Hello Ernie,
you did it - the missing dropbox connection is/was the porblem.
RegOpenKey didn’t take that long, because it is like this
os tries to do an action (e.g. query registry)
once that is done, an event gets sends telling us if it failed or was successful.
procmoc captures that event. So we need to compare this event with the previous one to
see if it has been taken to long.
So in your example RegOpenKey took only 0.0000142 seconds
5:37:51.1926924 PM notepad++.exe 4508 RegQueryKey HKLM SUCCESS Query: Name
5:37:51.1927066 PM notepad++.exe 4508 RegOpenKey HKLM\SOFTWARE\WOW6432Node\Microsoft\CTF\KnownClasses NAME NOT
but next CreateFile took ~40 seconds.
5:38:31.8234932 PM notepad++.exe 4508 CreateFile
Regarding npp and dropbox. Npp doesn’t know about any local images, it treats the dropbox as a “normal” folder.
So when it has been configured to open \\OFFICE-DESKTOP\Dropbox\Private\ERNIES it will try it and only this one.
The reason why this took so long on windows 10 and not on windows 7 might be related to different tcp settings.
When npp tries to open the connection it will wait until the responsible os component comes back. In this case
the os has a defined value how long it waits before returning that it has been failed. The parameters in question
can be found in the registry under HKLM\SYSTEM\CurrentControlSet\Services\Tcpip and with explanation here.
But be warned, there needs to be a good tcp/ip understanding when trying to optimze those settings.
And regarding the -loadingTime parameter, it is case sensitive, so -loadingtime won’t work.
Cheers
Claudia