Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Initializing wait objects...
- Initializing debugger...
- Initializing debugger functions...
- Setting JSON memory management functions...
- Initializing Zydis...
- Getting directory information...
- Start file read thread...
- Retrieving syscall indices...
- Symbol Path: C:\Program Files\x64dbg\x64\symbols
- Allocating message stack...
- Initializing global script variables...
- Registering debugger commands...
- Registering GUI command handler...
- Registering expression functions...
- Registering format functions...
- Registering Script DLL command handler...
- Starting command loop...
- Initialization successful!
- Loading plugins...
- Handling command line...
- "C:\Program Files\x64dbg\x64\x64dbg.exe"
- Syscall indices loaded!
- Error codes database loaded!
- Exception codes database loaded!
- NTSTATUS codes database loaded!
- Windows constant database loaded!
- Reading notes file...
- File read thread finished!
- Debugging: C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\QuickAssist.exe
- Database file: C:\Program Files\x64dbg\x64\db\QuickAssist.exe.dd64
- Process Started: 00007FF69EA10000 C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\QuickAssist.exe
- "C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\QuickAssist.exe"
- argv[0]: C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\QuickAssist.exe
- DLL Loaded: 00007FFE694B0000 C:\Windows\System32\ntdll.dll
- DLL Loaded: 00007FFE68CB0000 C:\Windows\System32\kernel32.dll
- DLL Loaded: 00007FFE66E20000 C:\Windows\System32\KernelBase.dll
- DLL Loaded: 00007FFE67FF0000 C:\Windows\System32\oleaut32.dll
- DLL Loaded: 00007FFE66C20000 C:\Windows\System32\msvcp_win.dll
- DLL Loaded: 00007FFE67410000 C:\Windows\System32\ucrtbase.dll
- Thread CC4 created, Entry: ntdll.00007FFE694C20E0
- Thread 1454 created, Entry: ntdll.00007FFE694C20E0
- DLL Loaded: 00007FFE67C90000 C:\Windows\System32\combase.dll
- DLL Loaded: 00007FFE68FA0000 C:\Windows\System32\rpcrt4.dll
- Thread 2AD8 created, Entry: ntdll.00007FFE694C20E0
- DLL Loaded: 00007FFE68D80000 C:\Windows\System32\user32.dll
- DLL Loaded: 00007FFE66BF0000 C:\Windows\System32\win32u.dll
- DLL Loaded: 00007FFE67510000 C:\Windows\System32\gdi32.dll
- DLL Loaded: 00007FFE670F0000 C:\Windows\System32\gdi32full.dll
- DLL Loaded: 00007FFE68660000 C:\Windows\System32\SHCore.dll
- DLL Loaded: 00007FFE685C0000 C:\Windows\System32\msvcrt.dll
- DLL Loaded: 00007FFE68470000 C:\Windows\System32\ole32.dll
- DLL Loaded: 00007FFE4CBC0000 C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.630_none_fae7a41d761b04f0\GdiPlus.dll
- DLL Loaded: 00007FFE67540000 C:\Windows\System32\shell32.dll
- DLL Loaded: 00007FFE5DF40000 C:\Windows\System32\urlmon.dll
- DLL Loaded: 00007FFE64680000 C:\Windows\System32\uxtheme.dll
- DLL Loaded: 00007FFE683C0000 C:\Windows\System32\advapi32.dll
- DLL Loaded: 00007FFE5E520000 C:\Windows\System32\iertutil.dll
- DLL Loaded: 00007FFE692F0000 C:\Windows\System32\sechost.dll
- DLL Loaded: 00007FFE621E0000 C:\Windows\System32\d2d1.dll
- DLL Loaded: 00007FFE66CC0000 C:\Windows\System32\crypt32.dll
- DLL Loaded: 00007FFE63C70000 C:\Windows\System32\d3d11.dll
- DLL Loaded: 00007FFE65540000 C:\Windows\System32\dxgi.dll
- DLL Loaded: 00007FFE5A1A0000 C:\Windows\System32\netapi32.dll
- DLL Loaded: 00007FFE4A590000 C:\Windows\System32\mdmregistration.dll
- DLL Loaded: 00007FFE627A0000 C:\Windows\System32\dcomp.dll
- DLL Loaded: 00007FFE5AF60000 C:\Windows\System32\sas.dll
- DLL Loaded: 00007FFE64B60000 C:\Windows\System32\kernel.appcore.dll
- DLL Loaded: 00007FFE65D40000 C:\Windows\System32\msvcp110_win.dll
- DLL Loaded: 00007FFE61AE0000 C:\Windows\System32\dsreg.dll
- DLL Loaded: 00007FFE664E0000 C:\Windows\System32\cryptsp.dll
- System breakpoint reached!
