Releases: slopegamebox/slope-2014-windows-runner
Releases · slopegamebox/slope-2014-windows-runner
Release list
Slope 2014 Runner v1.0.0
Slope 2014 Runner v1.0.0
This is an unofficial Windows runner for the original 2014 Slope Unity Web Player game. It is not a remake, WebGL port, modern-browser version, or official release from Rob Kay, Kongregate, Unity, or Mozilla.
Download and verification
- File:
Slope2014Runner-v1.0.0.exe - Size:
78,101,878bytes - SHA-256:
06e5de31a90eff591deec0ca23d3c478cd99d0150b184081667b1777f411b6b0 - Source commit:
9a9060965f55c6315acec102dcf9d70a7e757007 - Successful Windows CI run: https://github.com/mharry32/slopeenv/actions/runs/29806158823
- VirusTotal: https://www.virustotal.com/gui/file/06e5de31a90eff591deec0ca23d3c478cd99d0150b184081667b1777f411b6b0/detection
Verify the download in PowerShell:
Get-FileHash .\Slope2014Runner-v1.0.0.exe -Algorithm SHA256The result must match the SHA-256 above and the included checksums.txt.
Original game package
The executable contains the unmodified Slope.unity3d package sourced from Kongregate:
- Source: https://www.kongregate.com/en/games/robkaysf/slope
- Original CDN URL: https://chat.kongregate.com/gamez/0021/9991/live/slopeWeb.unity3d?kongregate_game_version=1412114754
- Size:
4,658,671bytes - SHA-256:
53c9b651a017f96e03567dbd8d1d0e3f663292f2dbdfbf077b3657333d3bc937
Validation summary
- Supported target: Windows x64. This release was validated on Windows 11 and built/tested on Windows Server 2025; other Windows versions are not claimed as validated.
- GitHub Actions: Windows Server 2025 Datacenter, AMD64.
- Automated tests: 12/12 passed.
- Built-EXE failure tests: corrupted game package rejected; corrupted Firefox runtime rejected; injected Firefox-start failure restored registry state and removed the per-run session.
- Unity installer Authenticode: Valid; subject
Unity Technologies ApS. - Local Windows validation: Windows 11 Pro for Workstations
10.0.26200, 64-bit. - UI validation: first frame rendered; PLAY, Left, Right, A, D, forced failure, and restart were exercised against the
Unity.WebPlayersurface; all captured windows remained 1280×928; Firefox and the runner exited after the test. - Network validation: the runner listened only on
127.0.0.1; online sampling associated Firefox traffic toapi.gameanalytics.comon TCP port 80. With exact-path outbound rules temporarily applied to the bundled Firefox and plugin-container, the core game and controls still ran and only loopback TCP was observed; the temporary rules were removed after the test. - Registry, session, and process cleanup: verified after normal and injected-failure runs.
- Microsoft Defender on this exact CI EXE: no threats found, signature
1.455.246.0; SHA-256 unchanged after scanning. The GitHub-hosted runner skipped its own requested file scan, which is recorded asStatus=Skippedrather than presented as a successful scan. - VirusTotal on this exact SHA-256: 1/67 security vendors flagged the file. The sole detection was Bkav Pro
W32.Malware.CA219342; the other 66 engines did not detect it. This isolated result is disclosed as an unsigned/single-file heuristic finding, not described as a clean 0/67 scan.
Important limitations
- This unsigned executable may trigger Microsoft Defender SmartScreen.
- It bundles deprecated Firefox ESR 52 and Unity Web Player/NPAPI components solely to run this local game. Do not use the bundled browser for ordinary web browsing.
- The launcher serves the game only on a random loopback address (
127.0.0.1). Loopback does not mean the game is fully offline: observed game/runtime traffic can target GameAnalytics and dreamlo services. - Exact-path outbound blocking allowed the core game and controls to run, but the post-failure leaderboard/restart flow stalled. The launcher therefore does not install firewall rules or claim full offline operation.
- The launcher temporarily changes two HKCU registry trees and restores them on normal and handled failure paths. Restoration is best effort; power loss or forced process termination cannot be guaranteed recoverable.
- The versioned runtime payload is intentionally cached under
%LOCALAPPDATA%\SlopeLegacyRunner\payload-*. Per-run profiles under%LOCALAPPDATA%\SlopeLegacyRunner\sessionsare removed after handled exits. - Third-party assets and runtimes are not covered by the repository's MIT license. See
THIRD_PARTY_NOTICES.mdandLICENSE.
Included evidence
checksums.txttest-results.jsontest-summary.mdfailure-results.jsonbuild-metadata.jsondefender-scan.txt(records the GitHub-hosted runner's skipped scan attempt)defender-local-release-gate.txt(records the successful local scan of the downloaded CI EXE)virustotal-summary.txt
For bugs, security reports, or removal requests, follow the channels documented in README.md and SECURITY.md.