URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as PureHVNC.

Database Entry

Payload

The table below shows all payloads that have been identified as PureHVNC.

Firstseen (UTC)	SHA256	File Type	File size	VT
2026-03-18 11:49:06	356692ba173ea9fe8eafbf0173f6238d93f635e80061888b98a217477bfddcd2	exe	644'096	n/a
2026-03-18 08:05:08	2ebe789f6c34a6e27c8ba379fdcc7b8d30ae0997b5564d3a844c5f2f30039340	exe	592'896	n/a
2026-03-17 16:56:52	363c13183a809554474b8286e02a0b62c6a864be56c40d134799a072fce87e88	exe	643'072	n/a
2026-03-13 06:29:06	052fe35212937116240716b55603cb62ad3e76a2fa0464aa046225fa62a26e32		46'769	n/a
2026-02-16 10:30:07	d2aa7cd8ec3ca9782b4ecffe1c2fc20b9ca6da3a999ade3c5df0d4b8b856d620	exe	635'904	n/a

Number of entries displayed: 5 (max: 1'000)