File name:

AcrylicInstaller_2.13_analyzer_Generic.exe

Full analysis: https://app.any.run/tasks/d4a27ad5-371a-4b1e-90b9-3fd1d5eb5c20
Verdict: Malicious activity
Analysis date: March 08, 2026, 03:16:41
OS: Windows 10 Professional (build: 19044, 64 bit)
Tags:
arch-exec
arch-doc
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
MD5:

722FE3E758A7B9569C0CAE6B365B5AE7

SHA1:

27D5F310FD32DC239E9A85683C01C0E463D3FDF6

SHA256:

5E5142666AE09B3DFDAB8D452C1FA5B1A2E0F6A5050F2268D7AEC0BBB6ACC86E

SSDEEP:

3072:O+tBXf+G+vUYsL/YNibZmLmyJiTBLBBhs:Oo7YNibZmDsBLB/s

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Executing a file with an untrusted certificate

      • TRLNDIS_Installer64.exe (PID: 848)

  • SUSPICIOUS

    • Reads the date of Windows installation

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)

    • Searches for installed software

      • AcrylicSuite_analyzer.exe (PID: 2376)

    • Drops 7-zip archiver for unpacking

      • AcrylicSuite_analyzer.exe (PID: 2376)

    • Executable content was dropped or overwritten

      • AcrylicSuite_analyzer.exe (PID: 2376)

    • Executes application which crashes

      • Acrylic.exe (PID: 8428)
      • Acrylic.exe (PID: 6952)

    • The process drops C-runtime libraries

      • AcrylicSuite_analyzer.exe (PID: 2376)

  • INFO

    • Reads the computer name

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • AcrylicSuite_analyzer.exe (PID: 2376)
      • Acrylic.exe (PID: 8428)
      • Acrylic.exe (PID: 6952)

    • Checks supported languages

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • AcrylicSuite_analyzer.exe (PID: 2376)
      • Acrylic.exe (PID: 8428)
      • Acrylic.exe (PID: 6952)
      • TRLNDIS_Installer64.exe (PID: 848)

    • Disables trace logs

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • AcrylicSuite_analyzer.exe (PID: 2376)

    • Reads the machine GUID from the registry

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • AcrylicSuite_analyzer.exe (PID: 2376)
      • Acrylic.exe (PID: 8428)
      • Acrylic.exe (PID: 6952)

    • Checks proxy server information

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • WerFault.exe (PID: 8408)
      • WerFault.exe (PID: 8124)
      • slui.exe (PID: 7972)
      • AcrylicSuite_analyzer.exe (PID: 2376)

    • Reads Environment values

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • AcrylicSuite_analyzer.exe (PID: 2376)

    • Creates files or folders in the user directory

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • WerFault.exe (PID: 8408)
      • WerFault.exe (PID: 8124)

    • Reads security settings of Internet Explorer

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)
      • notepad.exe (PID: 7320)
      • AcrylicSuite_analyzer.exe (PID: 2376)
      • notepad.exe (PID: 6728)
      • notepad.exe (PID: 8552)

    • Process checks computer location settings

      • AcrylicInstaller_2.13_analyzer_Generic.exe (PID: 7088)

    • Create files in a temporary directory

      • AcrylicSuite_analyzer.exe (PID: 2376)

    • The sample compiled with spanish language support

      • AcrylicSuite_analyzer.exe (PID: 2376)

    • SQLite executable

      • AcrylicSuite_analyzer.exe (PID: 2376)

    • Manual execution by a user

      • Acrylic.exe (PID: 8428)
      • notepad.exe (PID: 7320)
      • WinRAR.exe (PID: 3500)
      • Acrylic.exe (PID: 6952)
      • notepad.exe (PID: 8552)
      • notepad.exe (PID: 6728)
      • TRLNDIS_Installer64.exe (PID: 848)
      • TRLNDIS_Installer64.exe (PID: 2896)
      • WinRAR.exe (PID: 4712)

