1

Topic: IRP_MJ_CREATE - Whether will filter discovery of DLL-files by processes?

And discovery as by means of LoadLibrary, and Most is no time while to check "a static" variant (which becomes through.lib))

2

Re: IRP_MJ_CREATE - Whether will filter discovery of DLL-files by processes?

Hello, sergey77666, you wrote: S> And discovery as by means of LoadLibrary, Files  (that in normal winapi CreateFileMapping+MapViewOfFile), before it, accordingly, open NtOpenFile. S> and "the static" variant (which becomes through.lib) Is called "through the import table". There the same. S> most there is no time while to check) I Advise to open for myself SysinternalsSuite as a whole, and Procmon in particular.