb566cb5b7e1540c68f43b939d3eba12ace290f18abc4f4cb53ed0
        • MD5 SHA1 SHA512 TLSH

        recognizationMobileError.html

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\recognizationMobileError.html
        • Size 80KB
        • SHA256 4f29fdcc65a006e9de11ecf94a82288ca73850271ca908214cbf1a167fe9127e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        playzy-tip.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\img\playzy-tip.png.old
        • Size 16KB
        • SHA256 266d447260366b3952638a4b579096bafcd4ce6b1eb36ea87de4040c595f42bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jquery-3.6.0.min.js.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\libs\jquery-3.6.0.min.js.old
        • Size 159KB
        • SHA256 1f20afe2298cb15bcefafbcaa7ac8f5d7253b7e47ea52601f6f4ca3ea62fbb3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wx_sdk.js.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\libs\wx_sdk.js.old
        • Size 3KB
        • SHA256 a42306a21a0faa17b36e78a4f25503cf58f161082db4babc587ac2d15f8f7742
        • MD5 SHA1 SHA512 TLSH

        wxsdk.MD.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\libs\wxsdk.MD.old
        • Size 302B
        • SHA256 4c8c5aa8d5fcd32db82cf6caf18ca52c144b5b559298ec6e4fd527c12d7fd9ec
        • MD5 SHA1 SHA512 TLSH

        Close.224ea384.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\Close.224ea384.png.old
        • Size 441B
        • SHA256 f535ecab5f2bf5d797da60caee9438d097389f91c49fbf2a8414f97fc326b6dd
        • MD5 SHA1 SHA512 TLSH

        Close_hover.374e4045.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\Close_hover.374e4045.png.old
        • Size 389B
        • SHA256 92164990579dd866f0882e7679f78df8eaf3006346ae7cb3ae8fe8e4ac86b054
        • MD5 SHA1 SHA512 TLSH

        DINMedium.ttf.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\DINMedium.ttf.old
        • Size 43KB
        • SHA256 39cddb576e0e62f6b9f9553dac9be7a5d41565907546f3c30e5af49cc62ad832
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FontsFree-Net-D-DINCondensed-Bold.ttf.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\FontsFree-Net-D-DINCondensed-Bold.ttf.old
        • Size 38KB
        • SHA256 954d998202722eadeb5d1174457d25723f2add665f0448d2f23e8c42fe344002
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GP.cad24f18.svg.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\GP.cad24f18.svg.old
        • Size 18KB
        • SHA256 c21264af4db3b76c28b6f74d6ff10f6d69342faf0033f18911fb6a85e1e240f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Logo.339f6000.svg.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\Logo.339f6000.svg.old
        • Size 8KB
        • SHA256 e3e59e4b32af5cda6073e7c39b77ae1e0fc0405fba4323813644cb5ed2f5a0af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SourceHanSansCN-Normal.ttf.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\SourceHanSansCN-Normal.ttf.old
        • Size 7.8MB
        • SHA256 cd1c5b9c6740c570ab7289402d1af2f39437c5e095e83baf81c74d80e56a75ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        TENGXZTB.ttf.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\TENGXZTB.ttf.old
        • Size 2KB
        • SHA256 9e8b81fce344100ba628b33aaaf4e797998211e770e2e82985cbe2f5673538d6
        • MD5 SHA1 SHA512 TLSH

        WelfareIcon.bb215fa8.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\WelfareIcon.bb215fa8.png.old
        • Size 16KB
        • SHA256 b5f03327bd8ce54057730f4241b3eb12609f27c3376f24c18958e44b5c6d1329
        • MD5 SHA1 SHA512 SSDEEP TLSH

        about-logo-oversea.1db3cb82.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\about-logo-oversea.1db3cb82.png.old
        • Size 54KB
        • SHA256 2131c1444334e92a949c668c768e9f13a10ceb153a421ce15f71aa6f538ebc3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        about-logo-uptodown.f4b36feb.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\about-logo-uptodown.f4b36feb.png.old
        • Size 23KB
        • SHA256 7dea199c961b22190fb00f27a30a6393a7457668d0303b7a982abc8b8af99edb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        about-logo.37448401.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\about-logo.37448401.png.old
        • Size 14KB
        • SHA256 b4ec90ac64403b00799d8d4ec872c5e2c45ad74597ffc4587de2f6550df43fbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aboutBg.c2ec7658.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\aboutBg.c2ec7658.png.old
        • Size 72KB
        • SHA256 f46308e39efabb1df8216c12abd9fcd982372f741d609c19ab17070cf27d1746
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ajax-loader.c5cd7f53.gif.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\ajax-loader.c5cd7f53.gif.old
        • Size 4KB
        • SHA256 e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        android.03fe0024.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\android.03fe0024.png.old
        • Size 18KB
        • SHA256 3f623c66ba79b46c29cd687e2176ba8c14654cb837373826d30c1ad74fe731c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        background.2f301ae6.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\background.2f301ae6.png.old
        • Size 8KB
        • SHA256 398c7d9731e7ca31bb2321d1a2d4b94dc756624a370e5077a98e62cfcdad9b14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        battlePass.6c1d0bb1.TTF.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\battlePass.6c1d0bb1.TTF.old
        • Size 1.3MB
        • SHA256 00aaeeba5b3887173248f050beeb8bd7c05ec9063dd9d9f2452ffa2132cbc53c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg-large.1a662cff.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg-large.1a662cff.png.old
        • Size 115KB
        • SHA256 4b7158efb66fc15ad7453392073a9e8b06e15dd3c77b92513e79d98d86f68b1f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.3ea671d3.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg.3ea671d3.png.old
        • Size 167KB
        • SHA256 8210ecb596defb0467db7fe3dc4300ff48742e8fc81921f134ebe5ed52e531e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.81b1dbdc.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg.81b1dbdc.png.old
        • Size 94KB
        • SHA256 135bddf4cb6e42f0616875b1d519753edde1720adf9b13abe2910db9db917655
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.846d4ca3.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg.846d4ca3.png.old
        • Size 978KB
        • SHA256 c365916c4287643bf3c88722adc88dc40ca8e59ea1dd34f4f58b23ac22e6aa63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg_complete_task.321f45c1.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg_complete_task.321f45c1.png.old
        • Size 14KB
        • SHA256 4b1119d8b1934648fcecae567a79c0b90ecbc874512a046664d504f09443bdcc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg_gradient.2eddd6d2.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg_gradient.2eddd6d2.png.old
        • Size 10KB
        • SHA256 2b07e1d82a6134ce498bc15ced4b101d2cf141b8b3a55a9412867b2e2a8f5976
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg_incomplete_task.48285349.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\bg_incomplete_task.48285349.png.old
        • Size 12KB
        • SHA256 8ed80645f298cd85f66bbfd2cccfcf1502cf15f05f9828cde6c63851f6b11996
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cdkey1.9fa025f0.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\cdkey1.9fa025f0.png.old
        • Size 4KB
        • SHA256 e3779114edfee021b64f62be5640ae23482914c09b31b4e1af154cab88c9573c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cdkey2.ff9babc0.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\cdkey2.ff9babc0.png.old
        • Size 4KB
        • SHA256 26e15bf243bf369595c68af14f68d2072ee41ce99cf148ca72ff45aa493bc1f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        checked.05568521.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\checked.05568521.png.old
        • Size 5KB
        • SHA256 f1de84602dd322f99138c47603bb6788289fb92b0c471a6c0ab2f34ef012e533
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default-icon.d631fb1f.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\default-icon.d631fb1f.png.old
        • Size 10KB
        • SHA256 0e8db8ae2e31b531d54acdef59279b3d3ca16230ebfb41dfbfa7d7d790cc6905
        • MD5 SHA1 SHA512 SSDEEP TLSH

        defaultIcon.e78c301e.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\defaultIcon.e78c301e.png.old
        • Size 17KB
        • SHA256 36400e4a9d7f9fa7715ad4033c9d886e7febba1782077b8abd57cba6e3716427
        • MD5 SHA1 SHA512 SSDEEP TLSH

