Overview
overview
7Static
static
5Resident.E...RI.rar
windows11-21h2-x64
7ColdClientLoader.ini
windows11-21h2-x64
3EfiGuard/E...xe.dll
windows11-21h2-x64
1EfiGuard/E...ol.exe
windows11-21h2-x64
EfiGuard/E...64.exe
windows11-21h2-x64
EfiGuard/E...er.dll
windows11-21h2-x64
1EfiGuard/E...ix.exe
windows11-21h2-x64
1KIRIGIRI.dll
windows11-21h2-x64
1READNFO-MK...AM.txt
windows11-21h2-x64
3SimpleSvm.sys
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1amd_ags_x64.dll
windows11-21h2-x64
1coldclient...64.dll
windows11-21h2-x64
1coldclient...pp.ini
windows11-21h2-x64
3coldclient...in.ini
windows11-21h2-x64
3coldclient...er.ini
windows11-21h2-x64
3coldclient...id.txt
windows11-21h2-x64
3coldclient...es.txt
windows11-21h2-x64
3coldclient...nt.dll
windows11-21h2-x64
3coldclient...64.dll
windows11-21h2-x64
1hyperevade.dll
windows11-21h2-x64
1hyperhv.dll
windows11-21h2-x64
1hyperkd.sys
windows11-21h2-x64
1hyperlog.dll
windows11-21h2-x64
1hyperlog.inf
windows11-21h2-x64
3kdserial.dll
windows11-21h2-x64
1steamclien...64.exe
windows11-21h2-x64
1watchdog.exe
windows11-21h2-x64
1Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/03/2026, 17:24
Static task
static1
Behavioral task
behavioral1
Sample
Resident.Evil.Requiem.HYPERVISOR.V2-KIRIGIRI.rar
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
ColdClientLoader.ini
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
EfiGuard/EFI/Boot/EfiGuardDxe.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
EfiGuard/EFI/Boot/HashTool.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
EfiGuard/EFI/Boot/bootx64.exe
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
EfiGuard/EFI/Boot/loader.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
EfiGuard/EfiDSEFix.exe
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
KIRIGIRI.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
READNFO-MKDEV TEAM.txt
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
SimpleSvm.sys
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
amd_ags_x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
coldclient/GameOverlayRenderer64.dll
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
coldclient/steam_settings/configs.app.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
coldclient/steam_settings/configs.main.ini
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
coldclient/steam_settings/configs.user.ini
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
coldclient/steam_settings/steam_appid.txt
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
coldclient/steam_settings/steam_interfaces.txt
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
coldclient/steamclient.dll
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
coldclient/steamclient64.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
hyperevade.dll
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
hyperhv.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
hyperkd.sys
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
hyperlog.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
hyperlog.inf
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
kdserial.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
steamclient_loader_x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
watchdog.exe
Resource
win11-20260130-en
Errors
General
- Target EfiGuard/EFI/Boot/bootx64.exe
- Size 98KB
- Sample260308-vysfzset3p
- SHA256 50906114c5a3f93c10102829d057206e3c32bedff4aed3f89a576de1c9e9e5aa
- MD5 4f7a4f566781869d252a09dc84923a82
- SHA1 f9eff9ca458f7d3f47c7d7c56752ec208416f4b1
- SHA512 c73583439ad989f5eb3a68753df56a06dc2f04b637415e3c515c74654651e0991a1d5f0ab84da4cd1d681d29a35271ff584a5b988b28ce1b810f94c0d0a57aff
- SSDEEP 1536:SXORuaKsUT4K6ju2aDeGjlfYFOYg+25dKM278vMhmSc:SXfgUT4Kh2a3fYK+JMSc
- TLSH T1BCA36C17D7D218FED1FAD23046A656327B75F8582762EB272340C6323E22F946F29B50
- MD5 SHA1 SHA512 SSDEEP TLSH