Static and Dynamic Analysis of Android Malware and Goodware Written with Unity Framework

Table 1

Common library files of Unity apps.

Filename	Description
Assembly-CSharp.dll	CIL codes generated by compiling developer’s C# codes
Assembly-CSharp-firstpass.dll
System..dll	File I/O support
UnityEngine.dll	Unity API support
libmain.so	Load and run libmono.so and libunity.so (redefine load/unload method)
libmono.so	Load classes in Assembly-CSharp.dll onto Mono runtime
libunity.so	Create Unity engine and Mono runtime