Closed j00sean closed 6 years ago
Once applied the latest updates (2018-05), everything has been working fine but only for one attempt. But it was impossible to retry. So this is also confirmed on Microsoft Windows [Version 10.0.17134.81]. I forgot to mention that when the system is started there is already one MicrosoftEdge.exe process and a couple of MicrosoftEdgeCP.exe processes:
C:\Users\IEUser>tasklist /apps /fi "STATUS eq Suspended"
Image Name PID Mem Usage Package Name
================================================== ======== ============ ==================================================
ShellExperienceHost.exe (App) 4820 58,752 K Microsoft.Windows.ShellExperienceHost_10.0.17134.1
SearchUI.exe (CortanaUI) 4260 103,668 K Microsoft.Windows.Cortana_1.10.7.17134_neutral_neu
SkypeHost.exe (ppleae38af2e007f4358a809ac99a64a67c 2796 12,252 K Microsoft.SkypeApp_12.1815.209.0_x64kzf8qxf38zg5
MicrosoftEdge.exe (MicrosoftEdge) 5364 286,464 K Microsoft.MicrosoftEdge_42.17134.1.0_neutral8wek
MicrosoftEdgeCP.exe (ContentProcess) 6120 52,204 K Microsoft.MicrosoftEdge_42.17134.1.0_neutral8wek
MicrosoftEdgeCP.exe (ContentProcess) 6128 45,388 K Microsoft.MicrosoftEdge_42.17134.1.0_neutral8wek
This is the output of BugId:
Microsoft Windows [Version 10.0.17134.81] (c) 2018 Microsoft Corporation. All rights reserved.
C:\Users\IEUser\Desktop\BugId>python BugId.py -v edge
┌─ Software license warning ─────────────────────────────────────────────────────────────────────────────────────────── │ You have no license for mFileSystem and your trial period will expire on 2018-06-30 │ You have no license for mWindowsAPI and your trial period will expire on 2018-06-30 │ You have no license for cBugId and your trial period will expire on 2018-06-30 │ You have no license for BugId and your trial period will expire on 2018-06-30 │ You have no license for mProductDetails and your trial period will expire on 2018-06-30 │ You have no license for oConsole and your trial period will expire on 2018-06-30 └────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 1 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 4 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 5 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 10 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 10 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 30 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 30 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{CD261D52-DA8D-4B0A-B269-10E9C45AEDA0}.dat, will retry in 30 seconds ┌─ An internal exception has occured ────────────────────────────────────────────────────────────────────────────────── │ WindowsError(32, 'The process cannot access the file because it is being used by another process') │ │ Stack: │ 0 febDeleteChildrenFromFolder @ C:\Users\IEUser\Desktop\BugId\modules\mFileSystem\mFileSystem.py/309 │ > os.remove(sChildPath); │ 1 fbDeleteChildrenFromFolder @ C:\Users\IEUser\Desktop\BugId\modules\mFileSystem\mFileSystem.py/246 │ > ebResult = febDeleteChildrenFromFolder(*asPathSections, **dxArguments); │ 2 fDeleteRecovery @ C:\Users\IEUser\Desktop\BugId\ddxApplicationSettings_by_sKeyword\ddxMicrosoftEdgeSettings_by_sKeyword.py/41 │ > mFileSystem.fbDeleteChildrenFromFolder(sEdgeRecoveryPath); │ 3 fEdgeSetup @ C:\Users\IEUser\Desktop\BugId\ddxApplicationSettings_by_sKeyword\ddxMicrosoftEdgeSettings_by_sKeyword.py/33 │ > fDeleteRecovery(); │ 4 fMain @ BugId.py/740 │ > fSetup(bFirstRun = uRunCounter == 0); │ 5 BugId.py/883 │ > fMain(sys.argv[1:]); └──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Please report the above details at the below web-page so it can be addressed: https://github.com/SkyLined/BugId/issues/new If you do not have a github account, or you want to report this issue privately, you can also send an email to: BugId@skylined.nl
In your report, please copy the information about the exception reported above, as well as the stack trace and BugId version information. This makes it easier to determine the cause of this issue and makes for faster fixes.