        defaultIcon_oversea.a16bcae9.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\defaultIcon_oversea.a16bcae9.png.old
        • Size 4KB
        • SHA256 3d8f64b763a0793bcebc22cf79201e85bf4663794ede991d1c5ce0a7edced67c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        description-yyb-logo.c4a4b824.svg.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\description-yyb-logo.c4a4b824.svg.old
        • Size 9KB
        • SHA256 e5b8aa8eb288ddad07d3de21cf779579677b7704d8f74a3f623f6aa2bdfeef1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dot.7a96dfea.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\dot.7a96dfea.png.old
        • Size 6KB
        • SHA256 7655a4a2b66c09e7fcec1ca3f544fa19d3e27c9ecfec98f28171504be0cfa77e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        entry-bg.1edd25de.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\entry-bg.1edd25de.png.old
        • Size 53KB
        • SHA256 f6f27e5cde105db9b33321a6de48aba13bc809a9285d963a02bdc37f86e1af4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gift-loading.ae16e16f.webm.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gift-loading.ae16e16f.webm.old
        • Size 29KB
        • SHA256 cc7714c6ef444133d5ac345d54e09ad7eda0ff7ee59797037f75bf45d677c038
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gift_bg_normal.13d51e4a.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gift_bg_normal.13d51e4a.png.old
        • Size 4KB
        • SHA256 18c7c0ba6001ee43b464ecb3554d151fdbdb8eb2c4c9a1fa0772fb0d46ef7d57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gift_bg_vip.0b211d75.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gift_bg_vip.0b211d75.png.old
        • Size 7KB
        • SHA256 6d83712a89d88b53ebeae370ce10fc85a8fe08e98639b1bc45ea0251ade548aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gp.d1ba99a1.svg.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\gp.d1ba99a1.svg.old
        • Size 52KB
        • SHA256 d62aa275af6642f9f3e544d80321cc97bf9dc92690566a4bd8c22d9e7e149df9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        guideTips.1c0529b0.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\guideTips.1c0529b0.png.old
        • Size 154KB
        • SHA256 473aa04a2f6d997093de710493a4487084b6caec0029f1859e8c81adb027198d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icon_normal.c6e1e1e3.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\icon_normal.c6e1e1e3.png.old
        • Size 7KB
        • SHA256 649f982820d9caf4540ffac713cdc8c4d3a31bb12ddc11b6cb075c1052c0de92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icon_vip.c3df2d09.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\icon_vip.c3df2d09.png.old
        • Size 9KB
        • SHA256 024e468cd79a2a77e8ab3b9324dac9d1374ce89c703d7c693c675f417e39821d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        liner.9b9d79a5.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\liner.9b9d79a5.png.old
        • Size 4KB
        • SHA256 df1d1e1693f395313fb9e4eb5c46e67d8c6bfe45386eedcc2626f658992883d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        loading-oversea.54e4db97.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\loading-oversea.54e4db97.png.old
        • Size 18KB
        • SHA256 064508290665a3110f129d0127e747ae80c59ba2ba995f33083b08160c76f527
        • MD5 SHA1 SHA512 SSDEEP TLSH

        loading-uptodown.b3670225.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\loading-uptodown.b3670225.png.old
        • Size 22KB
        • SHA256 6112fce1e01f1f31b841bc1496d1fbdfbc1c2b97be73d15f4c6a0d912e71b70c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        loading.60bf42e6.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\loading.60bf42e6.png.old
        • Size 19KB
        • SHA256 3f5fa7afd7acc5e3d73de74bf0252d2edcd9864b65da7369263d0a0eeefa1bbd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo-about-edu.f4e07ec5.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-about-edu.f4e07ec5.png.old
        • Size 19KB
        • SHA256 a61f72bf2c583974d5b8c76376dfc5cfb8f6d0b229565988a884f43a10583e6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo-edu.5be32200.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-edu.5be32200.png.old
        • Size 6KB
        • SHA256 e80ffeed1a6779335ca28906da1072849b662223c0f776dae3bc9e4ce1de69f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo-oversea.1aa2bd26.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-oversea.1aa2bd26.png.old
        • Size 35KB
        • SHA256 8bbb0cef40176b111c96ac0bd4a3cac0447a730166c8f6c23bdad60ddb1f9697
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo-uptodown-simple.b218277c.png

