home

escape plan.zip

MD5:
38564175b23fc5cf014a9b8349a034ea

SHA-1:
efb359a9440f920fa5862e83c33f1299117e3340

SHA-256:
6e8a9de542a3dd815da73725d5aadb310cfb8c54b1ce13ec1f87ce7cb76c30fc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/8/2026 11:05:25 PM UTC  (a few moments ago)

File size:
17.3 KB (17,672 bytes)

Common path:
C:\users\{user}\downloads\escape plan.zip

The file escape plan.zip has been seen being distributed by the following URL.

https://dub111.afx.ms/.../GetAttachment.aspx?file=668fe087-f2c3-49d7-aadf-81cbb19c2b93.zip&ct=YXBwbGljYXRpb24vemlw&name=ZXNjYXBlIHBsYW4uemlw&inline=0&rfc=0&empty=False&cid=8c4405ae809531fe&shared=1&biciPrevious=b68e9af5-7a97-4784-879d-6f8cbd1b926e_006da4057a8_5724&hm__login=bakkr1420&hm__domain=hotmail.com&ip=10.211.24.8&d=d2051&mf=0&hm__ts=Sun, 17 Apr 2016 19:29:08 GMT&st=(00064000E33AA5A5)&hm__ha=01_40ed8dafc6cebc2b0fda76875d1eab4ffc68603eef0f0ad578dfe6cccfaca6f3&oneredir=1

Scan escape plan.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.