┌─ Version information ──────────────────────────────────────────────────────────────────────────────────────────────── │ ∙ BugId version: 2018-05-30 19:58 (in trial period). │ You are running an old version: the latest released version is 2018-05-31 05:41, available at https://github.com/SkyLined/BugId/archive/master.zip. │ ∙ mFileSystem version: 2018-05-30 11:27 (in trial period). │ ∙ mWindowsAPI version: 2018-05-18 08:51 (in trial period). │ ∙ cBugId version: 2018-05-30 19:54 (in trial period). │ You are running an old version: the latest released version is 2018-05-31 05:32, available at https://github.com/SkyLined/cBugId/archive/master.zip. │ ∙ mProductDetails version: 2018-04-18 21:07 (in trial period). │ You are running an old version: the latest released version is 2018-05-31 05:30, available at https://github.com/SkyLined/mProductDetails/archive/master.zip. │ ∙ oConsole version: 2018-05-30 11:28 (in trial period). │ You are running an old version: the latest released version is 2018-05-31 06:56, available at https://github.com/SkyLined/oConsole/archive/master.zip. │ ∙ Windows version: Windows 10 Enterprise Evaluation release 1803, build 17134 x64. │ ∙ Python version: 2.7.14 x64. └──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
┌─ Software license warning ─────────────────────────────────────────────────────────────────────────────────────────── │ You have no license for mFileSystem and your trial period will expire on 2018-06-30 │ You have no license for mWindowsAPI and your trial period will expire on 2018-06-30 │ You have no license for cBugId and your trial period will expire on 2018-06-30 │ You have no license for BugId and your trial period will expire on 2018-06-30 │ You have no license for mProductDetails and your trial period will expire on 2018-06-30 │ You have no license for oConsole and your trial period will expire on 2018-06-30 └──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Thank you in advance for helping to improve BugId!
BugId is stopped and these processes are manually killed. Then it happens the issue posted above.
I found a way to avoid this annoying issue. Basically it's related to kill these processes as soon. In summary: start Windows, wait a while (undetermined yet), kill the processes and launch BugId. For example, just launch BugId twice (the above error is triggered), kill the processes and relaunch BugId:
Microsoft Windows [Version 10.0.17134.81] (c) 2018 Microsoft Corporation. All rights reserved.
C:\Users\IEUser\Desktop\BugId>python BugId.py -v edge
┌─ Software license warning ─────────────────────────────────────────────────────────────────────────────────────────── │ You have no license for mFileSystem and your trial period will expire on 2018-06-30 │ You have no license for mWindowsAPI and your trial period will expire on 2018-06-30 │ You have no license for cBugId and your trial period will expire on 2018-06-30 │ You have no license for BugId and your trial period will expire on 2018-06-30 │ You have no license for mProductDetails and your trial period will expire on 2018-06-30 │ You have no license for oConsole and your trial period will expire on 2018-06-30 └────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 1 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 4 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 5 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 10 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 10 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 30 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 30 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 30 seconds ┌─ An internal exception has occured ────────────────────────────────────────────────────────────────────────────────── │ WindowsError(32, 'The process cannot access the file because it is being used by another process') │ │ Stack: │ 0 febDeleteChildrenFromFolder @ C:\Users\IEUser\Desktop\BugId\modules\mFileSystem\mFileSystem.py/309 │ > os.remove(sChildPath); │ 1 fbDeleteChildrenFromFolder @ C:\Users\IEUser\Desktop\BugId\modules\mFileSystem\mFileSystem.py/246 │ > ebResult = febDeleteChildrenFromFolder(*asPathSections, **dxArguments); │ 2 fDeleteRecovery @ C:\Users\IEUser\Desktop\BugId\ddxApplicationSettings_by_sKeyword\ddxMicrosoftEdgeSettings_by_sKeyword.py/41 │ > mFileSystem.fbDeleteChildrenFromFolder(sEdgeRecoveryPath); │ 3 fEdgeSetup @ C:\Users\IEUser\Desktop\BugId\ddxApplicationSettings_by_sKeyword\ddxMicrosoftEdgeSettings_by_sKeyword.py/33 │ > fDeleteRecovery(); │ 4 fMain @ BugId.py/740 │ > fSetup(bFirstRun = uRunCounter == 0); │ 5 BugId.py/883 │ > fMain(sys.argv[1:]); └────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── ... C:\Users\IEUser\Desktop\BugId>python BugId.py -v edge
┌─ Software license warning ─────────────────────────────────────────────────────────────────────────────────────────── │ You have no license for mFileSystem and your trial period will expire on 2018-06-30 │ You have no license for mWindowsAPI and your trial period will expire on 2018-06-30 │ You have no license for cBugId and your trial period will expire on 2018-06-30 │ You have no license for BugId and your trial period will expire on 2018-06-30 │ You have no license for mProductDetails and your trial period will expire on 2018-06-30 │ You have no license for oConsole and your trial period will expire on 2018-06-30 └────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 1 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 4 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 5 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 10 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 10 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 30 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 30 seconds Error WindowsError(32, 'The process cannot access the file because it is being used by another process') while attempting to delete file \?\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{4B8131C5-BE4B-4005-A67F-140DDA6F53C4}.dat, will retry in 30 seconds ... C:\Users\IEUser\Desktop\BugId>taskkill /f /im MicrosoftEdge.exe SUCCESS: The process "MicrosoftEdge.exe" with PID 5368 has been terminated.
C:\Users\IEUser\Desktop\BugId>python BugId.py -v edge
┌─ Software license warning ─────────────────────────────────────────────────────────────────────────────────────────── │ You have no license for mFileSystem and your trial period will expire on 2018-06-30 │ You have no license for mWindowsAPI and your trial period will expire on 2018-06-30 │ You have no license for cBugId and your trial period will expire on 2018-06-30 │ You have no license for BugId and your trial period will expire on 2018-06-30 │ You have no license for mProductDetails and your trial period will expire on 2018-06-30 │ You have no license for oConsole and your trial period will expire on 2018-06-30 └──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
6ca20000 00007ff6
6ca83000 cmd.exe
stdout>ModLoad: 00007ffe2e0f0000 00007ffe
2e2d1000 ntdll.dll
stdout>ModLoad: 00007ffe2da90000 00007ffe
2db42000 C:\Windows\System32\KERNEL32.DLL
stdout>ModLoad: 00007ffe2aca0000 00007ffe
2af13000 C:\Windows\System32\KERNELBASE.dll
stdout>ModLoad: 00007ffe2d9f0000 00007ffe
2da8e000 C:\Windows\System32\msvcrt.dll
stdout>(132c.1218): Break instruction exception - code 80000003 (first chance)
stdout>ntdll!LdrpDoDebuggerBreak+0x30:
stdout>00007ffe`2e1bd02c cc int 3
stdout>0:000>
<stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .prompt_allow -dis -ea -reg -src -sym; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Display only the prompt
stdout><☺[☻{
stdout>Allow the following information to be displayed at the prompt:
stdout>(Other settings can affect whether the information is actually displayed)
stdout> None
stdout>Do not allow the following information to be displayed at the prompt:
stdout> sym - Symbol for current instruction
stdout> dis - Disassembly of current instruction
stdout> ea - Effective address for current instruction
stdout> reg - Register state
stdout> src - Source info for current instruction
stdout>}☻]☺>
...
<stdin<gh;
stdout>
stdout>* Path validation summary **
log>StdOut output (Line: ***** Path validation summary **)
stdout>Response Time (ms) Location
log>StdOut output (Line: Response Time (ms) Location)
stdout>Deferred cache
log>StdOut output (Line: Deferred cache)
stdout>Deferred srvhttp://msdl.microsoft.com/download/symbols
log>StdOut output (Line: Deferred srvhttp://msdl.microsoft.com/download/symbols)
stdout>Symbol search path is: cache;srvhttp://msdl.microsoft.com/download/symbols
log>StdOut output (Line: Symbol search path is: cache;srvhttp://msdl.microsoft.com/download/symbols)
stdout>Executable search path is:
log>StdOut output (Line: Executable search path is: )
stdout>
stdout>1:002>
<stdin<
stdout>1:002>
<stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .lastevent; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Get information about last event
stdout><☺[☻{
stdout>Last event: 1bec.fac: Create process 1:1bec
stdout> debugger time: Thu May 31 15:13:40.428 2018 (UTC - 7:00)
stdout>}☻]☺>
stdout>1:002>
<stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ |~[0x1BEC]s; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Select process
stdout><☺[☻{
stdout>
stdout>}☻]☺>
stdout>1:002>
<stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ r @$tid; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Get current thread id
stdout><☺[☻{
stdout>$tid=0000000000000fac
stdout>}☻]☺>
stdout>1:002>
log>Process attached (Command line: "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca, Is main process: yes, Process id: 7148/0x1BEC, Binary name: MicrosoftEdge.exe)The virtual machine that i'm testing is not very clean, so i'm not sure whether this is a general issue or not. I will do more testing using clean VMs next days and will keep you informed.
I'm gonna close this issue since it looks to be related to Windows or cdb/windbg itself. So it's not an issue in BugId. Thread confirming this guess: https://twitter.com/w3bd3vil/status/1002612500989280256 My solution, by the moment, is: while RuntimeBroker is suspended, edge cannot be debugged. If you kill the process RuntimeBroker.exe and the dbgsrv window appears, kill it once and again until it's running. Then, BugId and other debuggers will work fine.
OS: https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/ Virtual Machine: MSEdge on Win10 (x64) Stable (17.17134) Select platform: VirtualBox
Enviroment: Microsoft Windows [Version 10.0.17134.48] Microsoft (R) Windows Debugger Version 10.0.17134.12 AMD64 C:\Users\IEUser\Desktop\BugId>python --version Python 2.7.14 C:\Users\IEUser\Desktop\BugId>python BugId.py --version ┌─ Version information ──────────────────────────────────────────────────────────────────────────────────────────────── │ ∙ BugId version: 2018-05-30 19:58 installed at C:\Users\IEUser\Desktop\BugId (in trial period). │ You are running an old version: the latest released version is 2018-05-31 05:41, available at https://github.com/SkyLined/BugId/archive/master.zip. │ ∙ mFileSystem version: 2018-05-30 11:27 installed at C:\Users\IEUser\Desktop\BugId\modules\mFileSystem (in trial period). │ ∙ mWindowsAPI version: 2018-05-18 08:51 installed at C:\Users\IEUser\Desktop\BugId\modules\mWindowsAPI (in trial period). │ ∙ cBugId version: 2018-05-30 19:54 installed at C:\Users\IEUser\Desktop\BugId\modules\cBugId (in trial period). │ You are running an old version: the latest released version is 2018-05-31 05:32, available at https://github.com/SkyLined/cBugId/archive/master.zip. │ ∙ mProductDetails version: 2018-04-18 21:07 installed at C:\Users\IEUser\Desktop\BugId\modules\mProductDetails (in trial period). │ You are running an old version: the latest released version is 2018-05-31 05:30, available at https://github.com/SkyLined/mProductDetails/archive/master.zip. │ ∙ oConsole version: 2018-05-30 11:28 installed at C:\Users\IEUser\Desktop\BugId\modules\oConsole (in trial period). │ You are running an old version: the latest released version is 2018-05-31 06:56, available at https://github.com/SkyLined/oConsole/archive/master.zip. │ ∙ Windows version: Windows 10 Enterprise Evaluation release 1803, build 17134 x64. │ ∙ Python version: 2.7.14 x64. ├─ License information ──────────────────────────────────────────────────────────────────────────────────────────────── │ ∙ mFileSystem, mWindowsAPI, cBugId, BugId, mProductDetails, and oConsole are not covered by a valid, active license but they are in their trial period. └──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
┌─ Software license warning ─────────────────────────────────────────────────────────────────────────────────────────── │ You have no license for mFileSystem and your trial period will expire on 2018-06-30 │ You have no license for mWindowsAPI and your trial period will expire on 2018-06-30 │ You have no license for cBugId and your trial period will expire on 2018-06-30 │ You have no license for BugId and your trial period will expire on 2018-06-30 │ You have no license for mProductDetails and your trial period will expire on 2018-06-30 │ You have no license for oConsole and your trial period will expire on 2018-06-30 └──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
C:\Users\IEUser\Desktop\BugId>python BugId.py -v edge
┌─ Software license warning ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── │ You have no license for mFileSystem and your trial period will expire on 2018-06-30 │ You have no license for mWindowsAPI and your trial period will expire on 2018-06-30 │ You have no license for cBugId and your trial period will expire on 2018-06-30 │ You have no license for BugId and your trial period will expire on 2018-06-30 │ You have no license for mProductDetails and your trial period will expire on 2018-06-30 │ You have no license for oConsole and your trial period will expire on 2018-06-30 └──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
dde10000 00007ff6
dde73000 cmd.exe stdout>ModLoad: 00007ff981d60000 00007ff9
81f41000 ntdll.dll stdout>ModLoad: 00007ff97f1f0000 00007ff9
7f2a2000 C:\Windows\System32\KERNEL32.DLL stdout>ModLoad: 00007ff97e130000 00007ff9
7e3a3000 C:\Windows\System32\KERNELBASE.dll stdout>ModLoad: 00007ff97fc80000 00007ff9
7fd1e000 C:\Windows\System32\msvcrt.dll stdout>(1c9c.1f38): Break instruction exception - code 80000003 (first chance) stdout>ntdll!LdrpDoDebuggerBreak+0x30: stdout>00007ff9`81e2d02c cc int 3 stdout>0:000> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .prompt_allow -dis -ea -reg -src -sym; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Display only the prompt stdout><☺[☻{ stdout>Allow the following information to be displayed at the prompt: stdout>(Other settings can affect whether the information is actually displayed) stdout> None stdout>Do not allow the following information to be displayed at the prompt: stdout> sym - Symbol for current instruction stdout> dis - Disassembly of current instruction stdout> ea - Effective address for current instruction stdout> reg - Register state stdout> src - Source info for current instruction stdout>}☻]☺> stdout>0:000> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .pcmd -s ".printf \"\r\n\";"; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Output a CRLF after running the application stdout><☺[☻{ stdout>Set prompt command stdout>Per-prompt command is '.printf "\r\n";' stdout>}☻]☺> stdout>0:000> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .lastevent; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Get information about last event stdout><☺[☻{ stdout>Last event: 1c9c.1f38: Break instruction exception - code 80000003 (first chance) stdout> debugger time: Thu May 31 06:52:56.367 2018 (UTC - 7:00) stdout>}☻]☺> stdout>0:000> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ sxd *; sxi ibp; sxi ld; sxi