drakvuf icon indicating copy to clipboard operation
drakvuf copied to clipboard

apimon slows down Windows 8.1Update 1 x64

Open skvl opened this issue 4 years ago • 4 comments

For some reason scanning with dll-hooks.txt like this:

kernel32.dll,GetModuleFileNameA,log,hModule:hmodule,lpFilename:lpstr,nSize:dword
kernel32.dll,GetModuleFileNameW,log,hModule:hmodule,lpFilename:lpstr,nSize:dword

, slows down the Windows several times.

This could be clearly seen with injection of EXCEL.EXE

skvl avatar Sep 23 '20 16:09 skvl

@skvl So if I understood correctly, you've tested that without just these two hooks it works few times faster?

icedevml avatar Sep 23 '20 20:09 icedevml

@icedevml yes. You are right. This is not a big deal to me at the time. I've just noticed that interesting fact.

skvl avatar Sep 24 '20 05:09 skvl

:thinking: This is worth inspecting. Right now I can't even guess why it could be like that. Thanks for reporting.

icedevml avatar Sep 24 '20 09:09 icedevml