Malware scanner for unitypackage files

[PanConChancho]

Recently, one of my friends got hacked after downloading a Unity package from vrmodels. With my knowledge, I'm sure he downloaded something else, but it doesn't matter.

That gave me the idea to create a small program that scans the entire Unity package file for malware, from basic tricks like obfuscation to kernel execution. For now, I've left the flags to an AI to determine if they're important or not.

---

Preview

---

How it works

The easiest way is to download the file and drag the unitypackage file into it. Then the program starts scanning for malware. Sometimes there will be false positives, but that's all, just a scan. I have the project on GitHub.

https://github.com/vicentefelipechile/vrchat-scanner

[anonberry]

Amazing!! That's exactly what I was looking for

[anonberry]

Could you also create a tool to automatically remove scripts and executables from a Unity package?

[PanConChancho]

@anonberry Im gonna see if I can do it

[milfs.org]

ONG Im going to hug you

[PanConChancho]

I just made some updates, now fewer red alerts will pop up when poiyomi is present in the project. I also added the ability to sanitize the file, although this is still in alpha; I'll continue working on version 3

https://github.com/vicentefelipechile/vrchat-scanner/releases

[anonberry]

Here's a very simple batch script to recursively scan all .unitypackage files in a folder (Windows). Please put the script and the executable file inside the desired folder.

@echo off

setlocal
set "PROGRAM=%cd%\vrcstorage-scanner-windows-x86_64.exe"
set "BASE_DIR=%cd%"

echo Searching on: %BASE_DIR%
echo.

for /r "%BASE_DIR%" %%f in (*.unitypackage) do (
    echo Scanning: %%f
    start "" "%PROGRAM%" "%%f"
)

echo.
echo Done!

pause

[PanConChancho]

That's a good idea tho. I'll implement it natively in the application for this use case.

[PanConChancho]

It's working

[anonberry]

@SummerTYT Thank you so much

[anonberry]

@SummerTYT Detection report
critical risk in kon 2.0 -> https://forum.ripper.store/post/1287200

[anonberry]

Is there any way I can contact you?

[PanConChancho]

@anonberry that's a false alarme, don't worry

[admin]

great project!

[PanConChancho]

@admin tyy!!!

[PanConChancho]

I've updated the scanner and now there are no more false positives, and the sanitizing system should now work better. ty @anonberry for the ideas!

https://github.com/vicentefelipechile/vrchat-scanner/releases

[anonberry]

Working perfectly

[GoatonicReal]

i might js being paranoid and going through a lil attack, just wanted to ask is this really safe? again im sorry for the question just getting in my own head thinking bout safety-

[PanConChancho]

@GoatonicReal yeah, at least it detect a lot of stuff even the smallest one, the only thing the program can do is copy the unitypackage and rewrite to a safe version

[PanConChancho]

I just updated the scanner; it's now more sensitive to executable files and can now sanitize UnityPackage files that contain executables.
https://github.com/vicentefelipechile/vrchat-scanner/releases