search

hasherezade / tiny_tracer

A Pin Tool for tracing API calls etc
1.25k stars 138 forks source link

Running tiny_tracer from the menu prompts: "You'll need a new app to open this .exe file" #15

Closed lfontesm closed 1 year ago

lfontesm commented 2 years ago

I've followed the instructions, but whenever I try run an exe file with tiny_tracer i get prompted that i need a new app to open the result. I've tried selecting notepad.exe and instead of tracing the API calls it's dumping the exe I've made sure my pin install dir is C:\pin, put the compiled dlls in the install32_64 dir, and all Maybe I'm missing something, but i'm pretty sure i've followed all the steps carefuly.

Cheers!

image

lfontesm commented 2 years ago

Btw, I think it's important to note that i was using flare-vm

hasherezade commented 2 years ago

hi! I suspect it happens because one of the components: kdb_check.exe got flagged by your AV (as the readme says here) in order to confirm if this is indeed the problem, can you run kdb_check.exe as standalone, and tell me what do you see?

hasherezade commented 2 years ago

A similar problem was reported in this thread: https://github.com/hasherezade/tiny_tracer/issues/12

hasherezade commented 2 years ago

You can also try replacing the run_me.bat by this one:

and let me know if it fixed the issue.

lfontesm commented 1 year ago

I was so sure I had disclosed the solution to the issue back then! I'm so sorry to leave you hanging. Actually came back to this issue because I wanted to read what I had written. But in short: The issue was all me being very stupid. It was a typing error by typing "tiny-tracer" with a dash ('-') instead of "tinytracer" with an underscore ("").

Again, so sorry to leave you hanging :(