drakvuf
drakvuf copied to clipboard
apimon slows down Windows 8.1Update 1 x64
For some reason scanning with dll-hooks.txt like this:
kernel32.dll,GetModuleFileNameA,log,hModule:hmodule,lpFilename:lpstr,nSize:dword
kernel32.dll,GetModuleFileNameW,log,hModule:hmodule,lpFilename:lpstr,nSize:dword
, slows down the Windows several times.
This could be clearly seen with injection of EXCEL.EXE
@skvl So if I understood correctly, you've tested that without just these two hooks it works few times faster?
@icedevml yes. You are right. This is not a big deal to me at the time. I've just noticed that interesting fact.
:thinking: This is worth inspecting. Right now I can't even guess why it could be like that. Thanks for reporting.