- DLL Loaded: 00007FFE68BF0000 C:\Windows\System32\imm32.dll
- DLL Loaded: 0000000180000000 C:\Program Files\Prio\prio.dll
- DLL Loaded: 00007FFE67390000 C:\Windows\System32\bcryptprimitives.dll
- DLL Loaded: 00007FFE680C0000 C:\Windows\System32\clbcatq.dll
- DLL Loaded: 00007FFE60EC0000 C:\Windows\System32\MrmCoreR.dll
- DLL Loaded: 00007FFE5F9E0000 C:\Windows\System32\BCP47mrm.dll
- DLL Loaded: 00007FFE60D00000 C:\Windows\System32\Windows.UI.dll
- DLL Loaded: 00007FFE60AA0000 C:\Windows\System32\WindowManagementAPI.dll
- DLL Loaded: 00007FFE60B50000 C:\Windows\System32\TextInputFramework.dll
- DLL Loaded: 00007FFE60940000 C:\Windows\System32\InputHost.dll
- DLL Loaded: 00007FFE62AB0000 C:\Windows\System32\CoreUIComponents.dll
- DLL Loaded: 00007FFE63190000 C:\Windows\System32\CoreMessaging.dll
- DLL Loaded: 00007FFE61C20000 C:\Windows\System32\WinTypes.dll
- DLL Loaded: 00007FFE68710000 C:\Windows\System32\ws2_32.dll
- DLL Loaded: 00007FFE60730000 C:\Windows\System32\twinapi.appcore.dll
- DLL Loaded: 0000025406C30000 C:\Windows\System32\twinapi.appcore.dll
- DLL Unloaded: 0000025406C30000 twinapi.appcore.dll
- DLL Loaded: 00007FFE63B40000 C:\Windows\System32\propsys.dll
- DLL Loaded: 00007FFE659C0000 C:\Windows\System32\ntmarta.dll
- Thread 200 created, Entry: ntdll.00007FFE694C20E0
- DLL Loaded: 00007FFE68170000 C:\Windows\System32\msctf.dll
- DLL Loaded: 00007FFE4FA10000 C:\Windows\System32\Windows.Web.dll
- DLL Loaded: 00007FFE50340000 C:\Windows\System32\Windows.Networking.Connectivity.dll
- Thread 2324 created, Entry: ntdll.00007FFE694C20E0
- DLL Loaded: 00007FFE66B20000 C:\Windows\System32\profapi.dll
- DLL Loaded: 00007FFE43E60000 C:\Windows\System32\MbaeApiPublic.dll
- DLL Loaded: 00007FFE5C860000 C:\Windows\System32\mobilenetworking.dll
- DebugString: "onecore\com\combase\dcomrem\security.cxx(3057)\combase.dll!00007FFE67CF5C5C: (caller: 00007FFE43E63646) ReturnHr(1) tid(1630) 80010117 Call context cannot be accessed after call completed."
- DebugString: "onecore\com\combase\dcomrem\security.cxx(3057)\combase.dll!00007FFE67CF5C5C: (caller: 00007FFE43E63646) ReturnHr(1) tid(1630) 80010117 Call context cannot be accessed after call completed."