    • The sample compiled with english language support

      • AcrylicSuite_analyzer.exe (PID: 2376)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (49.4)
.scr | Windows screen saver (23.4)
.dll | Win32 Dynamic Link Library (generic) (11.7)
.exe | Win32 Executable (generic) (8)
.exe | Generic Win/DOS Executable (3.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2026:01:26 08:33:12+00:00
ImageFileCharacteristics: Executable, Large address aware
PEType: PE32
LinkerVersion: 48
CodeSize: 101888
InitializedDataSize: 6656
UninitializedDataSize: -
EntryPoint: 0x1a8ae
OSVersion: 4
ImageVersion: -
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 1.14.0.0
ProductVersionNumber: 1.14.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Neutral
CharacterSet: Unicode
Comments: Acrylic Suite products
CompanyName: -
FileDescription: Acrylic
FileVersion: 1.14
InternalName: AcrylicWiFiDownloader.exe
LegalCopyright: Copyright © Tarlogic 2022
LegalTrademarks: Tarlogic
OriginalFileName: AcrylicWiFiDownloader.exe
ProductName: Acrylic Downloader
ProductVersion: 1.14
AssemblyVersion: 1.14.9522.17196
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
164
Monitored processes
15
Malicious processes
0
Suspicious processes
1

Behavior graph

Click at the process to see the details

Process information

PID
CMD
Path
Indicators
Parent process
848"C:\Users\admin\Desktop\Drivers\NDIS\TRLNDIS_Installer64.exe" C:\Users\admin\Desktop\Drivers\NDIS\TRLNDIS_Installer64.exe
explorer.exe
User:
admin
Company:
Tarlogic
Integrity Level:
HIGH
Description:
Tarlogic NDIS Installer
Exit code:
4294967295
Version:
1.1.0.1
Modules
Images
c:\users\admin\desktop\drivers\ndis\trlndis_installer64.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\cfgmgr32.dll
2376"C:\Users\admin\AppData\Roaming\Acrylic Downloader\Temp\AcrylicSuite_analyzer.exe" C:\Users\admin\AppData\Roaming\Acrylic Downloader\Temp\AcrylicSuite_analyzer.exe
AcrylicInstaller_2.13_analyzer_Generic.exe
User:
admin
Integrity Level:
MEDIUM
Description:
Acrylic Suite
Version:
2.13
Modules
Images
c:\users\admin\appdata\roaming\acrylic downloader\temp\acrylicsuite_analyzer.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2896"C:\Users\admin\Desktop\Drivers\NDIS\TRLNDIS_Installer64.exe" C:\Users\admin\Desktop\Drivers\NDIS\TRLNDIS_Installer64.exe—explorer.exe
User:
admin
Company:
Tarlogic
Integrity Level:
MEDIUM
Description:
Tarlogic NDIS Installer
Exit code:
3221226540
Version:
1.1.0.1
Modules
Images
c:\users\admin\desktop\drivers\ndis\trlndis_installer64.exe
c:\windows\system32\ntdll.dll
3500"C:\Program Files\WinRAR\WinRAR.exe" C:\Users\admin\Desktop\DataFiles.7zC:\Program Files\WinRAR\WinRAR.exe—explorer.exe
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Version:
5.91.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
4712"C:\Program Files\WinRAR\WinRAR.exe" C:\Users\admin\Desktop\DataFiles.7zC:\Program Files\WinRAR\WinRAR.exe—explorer.exe
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Version:
5.91.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
6108\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—TRLNDIS_Installer64.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6728"C:\WINDOWS\system32\NOTEPAD.EXE" C:\Users\admin\Desktop\License.txtC:\Windows\System32\notepad.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Notepad
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\notepad.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\user32.dll
6952"C:\Users\admin\Desktop\Acrylic.exe" C:\Users\admin\Desktop\Acrylic.exe
explorer.exe
User:
admin
Company:
Tarlogic Research S.L.
Integrity Level:
MEDIUM
Description:
Acrylic
Exit code:
3762504530
Version:
4.5
Modules
Images
c:\users\admin\desktop\acrylic.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
7088"C:\Users\admin\Desktop\AcrylicInstaller_2.13_analyzer_Generic.exe" C:\Users\admin\Desktop\AcrylicInstaller_2.13_analyzer_Generic.exe
explorer.exe
User:
admin
Integrity Level:
MEDIUM
Description:
Acrylic
Exit code:
0
Version:
1.14
Modules
Images
c:\users\admin\desktop\acrylicinstaller_2.13_analyzer_generic.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
7320"C:\WINDOWS\system32\NOTEPAD.EXE" C:\Users\admin\Desktop\License.txtC:\Windows\System32\notepad.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Notepad
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\notepad.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\user32.dll
Total events
28 385
Read events
28 344
Write events
41
Delete events
0

