VRCA-Recovery Tool! Get Fully Working Unity Projects Out of VRCA Files
-
Yeah my chrome blocked the file right after download because of a virus...
-
-
Windows defender is sadly flagging this as Trojan:Win32/Cloxer
Windows defender is sadly flagging this as Trojan:Win32/Cloxer
Yeah my chrome blocked the file right after download because of a virus...
It is a false positive, you can look at the virustotal behavioral analysis. It is mainly thinking its a virus because it is able write/extract so many files at once. And it is unsigned obviously.
It does also work under a VM both Linux or Windows if you wanna do that instead.
-
It is a 64-bit Tauri (Rust) app, and under the hood, it is a Unity project recovery tool for VRChat. It calls AssetRipper headlessly and includes a process to rewrite shader references. The network destinations were only VRCFury, Poiyomi, nadena, lilxyzw, and VRChat's public VPM, plus Buy Me a Coffee for donations and Umami for analytics.
Discord webhooks, Telegram, ngrok, pastebin, Run keys, PowerShell, and Task Scheduler are zero in terms of strings. Keylog and cmd.exe are strings from rustls and the Rust standard library, and this is not a keylogger or remote control tool.
looks no rat/trojan
thanks for shareing! -
It is a 64-bit Tauri (Rust) app, and under the hood, it is a Unity project recovery tool for VRChat. It calls AssetRipper headlessly and includes a process to rewrite shader references. The network destinations were only VRCFury, Poiyomi, nadena, lilxyzw, and VRChat's public VPM, plus Buy Me a Coffee for donations and Umami for analytics.
Discord webhooks, Telegram, ngrok, pastebin, Run keys, PowerShell, and Task Scheduler are zero in terms of strings. Keylog and cmd.exe are strings from rustls and the Rust standard library, and this is not a keylogger or remote control tool.
looks no rat/trojan
thanks for shareing!@leochan Many thanks for conforming I have found the issue actually. It is umami causing the detection even though my other app for VRCW recovery uses the same thing. Because Tauri uses webview on windows it thinks its a clicker app; as in like it clicks on things on behalf of you. VRCW Recovery tool on the other hand was done with .NET Native AOT with Avalonia so it is drawing its own window hence never triggering this detection.
I might remove the Umami or try to solve it. Also to be clear only analytics its providing me is how many people clicked "I agree" button on the pop-up. Nothing else.
-
It is a 64-bit Tauri (Rust) app, and under the hood, it is a Unity project recovery tool for VRChat. It calls AssetRipper headlessly and includes a process to rewrite shader references. The network destinations were only VRCFury, Poiyomi, nadena, lilxyzw, and VRChat's public VPM, plus Buy Me a Coffee for donations and Umami for analytics.
Discord webhooks, Telegram, ngrok, pastebin, Run keys, PowerShell, and Task Scheduler are zero in terms of strings. Keylog and cmd.exe are strings from rustls and the Rust standard library, and this is not a keylogger or remote control tool.
looks no rat/trojan
thanks for shareing!@leochan dang you know your stuff, thanks for all that! I appreciate the explanation.
-
i hope u know people that helping rippers world stuff ripping etc hope u know they are angels people making tools to help others is such angels and deserves money tips for the hard work gen if u ever have a tip donation let me know cause im gen grateful
-
i also had a question its not provided the fix animations?
-
i hope u know people that helping rippers world stuff ripping etc hope u know they are angels people making tools to help others is such angels and deserves money tips for the hard work gen if u ever have a tip donation let me know cause im gen grateful
@M-I-K-O-S-H-I now i have like a vcc implementable version of this
-
-
i would not trust this there is no public src and this is just pretty much facs would not recommend using this virustotal analysis's mean nothing if someone wants to run an anyrun proccess and inspect that that would be easier to prove that its safe but even that cant fully prove that its safe
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login