General

  • Target

    kosmosmacros.zip

  • Size

    32.1MB

  • MD5

    45c7c71f051ee47da12324819ec2c408

  • SHA1

    ebbef3abb0ee14c68672e94af8f49b79bd4a76db

  • SHA256

    e48303e0f246251f765b8633c5cf8643fead75c73c96370301752a8e7e76298b

  • SHA512

    99a4368f85e89d853d94b15b9c7d4c4f0e6f863adfc81d657ce1bc0aace6f273fd51f0618d0f82f4b536986bbba44adfea0a4a94656c0b3aaf85f238309b5abe

  • SSDEEP

    393216:CY9XAxaZwG7qgoRGem77/qPijXI27HCmrcqJLtD2BLb0Z:8xaZwZGhYi7I4cq/2J0Z

Score
3/10

Malware Config

Signatures

  • Unsigned PE 73 IoCs

    Checks for missing Authenticode signature.

Files

  • kosmosmacros.zip
    .zip
  • kosmosmacros/UCR(use_only_if_you_play_on_controller).zip
    .zip
  • NLog.config
    .xml
  • Plugins/UCR.Plugins/UCR.Plugins.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_DS4WindowsApi/Core_DS4WindowsApi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_DS4WindowsApi/DS4WindowsApi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/Core_Interception.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/HidSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Providers/Core_Interception/IOWrapper.Libraries.DeviceLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/IOWrapper.Libraries.EmptyEventDictionary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/IOWrapper.Libraries.HidDeviceHelper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/IOWrapper.Libraries.PollingDeviceHandler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/IOWrapper.Libraries.ProviderLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/IOWrapper.Libraries.SubscriptionHandlers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Interception/Settings.xml
  • Providers/Core_Interception/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Providers/Core_Interception/interception.dll
    .dll windows:6 windows x86 arch:x86

    a4e6a4038890da57f612359318213376


    Headers

    Imports

    Exports

    Sections

  • Providers/Core_Midi/Core_Midi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/IOWrapper.DTOs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/IOWrapper.IProvider.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/IOWrapper.Libraries.DeviceLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/IOWrapper.Libraries.EmptyEventDictionary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/IOWrapper.Libraries.PollingDeviceHandler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/IOWrapper.Libraries.SubscriptionHandlers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Midi/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/Core_SpaceMouse.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/HidLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/IOWrapper.DTOs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/IOWrapper.IProvider.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/IOWrapper.Libraries.DeviceLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/IOWrapper.Libraries.EmptyEventDictionary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/IOWrapper.Libraries.PollingDeviceHandler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/IOWrapper.Libraries.SubscriptionHandlers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_SpaceMouse/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Providers/Core_TitanOne/Core_TitanOne.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_TitanOne/gcdapi.dll
    .dll windows:5 windows x86 arch:x86

    5c7ac66c9193666307f3a78669f1cb1a


    Headers

    Imports

    Exports

    Sections

  • Providers/Core_Tobii_Interaction/Core_Tobii_Interaction.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Tobii_Interaction/IOWrapper.DTOs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Tobii_Interaction/IOWrapper.IProvider.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Tobii_Interaction/Tobii.EyeX.Client.dll
    .dll windows:6 windows x86 arch:x86

    78f8d4f4af9d41f62635058b50cbf255


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Providers/Core_Tobii_Interaction/Tobii.Interaction.Model.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_Tobii_Interaction/Tobii.Interaction.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_ViGEm/Core_ViGEm.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_ViGEm/Costura.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_ViGEm/IOWrapper.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_ViGEm/IOWrapper.Libraries.ProviderLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_ViGEm/Nefarius.ViGEmClient.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_ViGEm/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Providers/Core_vJoyInterfaceWrap/Core_vJoyInterfaceWrap.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_vJoyInterfaceWrap/IOWrapper.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/Core_vJoyInterfaceWrap/vJoyInterface.dll
    .dll windows:6 windows x86 arch:x86

    4ca52e6f53f845a5fb58c54685d7dff2


    Headers

    Imports

    Exports

    Sections

  • Providers/Core_vJoyInterfaceWrap/vJoyInterfaceWrap.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/IOWrapper.Libraries.DeviceLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/IOWrapper.Libraries.EmptyEventDictionary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/IOWrapper.Libraries.PollingDeviceHandler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/IOWrapper.Libraries.PovHelper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/IOWrapper.Libraries.ProviderLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/IOWrapper.Libraries.SubscriptionHandlers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/SharpDX.DirectInput.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/SharpDX.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/SharpDX_DirectInput.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_DirectInput/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/IOWrapper.Libraries.DeviceLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/IOWrapper.Libraries.EmptyEventDictionary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/IOWrapper.Libraries.PollingDeviceHandler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/IOWrapper.Libraries.ProviderLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/IOWrapper.Libraries.SubscriptionHandlers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/SharpDX.XInput.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/SharpDX.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/SharpDX_XInput.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Providers/SharpDX_XInput/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • UCR.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • UCR.exe.RoslynCA.json
  • UCR.exe.config
  • UCR_unblocker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • UCR_unblocker.exe.RoslynCA.json
  • UCR_unblocker.exe.config
  • lib/IOWrapper.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/IOWrapper.DTOs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/IOWrapper.IProvider.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/MaterialDesignColors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/MaterialDesignThemes.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/MaterialDesignThemes.Wpf.pdb
  • lib/MaterialDesignThemes.Wpf.xml
    .xml
  • lib/Mono.Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/NLog.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/NLog.xml
    .xml .js polyglot
  • lib/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • lib/Newtonsoft.Json.xml
    .xml
  • lib/RestSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/RestSharp.xml
    .xml
  • lib/Trinet.Core.IO.Ntfs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/Trinet.Core.IO.Ntfs.xml
    .xml
  • lib/UCR.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lib/UCR.Core.pdb
  • lib/UCR_unblocker.pdb
  • kosmosmacros/controller-tut.mp4
  • kosmosmacros/ka7s6absjahstaA.exe
    .exe windows:6 windows x64 arch:x64

    95152586d72d274458d82db6a417d158


    Headers

    Imports

    Sections

  • kosmosmacros/macro-tutorialv2.rtf
    .rtf