新版Windows unity扫雷游戏去广告 | CTF导航
Tags
attack-pattern: | Data Scripting - T1064 Scripting |
Common Information
Type | Value |
---|---|
UUID | 9d7b7a11-b036-4272-a92b-f4880b547fcf |
Fingerprint | 2ff90179960680f0 |
Analysis status | DONE |
Considered CTI value | -2 |
Text language | |
Published | Sept. 10, 2024, midnight |
Added to db | Sept. 18, 2024, 4:47 a.m. |
Last updated | Nov. 17, 2024, 11:40 p.m. |
Headline | 新版Windows unity扫雷游戏去广告 |
Title | 新版Windows unity扫雷游戏去广告 | CTF导航 |
Detected Hints/Tags/Attributes | 4/1/24 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://www.ctfiot.com/205185.html |
URL Provider
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 426 | ✔ | CTF导航 | https://www.ctfiot.com/feed | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 1 | metadata.data |
|
Details | Domain | 1 | docs.unity.cn |
|
Details | Domain | 4128 | github.com |
|
Details | Domain | 41 | bbs.kanxue.com |
|
Details | File | 1 | 通过对gameassembly.dll |
|
Details | File | 1 | 和global-metadata.dat |
|
Details | File | 1 | 经过调试发现程序的逻辑在gameassembly.dll |
|
Details | File | 1 | 并找到global-metadata.dat |
|
Details | File | 1 | il2cpp-howitworks.html |
|
Details | File | 1 | 存储文件是global-metadata.dat |
|
Details | File | 1 | 其中global-metadata.dat |
|
Details | File | 1 | 反编译gameassembly.dll |
|
Details | File | 1 | 先选择gameassembly.dll |
|
Details | File | 1 | 在选择global-metadata.dat |
|
Details | File | 1 | 其中assemble-csharp.dll |
|
Details | File | 1 | 使用反编译工具查看assembly-csharp.dll |
|
Details | File | 1 | 这里其实对应的函数在gameassembly.dll |
|
Details | File | 1 | 打开gameassembly.dll |
|
Details | File | 1 | 得到assembly-csharp.dll |
|
Details | File | 1 | homepage-960204.htm |
|
Details | Github username | 1 | perfare |
|
Details | Url | 1 | https://docs.unity.cn/cn/2019.4/manual/il2cpp-howitworks.html |
|
Details | Url | 1 | https://github.com/perfare/il2cppdumper |
|
Details | Url | 1 | https://bbs.kanxue.com/homepage-960204.htm |