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo-uptodown-simple.b218277c.png
        • Size 10KB
        • SHA256 b2ad11221f75608e311561fc6fd05993e328a3b86e839eba9a80cfa2b522dbf1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo.2d57816e.svg.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo.2d57816e.svg.old
        • Size 8KB
        • SHA256 e5eafc50188ec4bbefc1da8aaccded19820988cd466eebf5dcb2ea2786ea99ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo.679094ed.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo.679094ed.png.old
        • Size 6KB
        • SHA256 bb4fb444b33c46d797e4124060175b79ae704390359a4829feb847451536b621
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo.a0435d4b.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo.a0435d4b.png.old
        • Size 901B
        • SHA256 3b6f429e5209d988a297e288a74c096688c1c1e71daa6217ddbde80de110b29a
        • MD5 SHA1 SHA512 TLSH

        logo_oversea.53b6f88b.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo_oversea.53b6f88b.png.old
        • Size 8KB
        • SHA256 3bbd6f3853d5556de52e6300ab3cdb839e7f66d2e36a976f1eb7022e6e1e931e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo_uptodown.1d1ea0f2.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\logo_uptodown.1d1ea0f2.png.old
        • Size 4KB
        • SHA256 6cf731340cd9e8cb99fa1f6144cafb9b5d282ec0ffba5fd81b5b11bda1267c76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        modal-tip.f838f7c7.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\modal-tip.f838f7c7.png.old
        • Size 10KB
        • SHA256 9bfdce32cf916a2b220564966ad75b72e52a3320bd73ce42dfcda8b91574bf71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        model_normal.72e6cb29.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\model_normal.72e6cb29.png.old
        • Size 37KB
        • SHA256 2db41802f5d6dc78cf35f6c6f75b09cbc9a9f152f01ac9fbc4cb556278b04626
        • MD5 SHA1 SHA512 SSDEEP TLSH

        model_vip.44ace2d2.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\model_vip.44ace2d2.png.old
        • Size 100KB
        • SHA256 7775e50a8fb564c3d17b8e3276d033d3852e52dfede0ab3fb8291a621ead40c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        newback_video.9862b89c.webm.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\newback_video.9862b89c.webm.old
        • Size 25KB
        • SHA256 f362dd87dde5fe132ea6d91b6a382dba788a8bb1667400b50bbb4bb34966fe8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        noResult.0220faa8.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\noResult.0220faa8.png.old
        • Size 168KB
        • SHA256 ee91fae5ef6c4d018d01b67a2845e4f2899390f27cb4ed1f38ff700e376beda4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        page-common-background.43681e74.svg.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\page-common-background.43681e74.svg.old
        • Size 5KB
        • SHA256 4e8c66811f416c7a237d4ea590be4d6c4a6771754a673b06ca792f50871e59bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        scrollTopSprites.abc41cc5.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\scrollTopSprites.abc41cc5.png.old
        • Size 20KB
        • SHA256 129fd569cc6a8116fcaa5f7512a62c3273d362fda3e9b4e9a78b3eea1337a821
        • MD5 SHA1 SHA512 SSDEEP TLSH

        skeleton.7f8f861c.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\skeleton.7f8f861c.png.old
        • Size 158KB
        • SHA256 00a69a3b5ce25a7eedf88bce0619ed8da7607618de85cb7f8f2c132a4a0081bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        slick.eot.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\slick.eot.old
        • Size 2KB
        • SHA256 06d80cf01250132fd1068701108453feee68854b750d22c344ffc0de395e1dcb
        • MD5 SHA1 SHA512 TLSH

        slick.ttf.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\slick.ttf.old
        • Size 1KB
        • SHA256 37bc99cfdbbc046193a26396787374d00e7b10d3a758a36045c07bd8886360d2
        • MD5 SHA1 SHA512 TLSH

        slick.woff.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\slick.woff.old
        • Size 1KB
        • SHA256 26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc
        • MD5 SHA1 SHA512 TLSH

        title.09b1666e.svg.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\title.09b1666e.svg.old
        • Size 8KB
        • SHA256 459dfea3665da172a442f5973f40f0fd10061e787634866117cb6d5971ef6d84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        title.4f8ea11f.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\title.4f8ea11f.png.old
        • Size 86KB
        • SHA256 458bbd7488a244bf0b843c13a16791924f5e3e6fd88b2d470313dad515732d83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        toast-loading.de809d29.gif.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\toast-loading.de809d29.gif.old
        • Size 14KB
        • SHA256 b2e70655375661b93b4b76928fdabd83c4bc18f13952419501e8e81e1d70beb4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        video-error.e06059f9.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\video-error.e06059f9.png.old
        • Size 232KB
        • SHA256 bf8349d7095eb91a6be53e12af5fa8527fe847f268eb1ac0a2183df9c44c9edd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wx-auth-tip.cb1fbc2f.png.old

