Overview

overview

7

Static

static

3

FM-AIO-2.5.0.0.exe

windows10-2004-x64

7

FM-AIO-2.5.0.0.exe

windows11-21h2-x64

7

Analysis

  • geolocation tags

    asiadelhiinindia
  • max time kernel
    149s
  • max time network
    125s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    17/04/2026, 02:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FM-AIO-2.5.0.0.exe
  • Size 9.2MB
  • Sample260417-c2ep7ady3l
  • SHA256 e299a47ad46062cd9c93eda4b4fca56124ad6ffac2ce3f855506eee94588d1a0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 31 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FM-AIO-2.5.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\FM-AIO-2.5.0.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        CommunityToolkit.Mvvm.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\CommunityToolkit.Mvvm.dll
        • Size 268KB
        • SHA256 3c7226eb2100b30a6a6241edbb5aa1645dcfea47e34b09f892fedfcac0c544dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ControlzEx.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\ControlzEx.dll
        • Size 532KB
        • SHA256 909c8d74d08ca5f5c5463221662068a38ff16a7fba1e6e529a3893e48682f6b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MahApps.Metro.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\MahApps.Metro.dll
        • Size 4.2MB
        • SHA256 0c86b725ba0c0666dc731a12127e816a0285fe8f45ee1a248b1ebddf34ce62b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Memory.dll
        • Size 76KB
        • SHA256 95aa5c51c12ec302ce518cd7597f664cc03f3552933730ff44a63190abf6d1dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Configuration.Abstractions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Configuration.Abstractions.dll
        • Size 36KB
        • SHA256 291bc2422c78bb23137fcc25fd3ecb1aa3a36aecdaa248a6be6a9806430899d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Configuration.Binder.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Configuration.Binder.dll
        • Size 76KB
        • SHA256 95314b2f54737c1bbca684cf207d694ec645e30f029aa856482e844d00700af8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Configuration.EnvironmentVariables.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
        • Size 28KB
        • SHA256 02fc1cf8a84970519accbda29a947e60fc6060639cfd1dbdbc6e8c341124269e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Configuration.FileExtensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Configuration.FileExtensions.dll
        • Size 40KB
        • SHA256 892fc208754e5f0eb3d3af4461c764106f5080f7d978003b2eef07017adb7eb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Configuration.Json.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Configuration.Json.dll
        • Size 40KB
        • SHA256 30058af593c58214725aae4b9811b9c99c2cb2ec1e70bad87a363f8239e36983
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Configuration.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Configuration.dll
        • Size 80KB
        • SHA256 1a184163dcea1952cdd3d97a5504f62637e2bcf1806a1db4f702900c99a2aae3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.DependencyInjection.Abstractions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.DependencyInjection.Abstractions.dll
        • Size 128KB
        • SHA256 8a65b3644cdaa4f65ed9c17a6f7e259ac86b07a1100f48a8932d0e4e38540ad0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.DependencyInjection.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.DependencyInjection.dll
        • Size 196KB
        • SHA256 b6ed1826e918570c8504fd34d24566cc50be05ffe8c2fcb629e75e3418fd4223
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Diagnostics.Abstractions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Diagnostics.Abstractions.dll
        • Size 36KB
        • SHA256 cad41fbee65cac39e3d75ebd6b59dd416d40fd49ab9dab5159df3d05374022fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Diagnostics.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Diagnostics.dll
        • Size 56KB
        • SHA256 1e9e35cc3472b16afec613b53328060a3a52027862f4e06cdf89fcad9447f8d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.FileProviders.Abstractions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.FileProviders.Abstractions.dll
        • Size 28KB
        • SHA256 671f81bbe32e7b39d0a3fd67344636211eef3a0e268ab0154987941e5d045836
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.FileProviders.Physical.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.FileProviders.Physical.dll
        • Size 80KB
        • SHA256 3c830697e9bbf1f296e1d11655490424774ef97f5dc68696d9e811a5e6ee216e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Hosting.Abstractions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Hosting.Abstractions.dll
        • Size 68KB
        • SHA256 760c45fd1b371faca2c9ea374a1f875eb3c8202f21912e65572be5b9dcc65ee9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Hosting.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Hosting.dll
        • Size 140KB
        • SHA256 c4d6b65a159234b3788949a04a1b9019d343a5b377c21b96f8c06431a4ee47ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Logging.Abstractions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Logging.Abstractions.dll
        • Size 132KB
        • SHA256 4f77f38cfb355d9bbbccf9a3bd912c756417e18ae06403161770f0c4e86d9566
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Logging.Configuration.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Logging.Configuration.dll
        • Size 36KB
        • SHA256 bc0257c424a1747ddb81b53a784624e186689fa63ea5c708c3d2a4edb9150326
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Logging.Console.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Logging.Console.dll
        • Size 140KB
        • SHA256 9c9c80d009d7cac6303a3b5279d809582a2cb55cdc03dcd26cb264e7553d50dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Logging.Debug.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Logging.Debug.dll
        • Size 24KB
        • SHA256 81d1c88022748590d89b7b58d36e3ce2ee7a65998c5211d9d25cedff757e1382
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Logging.EventLog.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Logging.EventLog.dll
        • Size 36KB
        • SHA256 736847fd1eed9c1dbfd4ce8a74646a5b880e4f01a66e2b460c1c6b5dd8f75772
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Logging.EventSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Logging.EventSource.dll
        • Size 52KB
        • SHA256 951100120b9712529ad787d91c98924b303f9cb9450eced997960d592db56bfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Logging.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Logging.dll
        • Size 84KB
        • SHA256 9860dd4d25c39caca890fca54716c038dd2da5cd608ecd3292af554fa31f87a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Options.ConfigurationExtensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Options.ConfigurationExtensions.dll
        • Size 28KB
        • SHA256 1feacc8259ce57bb7993dbd1cc03cceb6af2285a667147473679ad11418963fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Options.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Options.dll
        • Size 124KB
        • SHA256 7d73beabce73bb6f158608a31e83ac4e9da4d09f5af4711a648f1fcb54e24522
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Extensions.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Extensions.Primitives.dll
        • Size 72KB
        • SHA256 e25328ffd434c109f6634f4dd2a56fdfb507a35bfcab9a4c9a3c7dc866fd88a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Xaml.Behaviors.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\Microsoft.Xaml.Behaviors.dll
        • Size 352KB
        • SHA256 7b2868c0babbf090f6a286fb530bfe4c318dfba2ba9e1ffb03e14c87c20b9e07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Management.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\System.Management.dll
        • Size 812KB
        • SHA256 fa2dda07f6e09ff70aaa1f38c4f3a8c3493d1eaa56bb55ae1ea2fb87f5286c0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        yeahgosuckmydickwiththisblacklistshit.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FM-AIO-2.5.0.0\Jz+Xozt8lQ2Ytq0Cw5KypiadaYqR4+o=\yeahgosuckmydickwiththisblacklistshit.dll
        • Size 952KB
        • SHA256 3f185c4f587e367dd50afa2b919e3535818e3977a46e9d7dd203b56a72086dcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4520-99-0x000002B24E1A0000-0x000002B24E28A000-memory.dmp
        Download