Attempts to block SafeBoot use by removing registry keys Show sources
| registry_delete | HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option |
Loads a driver Show sources
| driver_load | \Registry\Machine\System\CurrentControlSet\Services\srv |
| driver_load | \Registry\Machine\System\CurrentControlSet\Services\srv |
| driver_load | \Registry\Machine\System\CurrentControlSet\Services\srv |
| driver_load | \Registry\Machine\System\CurrentControlSet\Services\Srv |
| driver_load | \Registry\Machine\System\CurrentControlSet\Services\Srv |
| driver_load | \Registry\Machine\System\CurrentControlSet\Services\Srv |
Attempts to repeatedly call a single API many times in order to delay analysis time Show sources
| api_process_name | services.exe (460) called API GetSystemTimeAsFileTime 9464826 times |