Find similar analyses in TI Lookup
Analysis date (UTC): 7 March 2025, 10:41Analysis environment: Windows 10 Pro, build 19045, x64

birdeye.cx

MD5:DAB4F9E293CF3E02C952FE525A42F181
SHA1:20ABC104FB1888BA502231F9210D84A936031B16
SHA256:1DE5F8DE18B7577F2398A3F2ABB56F48C2222572ADE05B1022476A6F62563207

Analysis result

Threat level:Malicious activity
Tags:
evil-redirectphishing
Full analysis:Analysis birdeye.cx Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

PHISHING has been detected (SURICATA)

  • msedge.exe (PID: 7292)

SUSPICIOUS

No suspicious indicators.

INFO

Reads the computer name

  • identity_helper.exe (PID: 6972)

Application launched itself

  • msedge.exe (PID: 2140)

Reads Environment values

  • identity_helper.exe (PID: 6972)

Checks supported languages

  • identity_helper.exe (PID: 6972)

Threats

PIDProcessClassMessage
7292msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Domain identified as Phishing Evil Redirect (birdeye .cx)
7292msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Domain identified as Phishing Evil Redirect (birdeye .cx)
7292msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Domain identified as Phishing Evil Redirect (birdeye .cx)
7292msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Domain identified as Phishing Evil Redirect (birdeye .cx)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED