The Suspicious Chocolate.exe

Overview 
 
 Room URL: https://tryhackme.com/room/adventofcyberpreptrack 
 Difficulty: Easy 
 Category: Prep 
 Date Completed: 12/1/2025 
 Objectives 
 Determine if chocolate.exe is safe or infected. 
 
 Table of Contents 
 Introduction 
 Walk Through 
 Lessons Learned 
 Resources 
 
 Introduction 
 A suspicious USB labeled "SOCMAS Party Playlist" containing chocolate.exe arrives on your desk. You must use a simulated VirusTotal tool to scan the file and determine if it's safe or malicious—a critical skill for identifying threats before they compromise systems. 
 
 Walk Through 
 
 Click the view site button on THM
 
 This brings up a simulated virustotal website preloaded with chocolate.exe 
 
 
 Clicking scan to scan the .exe file on virtustotal 
 After clicking scan, the website scans the file and loads the results
 
 The website loaded results from 48 vendors
 
 Clean Vendor A 
 Clean Vendor B 
 Malhare Labs 
 +45 other vendors marked this file as clean 
 
 
 Malhare labs is classified as MalhareTorjan with `ref:ML-2025-011 
 
 
 This file is not free from viruses.
 
 
 
 Lessons Learned 
 In this activity, I learned how to use VirusTotal to scan files for viruses and identify malicious threats across multiple security vendors. 
 
 Resources 
 TryHackMe 
 Virus Total