Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
sha256
3111f4d7d4fac55103453c4c8adb742def007b96b7c8ed265347df97137fbee0
copy defanged
copy refanged (live)
First seen
2026-05-13
Last seen
2026-05-13
Sightings
1
Posts referencing this indicator
They Got In Through SonicWall. Then They Tried to Kill Every Security Tool
Huntress
Vulnerable EnCase forensic driver (EnPortv.sys) dropped as OemHwUpd.sys.
2026-05-13
3111f4d7d4fac55103453c4c8adb742def007b96b7c8ed265347df97137fbee0 · SHA-256 hash · cyfar.ca