        • Path C:\Program Files\TxGameAssistant\AppMarket\pages\syzsweb\static\media\wx-auth-tip.cb1fbc2f.png.old
        • Size 49KB
        • SHA256 2fb903a9b875102c10f8af54894a8d778e6c3907ef36df6343c29266dbdbd51a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AECommonDll.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AECommonDll.dll
        • Size 527KB
        • SHA256 74c2288b4ff073c5c947f96b0c79a01c587981a8b9440290a9ff33aa14f06e6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AndrowsInstaller.exe

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AndrowsInstaller.exe
        • Size 6.4MB
        • SHA256 8e91ebe57ad70a58866abdbaa5a406a3b036e519e9c4463e5abebe3986001792
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AowGame.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AowGame.xml
        • Size 292KB
        • SHA256 9937addc0f2eea66ef456a53b21f93e8ae2732cb83f3e0e08e94e763f0150537
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GFStringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1025\GFStringBundle.xml
        • Size 4KB
        • SHA256 173e6a9c3f2433f1df223a88b9b594fd6fc7ca0466979b01c3dac64e943ef508
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1025\StringBundle.xml
        • Size 6KB
        • SHA256 f02b76bcafc50f26b54562e8fdc6a01bb3091abf50942f834aaebd0187250df0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GFStringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1028\GFStringBundle.xml
        • Size 4KB
        • SHA256 43166ec540d7f849f4f275a1e3388012ec6076297626dd1fce64a7832c66ac4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1028\StringBundle.xml
        • Size 5KB
        • SHA256 4a24395569b3a6423896062b7eb4482c72d94ea585be0ab9cbc2aacab2ca34cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GFStringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1031\GFStringBundle.xml
        • Size 4KB
        • SHA256 6c4128b96a1ddaa79f15037c78d1b4c764cfae049b25538ab3c158f72ab803c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1031\StringBundle.xml
        • Size 6KB
        • SHA256 d3712ed0f80fe99b25853553295cf08c31b1efc3baa0e0ca8c87ebcb325f2ea1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1033\StringBundle.xml
        • Size 5KB
        • SHA256 42b4ae064d79b8a024eb70641e011979669cac8e406ad8044f47eac11c4cc2cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GFStringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1034\GFStringBundle.xml
        • Size 3KB
        • SHA256 620ab83068cd322af0adb2d7ddaec618511d61a6b562039d37aa8ed02b522024
        • MD5 SHA1 SHA512 TLSH

        StringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\I18N\1034\StringBundle.xml
        • Size 5KB
        • SHA256 1e33c2cf9e160521a957f3b37da09ff4a9fea91653b9192f9c418330f5a25960
        • MD5 SHA1 SHA512 SSDEEP TLSH

        10.png

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\AppMarket\Res\webctrl\loading\10.png
        • Size 8KB
        • SHA256 101ecd4b2fe8076a437a4ce1ed4d5c6f92acd6db0f2bb79db64a40bc8cbabe55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Config.ini

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Config.ini
        • Size 7KB
        • SHA256 1d02987a9b23cb3c11ad6c8123446efcd8e43c0069a616ff09dfc80426a82861
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GFStringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\TGVoiceBuddy\I18N\1033\GFStringBundle.xml
        • Size 3KB
        • SHA256 1568009a2e2b87fd2c80bd1238773e11bb096f7db0165c9cb0124a913dc4bbc2
        • MD5 SHA1 SHA512 TLSH

        GFStringBundle.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\TGVoiceBuddy\I18N\1055\GFStringBundle.xml
        • Size 4KB
        • SHA256 d6e1a0b5b8be7703ba735fa33d6f95b24d798e965809558dad356933a32f0838
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config-zh_CN.xml

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\TGVoiceBuddy\I18N\config-zh_CN.xml
        • Size 268B
        • SHA256 581f1f16ec516fcefe8b940bd38f936022616d7c0e0665918981f4769e1dec1d
        • MD5 SHA1 SHA512 TLSH

        Tinst.exe

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\Tinst.exe
        • Size 655KB
        • SHA256 e090e0cbf39243c8a4625b6f281530cc55609dbcfcfc249300765acfef1105c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WX_default_face.png

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\WXFace\WX_default_face.png
        • Size 1KB
        • SHA256 7ca81ae30b2b7e92a40b1fbd30dae53344cac06dfeb633915b6407c8731e4727
        • MD5 SHA1 SHA512 TLSH

        androws_logo.png

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\androws_logo.png
        • Size 103KB
        • SHA256 88dccc3165b30052117c4fb9a17d8bd08ae014c8d6ec65366331fc078abb54ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aowgameex2.dat

