RomulusLoader File Persistence via Vulkan Components

Duo Tech@duotech

•updated Jun 5, 2026•0•0•5

Detects the creation of Vulkan components (e.g., vulkan-1.dll, .bin files) within the C:\Program Files\Common Files\ directory. This behavior is associated with TA4922 leveraging RomulusLoader for persistence via DLL sideloading.