Modification events

(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASAPI32
Operation:writeName:EnableFileTracing
Value:
0
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASAPI32
Operation:writeName:EnableAutoFileTracing
Value:
0
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASAPI32
Operation:writeName:EnableConsoleTracing
Value:
0
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASAPI32
Operation:writeName:FileTracingMask
Value:
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASAPI32
Operation:writeName:ConsoleTracingMask
Value:
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASAPI32
Operation:writeName:MaxFileSize
Value:
1048576
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASAPI32
Operation:writeName:FileDirectory
Value:
%windir%\tracing
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASMANCS
Operation:writeName:EnableFileTracing
Value:
0
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASMANCS
Operation:writeName:EnableAutoFileTracing
Value:
0
(PID) Process:(7088) AcrylicInstaller_2.13_analyzer_Generic.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\AcrylicInstaller_2_RASMANCS
Operation:writeName:EnableConsoleTracing
Value:
0
Executable files
5
Suspicious files
11
Text files
9
Unknown types
0

Dropped files

PID
Process
Filename
Type
7088AcrylicInstaller_2.13_analyzer_Generic.exeC:\Users\admin\AppData\Roaming\Acrylic Downloader\Temp\AcrylicSuite_analyzer.exe —
MD5:—
SHA256:—
2376AcrylicSuite_analyzer.exeC:\Users\admin\AppData\Local\Temp\Acrylic Suite\Installers\Acrylic_Wi-Fi_Analyzer_v1.5.9543.22123.bin —
MD5:—
SHA256:—
2376AcrylicSuite_analyzer.exeC:\Users\admin\AppData\Local\Temp\Acrylic Suite\Installers\Acrylic_Wi-Fi_Heatmaps_v5.1.9543.22004.bin —
MD5:—
SHA256:—
2376AcrylicSuite_analyzer.exeC:\Users\admin\AppData\Local\Temp\Acrylic Suite\Installers\Acrylic_Wi-Fi_Professional_v4.5.7802.24822.bin —
MD5:—
SHA256:—
2376AcrylicSuite_analyzer.exeC:\Users\admin\AppData\Local\Temp\Acrylic Suite\Installers\Acrylic_Wi-Fi_Sniffer_v2.0.9454.23087.bin —
MD5:—
SHA256:—
2376AcrylicSuite_analyzer.exeC:\Users\admin\AppData\Local\Temp\Acrylic Suite\Installers\Acrylic_Blehome_v1.4.9314.32301.bincompressed
MD5:5BE40F6CC2D578DDBDE402EA63BFFB1B
SHA256:B222FA5000B8210169085DEB76FBE218B8ED998FD931E141569FFBE01D22C9B5
2376AcrylicSuite_analyzer.exeC:\Users\admin\AppData\Local\Temp\Acrylic Suite\Installers\rtx8814x_x64.bincompressed
MD5:D1F7E0123BC2FA0E7A80151CF94EE5B2
SHA256:711C4375A06E0A7BDAFCF6F06C8F964701D989F4FDD60F212784F1F63852A983
2376AcrylicSuite_analyzer.exeC:\Users\admin\AppData\Local\Temp\Acrylic Suite\Installers\sqlite_x64.bincompressed
MD5:A5051CBD88907E16844BDDDC8247E2D3
SHA256:DFDA929B125DC0B6588A6A1E3EF90F9AB730F79C829842A9A4D23C0298CF5356
8408WerFault.exeC:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Acrylic.exe_1109de994e953abda53973c52e7be7e8c990_9fa09a5f_828c2d71-8b0b-42df-9e00-c2109bd61172\Report.wer —
MD5:—
SHA256:—
8408WerFault.exeC:\Users\admin\AppData\Local\CrashDumps\Acrylic.exe.8428.dmp —