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\aowgameex2.dat
        • Size 1KB
        • SHA256 010c86cac8101a693c2f35f798c40162fdc510cf809fa2604d42ef2b929a0062
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-console-l1-1-0.dll
        • Size 18KB
        • SHA256 f6bdc8ffd172b44f4d169707d9a457aeef619872661229b8629ee4f15eefff0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-datetime-l1-1-0.dll
        • Size 18KB
        • SHA256 7d588a5a958e32875d7bd346d1371e6ebfd9d5d2ede47755942badfc9c74e207
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-debug-l1-1-0.dll
        • Size 18KB
        • SHA256 92b947f1d6236f86ed7e105cff19e23c13d1968861426511b775905e1d26b47a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 18KB
        • SHA256 e207ffc6fef144e5d393e79de75f8f20d223f1ac33a011eeb822d30fa2031046
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l1-1-0.dll
        • Size 21KB
        • SHA256 c0e5d482bd93bf71a73c01d0c1ec0722ea3260eba1f4c87e797bae334b5e9870
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 3816bbb7dd76d8fc6a7b83a0ed2f61b23dd5fc0843d3308ee077cb725d5c9088
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-1.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l1-2-1.dll
        • Size 18KB
        • SHA256 7068d2b8aea252294e6b5c3bf3630475d0a91e11877f11a04e8ed1f91196410f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 096409422ecd1894e4d6289fd2d1c7490bd83daff0c1e3d16c36c78bd477b895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-handle-l1-1-0.dll
        • Size 18KB
        • SHA256 a369ef130749bf8cd9f67055179e6f537f200c060af47493d49473912a95021e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-heap-l1-1-0.dll
        • Size 18KB
        • SHA256 efc9f0e32bce971900ddf66a1a9e68daa3bfb2099a1ba9f24c6ee82da2cbd6e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 18KB
        • SHA256 a272ae4fc60e511f48950b08f106fcdd3bc86831df908ee78d630f1ae921880c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 18KB
        • SHA256 0bd03e89a539aaa3100e2f7d9a058964730320e55aee1f85be8fd243eea7017a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 f33e6ac5d3e1c4f1d89564fb6aeeac170486c073b67694380755049dbc48eec1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-memory-l1-1-0.dll
        • Size 18KB
        • SHA256 8f3f0fd765a37f48162f0bd00c3047e79b4eda355223bfcbed4d35b51349cfcc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 18KB
        • SHA256 3a20635a223e68418c22858413e8c603aac25723de1cb0f54dd675349ec3213d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 19KB
        • SHA256 64742ee0729cbe72555247b0165fae03bea7a6b0147869253dae3bb0072173e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 20KB
        • SHA256 02839f3b2bdf6adfc89d2f800cc8acda59a40c3e7ce14ef3026f4c72e202297d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 bfa24f94ba095174b82d3657f8ecc689eab8ff380c69b1c9a7e311eb70d66386
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-profile-l1-1-0.dll
        • Size 17KB
        • SHA256 48dceeea29558966c391cda34e5755386c2e7e252ea0a03d8d1f21e3cb370c5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 17KB
        • SHA256 41c69b545d931045a280f83b2f5fbe0ea18c35ac42dfca54b661b42fe8e4f982
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-string-l1-1-0.dll
        • Size 18KB
        • SHA256 52c9b061c4c74eeb70019edde2b690c7e9d9744979a3b718d6687b3a83f00def
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-synch-l1-1-0.dll
        • Size 20KB
        • SHA256 e7d39dcb79d739ec030e9a4e2165b264a24c400566056e1fda267fdd1a8b36bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 01bb32d692b86ebb39a76893125e0f3aaf957c6e4bd682fb46eac32f6fb65be7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 19KB
        • SHA256 fb23439a5982e723e8e4ae1a5a35f9bbbfba1e76feb4596668f57093b231da6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 d592b91a087c001f9ea38dc5912a90c78fad3a368879d04fd7e5650ed374c8dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-core-util-l1-1-0.dll
        • Size 18KB
        • SHA256 4f31b2888ca82bd1ff40d71e2d11500456b99940dd469bfb097fcd304676fa38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 905f86530c56c9b453dd8bd9770440de0f6f35aa84b171de747a04d112e35aad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 e4ccd13d5861e3e28984fc7263d79b580a0bc7bbe0d234ed8f1a69706ef908f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 2cf24c6aac48261ab04eb616e85dd707417697764f860fc29dd3955dd2c49226
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 fcd8b213e2e9962b84d1eec4296bbefdf4465398a235e118be12c878fdc08c05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 242cb185643df586a5f55735e8810b8d2b6b095c78be206e42cdaae7665bb2cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 81a7a98e11ae94236f34a82a0d450a1100a9b8e752205248de0037a764b91a07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-math-l1-1-0.dll
        • Size 28KB
        • SHA256 4a88f73cae12080b9a637f76f8ab1b8ac29829817ff03ddd611a25b6981ee573
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 e7238f5e38d3991e9d6219255e8cd951d6dd431402c4b4b295a68bd43efa3d48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-private-l1-1-0.dll
        • Size 71KB
        • SHA256 f8720e9250c5d5aace6918e1f67f6105f2cd08c0cf55633d2b6b28032d904e9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 ecc116471ccfa09c599d389d71a574ebed01260b9760021a40665c4d8a22257d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 24bc147f7c8a2dfcbe9296d83ce75a1f2c02076d8f6e6c81f6032c927ed5888a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 5a3d9a0a2c1f9b14cb52d9cce92b761ec1fe0460ea7d994179c96648455ead84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 d51dfd972e6df5e8185dce0b4eb26dccb0527c5f1c63bc081677335f69b92b67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 d5e2fb8495bbbfb66b2612cd5179c1a5f4746dcdd043ecd474363ffe4a8deb4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 4eca5b9e5be5750b0bc03fd74b6d5e351cb6d70fd63d5f740a1a122f906390e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logo-oversea.png

