Reply to thread

Message

<blockquote data-quote="barbarian1992" data-source="post: 1045828" data-attributes="member: 101493">one more thing(may be i should open another topic for it because its not realted to strings)when i execute the malware,&nbsp; it create a tcp connection to an ip ( i can see it in tcp view)I wanted to find what Api it is using for thati used Api monitor and its not showing me anythingi decided to use use frida-trace ( frida-trace -i &quot;*http*&quot; sample.exe)it did not hook any function . I tried &quot;tcp&quot; but still nothingany suggestion regarding thatbasically i want to see what .net part of the code is responsible of making that connection, put a breakpoint on it and view the parameterthanks for the helphighly appreciated <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="barbarian1992, post: 1045828, member: 101493"] one more thing (may be i should open another topic for it because its not realted to strings) when i execute the malware, it create a tcp connection to an ip ( i can see it in tcp view) I wanted to find what Api it is using for that i used Api monitor and its not showing me anything i decided to use use frida-trace ( frida-trace -i "*http*" sample.exe) it did not hook any function . I tried "tcp" but still nothing any suggestion regarding that basically i want to see what .net part of the code is responsible of making that connection, put a breakpoint on it and view the parameter thanks for the help highly appreciated :) [/QUOTE]

Verification