URLhaus Database

You are currently viewing the URLhaus database entry for https://royalcuts.co.uk/Chrome.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3919989
URL:	https://royalcuts.co.uk/Chrome.exe
URL Status:	Online (spreading malware for 4 days, 15 hours, 33 minutes)
Host:	royalcuts.co.uk
Date added:	2026-09-21 13:01:24 UTC
Threat:	Malware download
URLhaus blocklist:	Blocked
Spamhaus DBL :	Abused domain (malware)
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Reporter:	adrian__luca
Abuse complaint sent (?):	Yes (2026-09-21 13:02:16 UTC to abuse{at}bluehost[dot]com,IARPOC{at}Newfold[dot]com)
Tags:	CoinMiner

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2026-09-24	Chrome.exe	exe	d2308ce690cdcc2a36398b46275c093afb4cfb8360324516f331cde41b5280e3	n/a
2026-09-24	Chrome.exe	exe	ab60822572ae0c31a19187ec99094682bc09f99e88962864aecb8e5e469a6f62	n/a
2026-09-24	Chrome.exe	exe	a0c3d3a0a7e98d405e7790f5b4d4129479f340863547d4a59e712d413cd429d5	n/a
2026-09-24	Chrome.exe	exe	45627a26c5fdb3eb090f593e35393fa57467c0312c27568aa4824048bd2b6be9	n/a
2026-09-23	Chrome.exe	exe	083064dacd6619ef207dfb674cf67af146119ec640dfa432bd5bea1ac0f2df7e	n/a
2026-09-23	Chrome.exe	exe	87d61ef22a9b4dcf47511228dab17a117912c723fb8d996395660ca43e6ff259	n/a
2026-09-23	Chrome.exe	exe	2547138e7138b87794fa01aa287fff646cedc5b486ec855de526a36d0222f846	n/a
2026-09-22	Chrome.exe	exe	692581e015122cbee3e114e510c07982731fd084eaf1a875482b122163d01e1e	n/a
2026-09-21	Chrome.exe	exe	7618324f0ee19ea02ac6dd84246501c3de6a4e10d529c63a3a2ce224efd11f24	n/a	CoinMiner