Skip to content

Slope 2014 Runner v1.0.0

Latest

Choose a tag to compare

@mharry32 mharry32 released this 21 Jul 08:27

Slope 2014 Runner v1.0.0

This is an unofficial Windows runner for the original 2014 Slope Unity Web Player game. It is not a remake, WebGL port, modern-browser version, or official release from Rob Kay, Kongregate, Unity, or Mozilla.

Download and verification

Verify the download in PowerShell:

Get-FileHash .\Slope2014Runner-v1.0.0.exe -Algorithm SHA256

The result must match the SHA-256 above and the included checksums.txt.

Original game package

The executable contains the unmodified Slope.unity3d package sourced from Kongregate:

Validation summary

  • Supported target: Windows x64. This release was validated on Windows 11 and built/tested on Windows Server 2025; other Windows versions are not claimed as validated.
  • GitHub Actions: Windows Server 2025 Datacenter, AMD64.
  • Automated tests: 12/12 passed.
  • Built-EXE failure tests: corrupted game package rejected; corrupted Firefox runtime rejected; injected Firefox-start failure restored registry state and removed the per-run session.
  • Unity installer Authenticode: Valid; subject Unity Technologies ApS.
  • Local Windows validation: Windows 11 Pro for Workstations 10.0.26200, 64-bit.
  • UI validation: first frame rendered; PLAY, Left, Right, A, D, forced failure, and restart were exercised against the Unity.WebPlayer surface; all captured windows remained 1280×928; Firefox and the runner exited after the test.
  • Network validation: the runner listened only on 127.0.0.1; online sampling associated Firefox traffic to api.gameanalytics.com on TCP port 80. With exact-path outbound rules temporarily applied to the bundled Firefox and plugin-container, the core game and controls still ran and only loopback TCP was observed; the temporary rules were removed after the test.
  • Registry, session, and process cleanup: verified after normal and injected-failure runs.
  • Microsoft Defender on this exact CI EXE: no threats found, signature 1.455.246.0; SHA-256 unchanged after scanning. The GitHub-hosted runner skipped its own requested file scan, which is recorded as Status=Skipped rather than presented as a successful scan.
  • VirusTotal on this exact SHA-256: 1/67 security vendors flagged the file. The sole detection was Bkav Pro W32.Malware.CA219342; the other 66 engines did not detect it. This isolated result is disclosed as an unsigned/single-file heuristic finding, not described as a clean 0/67 scan.

Important limitations

  • This unsigned executable may trigger Microsoft Defender SmartScreen.
  • It bundles deprecated Firefox ESR 52 and Unity Web Player/NPAPI components solely to run this local game. Do not use the bundled browser for ordinary web browsing.
  • The launcher serves the game only on a random loopback address (127.0.0.1). Loopback does not mean the game is fully offline: observed game/runtime traffic can target GameAnalytics and dreamlo services.
  • Exact-path outbound blocking allowed the core game and controls to run, but the post-failure leaderboard/restart flow stalled. The launcher therefore does not install firewall rules or claim full offline operation.
  • The launcher temporarily changes two HKCU registry trees and restores them on normal and handled failure paths. Restoration is best effort; power loss or forced process termination cannot be guaranteed recoverable.
  • The versioned runtime payload is intentionally cached under %LOCALAPPDATA%\SlopeLegacyRunner\payload-*. Per-run profiles under %LOCALAPPDATA%\SlopeLegacyRunner\sessions are removed after handled exits.
  • Third-party assets and runtimes are not covered by the repository's MIT license. See THIRD_PARTY_NOTICES.md and LICENSE.

Included evidence

  • checksums.txt
  • test-results.json
  • test-summary.md
  • failure-results.json
  • build-metadata.json
  • defender-scan.txt (records the GitHub-hosted runner's skipped scan attempt)
  • defender-local-release-gate.txt (records the successful local scan of the downloaded CI EXE)
  • virustotal-summary.txt

For bugs, security reports, or removal requests, follow the channels documented in README.md and SECURITY.md.