        • Path C:\Temp\TxGameDownload\Component\AppMarket\1d218714941abf910cf39c6d4f265e7d\Setup\uires\window\logo-oversea.png
        • Size 2KB
        • SHA256 b45cd60fb9b2659f6b177c63abd3a4eb663912fb9531c97f1942baa36bb2d298
        • MD5 SHA1 SHA512 TLSH

        lib-halo-downloader.32279619.js.LICENSE.txt

        • Path C:\Users\Admin\AppData\Local\Temp\market_page_17804139540x5d28\module\lib-halo-downloader.32279619.js.LICENSE.txt
        • Size 832B
        • SHA256 86701d478c8b5cd2981db0c9715b0c27b1d76e1b0bd10dd7447a35b90cb14728
        • MD5 SHA1 SHA512 TLSH

        lib-halo-utils.0dbcc55e.js.LICENSE.txt

        • Path C:\Users\Admin\AppData\Local\Temp\market_page_17804139540x5d28\module\lib-halo-utils.0dbcc55e.js.LICENSE.txt
        • Size 449B
        • SHA256 90fdd6754a69086abae5c1d02782ddc4c82d179682b2b66c51a21e4c1edce6a7
        • MD5 SHA1 SHA512 TLSH

        BigRuixian.6a70385c.TTF

        • Path C:\Users\Admin\AppData\Local\Temp\market_page_17804139540x5d28\static\media\BigRuixian.6a70385c.TTF
        • Size 1.2MB
        • SHA256 0f0c2737c40933521a713478d462b1a89e8282791a3cf80408cdd96ab401c668
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dr.dll

        • Path C:\Users\Admin\AppData\Local\Tencent\TxGameAssistant\TGBDownloader\dr.dll
        • Size 74KB
        • SHA256 5904a7e4d97eeac939662c3638a0e145f64ff3dd0198f895c4bf0337595c6a67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CURRENT

        • Path C:\Users\Admin\AppData\Roaming\Tencent\MobileGamePC\WebkitCache\AppMarket4\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path C:\Users\Admin\AppData\Roaming\Tencent\MobileGamePC\WebkitCache\AppMarket4\Session Storage\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        memory/1724-4333-0x0000000000400000-0x00000000008DB000-memory.dmp

        memory/3976-4243-0x00000000696C0000-0x00000000696D0000-memory.dmp

        memory/3976-4320-0x0000000001490000-0x00000000014A5000-memory.dmp

        memory/3976-4319-0x0000000075F30000-0x000000007600F000-memory.dmp

        memory/3976-4314-0x00000000772D0000-0x000000007755B000-memory.dmp