diff --git a/EDRSandblast/UserlandBypass/UserlandHooks.c b/EDRSandblast/UserlandBypass/UserlandHooks.c
index a6c1c5e..857bd80 100644
--- a/EDRSandblast/UserlandBypass/UserlandHooks.c
+++ b/EDRSandblast/UserlandBypass/UserlandHooks.c
@@ -426,6 +426,9 @@ _Ret_notnull_ HOOK* searchHooks(const char* csvFileName) {
         if (dll_name.Buffer == NULL) {
             continue;
         }
+        if (!_wcsnicmp(dll_name.Buffer, L"api-ms", 6)) {
+            continue;
+        }
         WCHAR* moduleName = currentModuleEntry->FullDllName.Buffer;
 
         if (!hooksFoundInLastModule) {