Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insane amount of Windows Registry queries, is this normal? #59

Open
Jaid opened this issue Jun 29, 2022 · 0 comments
Open

Insane amount of Windows Registry queries, is this normal? #59

Jaid opened this issue Jun 29, 2022 · 0 comments

Comments

@Jaid
Copy link

Jaid commented Jun 29, 2022

I ran Process Monitor from Sysinternals for 30 minutes and noticed most of the catched entries came from BarRaider tools. They are continously reading from and writing to the Windows Registory folder HKLM\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Enhanced RSA and AES Cryptographic Provider. I don't think it's a big deal security-wise, probably side effects from the .NET API's crypto functions.

But I am wondering about this insane amount. Your tools accessed the Windows Registry several hundreds of thousands of times in a timespan of some minutes, completely topping any other process on my PC. It's happening for multiple of your Stream Deck plugins, so this might be a streamdeck-tools thing and I'm fine opening an issue here. There are even entries for com.barraider.supermacro.exe and com.barraider.voicemeeter.exe, which I installed from the Elgato Store, but don't have any Stream Deck keys of.

I tried to upload the access log to GitHub Gist, but it was way too large, so I cut the recording down to 3 minutes, resulting in 48885 access entries from BarRaider apps.

https://gist.github.com/Jaid/ebdb76202ef8ca1589acb3bd5d999f82

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant