In a white-box attack context (e.g. PC, tablet, smartphone), there is no trusted entity, which can be used to guarantee some reasonable security. TPM is not considered a solution because it is not available on all platforms and is also disabled by default. This means that it is not possible to store a hash of a resource file, or some secret-key associated with this file on the system, such that the attacker (e.g. malware), will not be able to read/write/modify it.
How would one be able to detect any tampering of a non-confidential, small, resource file, in such a white-box attacker context?
My only guess is via white-box implementations of a cryptographic cipher such as AES. However, this is not a really secure approach and also requires a lot of extra memory resources.