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
158
TCP/UDP connections
55
DNS requests
28
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
7088
AcrylicInstaller_2.13_analyzer_Generic.exe
GET
200
172.66.42.234:443
https://www.acrylicwifi.com/AcrylicWifi/downloads/AcrylicDownloaderEvents.php?execution&webUserId=&version=1.14
US
—
—
unknown
9168
svchost.exe
GET
200
23.216.77.6:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
NL
binary
825 b
whitelisted
—
—
GET
200
72.246.29.11:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
US
binary
814 b
whitelisted
9168
svchost.exe
GET
200
72.246.29.11:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
US
binary
814 b
whitelisted
6768
MoUsoCoreWorker.exe
GET
200
72.246.29.11:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
US
binary
814 b
whitelisted
—
—
GET
200
172.66.42.234:443
https://www.acrylicwifi.com/AcrylicWifi/downloads/AcrylicDownloaderEvents.php?execution&webUserId=&version=1.14
US
—
—
—
—
—
GET
200
172.66.42.234:443
https://www.acrylicwifi.com/AcrylicLogos/AcrylicLogo_x64_V2.js
US
text
16 b
unknown
7088
AcrylicInstaller_2.13_analyzer_Generic.exe
GET
200
172.66.42.234:443
https://www.acrylicwifi.com/AcrylicLogos/AcrylicLogo_x64_V2.js
US
—
16 b
unknown
—
—
GET
200
172.66.42.234:443
https://www.acrylicwifi.com/AcrylicLogos/2.13/AcrylicLogo_x64_00.bmp
US
text
1.24 Mb
unknown
—
—
GET
200
172.66.41.22:443
https://www.acrylicwifi.com/AcrylicLogos/2.13/AcrylicLogo_x64_01.bmp
US
binary
1.24 Mb
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
Not routed
—
whitelisted
—
—
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
—
—
184.86.251.27:443
www.bing.com
AKAMAI-ASN1
NL
whitelisted
4
System
192.168.100.255:138
—
Not routed
—
whitelisted
9168
svchost.exe
23.216.77.6:80
crl.microsoft.com
AKAMAI-ASN1
NL
whitelisted
—
—
23.216.77.6:80
crl.microsoft.com
AKAMAI-ASN1
NL
whitelisted
—
—
72.246.29.11:80
www.microsoft.com
AKAMAI-AS
US
whitelisted
9168
svchost.exe
72.246.29.11:80
www.microsoft.com
AKAMAI-AS
US
whitelisted
6768
MoUsoCoreWorker.exe
72.246.29.11:80
www.microsoft.com
AKAMAI-AS
US
whitelisted
6712
svchost.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 20.73.194.208
  • 51.104.136.2
whitelisted
www.bing.com
  • 184.86.251.27
  • 184.86.251.22
whitelisted
self.events.data.microsoft.com
  • 51.116.253.169
  • 20.50.80.210
whitelisted
google.com
  • 142.251.141.142
whitelisted
crl.microsoft.com
  • 23.216.77.6
  • 23.216.77.28
  • 2.16.164.120
  • 2.16.164.49
whitelisted
www.microsoft.com
  • 72.246.29.11
  • 23.52.181.212
whitelisted
www.acrylicwifi.com
  • 172.66.42.234
  • 172.66.41.22
unknown
activation-v2.sls.microsoft.com
  • 48.192.1.65
whitelisted
client.wns.windows.com
  • 172.211.123.249
whitelisted
login.live.com
  • 20.190.160.4
  • 40.126.32.140
  • 20.190.160.20
  • 40.126.32.134
  • 40.126.32.76
  • 20.190.160.128
  • 20.190.160.64
  • 20.190.160.3
  • 20.190.160.130
  • 20.190.160.131
  • 40.126.32.133
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
AcrylicInstaller_2.13_analyzer_Generic.exe