ud; sxi 0x80000007; sxi 0xE06D7363; sxi 0x40080201; sxi 0x40080202; sxd 0xC0000420; sxe cpr; sxe epr; sxe aph; sxe 0xC0000005; sxe 0x80000003; sxe 0xC000008C; sxe 0x80000002; sxe 0xC0000602; sxe 0x80000001; sxe 0xC000001D; sxe 0xC0000006; sxe 0xC0000096; sxe 0xC0000409; sxe 0xC00000FD; sxe 0x4000001F; sxe out; sxe 0x80070008; sxe 0x8007000E; sxe 0x8007046A; sxe 0x80073623; sxe 0xC0000017; sxe 0xE0000008; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Setup exception handling stdout><☺[☻{ stdout>}☻]☺> stdout>0:000> log>Utility process created (Process id: 7324/0x1C9C) log>Terminating UWP application (Application Id: MicrosoftEdge, Package name: Microsoft.MicrosoftEdge, Package full name: Microsoft.MicrosoftEdge_42.17134.1.0_neutral8wekyb3d8bbwe) <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .terminatepackageapp Microsoft.MicrosoftEdge_42.17134.1.0_neutral8wekyb3d8bbwe; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Terminate UWP application Microsoft.MicrosoftEdge stdout><☺[☻{ stdout>}☻]☺> stdout>0:000> log>Starting UWP application (Argument: http://MSEDGEWIN10:28876/, Application Id: MicrosoftEdge, Package name: Microsoft.MicrosoftEdge, Package full name: Microsoft.MicrosoftEdge_42.17134.1.0_neutral8wekyb3d8bbwe) <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .createpackageapp Microsoft.MicrosoftEdge_42.17134.1.0_neutral8wekyb3d8bbwe MicrosoftEdge http://MSEDGEWIN10:28876/ ; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Start UWP application Microsoft.MicrosoftEdge stdout><☺[☻{ stdout>Attach will occur on next execution stdout>}☻]☺> stdout>0:000> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .time; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Get debugger time stdout><☺[☻{ stdout>Debug session time: Thu May 31 06:52:56.993 2018 (UTC - 7:00) stdout>System Uptime: 0 days 2:20:34.602 stdout>Process Uptime: 0 days 0:00:00.691 stdout> Kernel time: 0 days 0:00:00.000 stdout> User time: 0 days 0:00:00.000 stdout>}☻]☺> stdout>0:000> <stdin<gh; stdout> stdout>***** Path validation summary ** log>StdOut output (Line: * Path validation summary **) stdout>Response Time (ms) Location log>StdOut output (Line: Response Time (ms) Location) stdout>Deferred cache log>StdOut output (Line: Deferred cache) stdout>Deferred srvhttp://msdl.microsoft.com/download/symbols log>StdOut output (Line: Deferred srvhttp://msdl.microsoft.com/download/symbols) stdout>Symbol search path is: cache;srvhttp://msdl.microsoft.com/download/symbols log>StdOut output (Line: Symbol search path is: cache;srvhttp://msdl.microsoft.com/download/symbols) stdout>Executable search path is: log>StdOut output (Line: Executable search path is: ) stdout> stdout>1:002> <stdin< stdout>1:002> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ .lastevent; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Get information about last event stdout><☺[☻{ stdout>Last event: 239c.1724: Create process 1:239c stdout> debugger time: Thu May 31 06:52:58.010 2018 (UTC - 7:00) stdout>}☻]☺> stdout>1:002> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ |~[0x239C]s; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Select process stdout><☺[☻{ stdout> stdout>}☻]☺> stdout>1:002> <stdin<.printf "%c%c%c%c%c\r\n", 0x3C, 0x1, 0x5B, 0x2, 0x7B; .block{ r @$tid; }; .printf "%c%c%c%c%c\r\n", 0x7D, 0x2, 0x5D, 0x1, 0x3E; $$ Get current thread id stdout><☺[☻{ stdout>$tid=0000000000001724 stdout>}☻]☺> stdout>1:002> log>Process attached (Command line: "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca, Is main process: yes, Process id: 9116/0x239C, Binary name: MicrosoftEdge.exe)Over this point the debugging process is freezed. Runtime broker process is suspended and no microsoftedgecp.exe is spawned.
We stop BugId and manually kill the processes ApplicationFrameHost, MicrosoftEdge and RuntimeBroker. Starting again BugId an error window like this is observed