Execute Before External to Kernel Hypervisor

Description	The 'execute before/external to kernel/hypervisor' value indicates that the malware instance is able to execute some or all of its code before or external to the system's kernel or hypervisor (e.g., through the BIOS).
Relationships	Child of Anti-Detection [C] Child of Hide Executing Code [TO]
References
Examples