- DebugString: "onecore\com\combase\dcomrem\security.cxx(3057)\combase.dll!00007FFE67CF5C5C: (caller: 00007FFE43E63646) ReturnHr(2) tid(1630) 80010117 Call context cannot be accessed after call completed."
- DebugString: "onecore\com\combase\dcomrem\security.cxx(3057)\combase.dll!00007FFE67CF5C5C: (caller: 00007FFE43E63646) ReturnHr(2) tid(1630) 80010117 Call context cannot be accessed after call completed."
- DLL Loaded: 00007FFE58900000 C:\Windows\System32\wwapi.dll
- EXCEPTION_DEBUG_INFO:
- dwFirstChance: 1
- ExceptionCode: 000006A6 (RPC_S_INVALID_BINDING)
- ExceptionFlags: 00000001
- ExceptionAddress: 00007FFE66E43E49 kernelbase.00007FFE66E43E49
- NumberParameters: 0
- First chance exception on 00007FFE66E43E49 (000006A6, RPC_S_INVALID_BINDING)!
- Thread 2438 created, Entry: gdiplus.00007FFE4CBC8D80
- DLL Loaded: 00007FFE5FAB0000 C:\Windows\System32\WindowsCodecs.dll
- DLL Loaded: 00007FFE67300000 C:\Windows\System32\bcrypt.dll
- DLL Loaded: 00007FFE53CD0000 C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll
- DLL Loaded: 00007FFE3D090000 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\104.0.1293.70\EBWebView\x64\EmbeddedBrowserWebView.dll
- DLL Loaded: 00007FFE66500000 C:\Windows\System32\cryptbase.dll
- DLL Loaded: 00007FFE5E130000 C:\Windows\System32\version.dll
- Thread 1DA4 created, Entry: embeddedbrowserwebview.00007FFE3D329820
- SetThreadName(1DA4, "MojoThread")
- EXCEPTION_DEBUG_INFO:
- dwFirstChance: 1
- ExceptionCode: 406D1388 (MS_VC_EXCEPTION)
- ExceptionFlags: 00000000
- ExceptionAddress: 00007FFE66E43E49 kernelbase.00007FFE66E43E49
- NumberParameters: 3
- ExceptionInformation[00]: AAAAAAAA00001000
- ExceptionInformation[01]: 00000081EE67FA20
- ExceptionInformation[02]: 0000000000001DA4
- First chance exception on 00007FFE66E43E49 (406D1388, MS_VC_EXCEPTION)!
- DLL Loaded: 00007FFE64D60000 C:\Windows\System32\windows.storage.dll
- DLL Loaded: 00007FFE66590000 C:\Windows\System32\wldp.dll
- DLL Loaded: 00007FFE69290000 C:\Windows\System32\shlwapi.dll
- Thread 29F0 created, Entry: quickassist.00007FF69EA96290
- DLL Loaded: 00007FFE56A30000 C:\Windows\System32\dbghelp.dll
- DLL Unloaded: 00007FFE56A30000 dbghelp.dll
- DLL Loaded: 00007FFE53F30000 C:\Windows\System32\Windows.ApplicationModel.dll
- DebugString: "onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagefactory.cpp(44)\Windows.ApplicationModel.dll!00007FFE53F4EFCB: (caller: 00007FF69EA7AAEF) LogHr(1) tid(1630) 80073D54 The process has no package identity."
- DebugString: "onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagefactory.cpp(44)\Windows.ApplicationModel.dll!00007FFE53F4EFCB: (caller: 00007FF69EA7AAEF) LogHr(1) tid(1630) 80073D54 The process has no package identity."
- DebugString: "enduser\remoteassistance\common\systeminfo\systeminfoimpl.cpp(396)\QuickAssist.exe!00007FF69EA7AB0D: (caller: 00007FF69EA72461) ReturnHr(1) tid(1630) 80073D54 The process has no package identity."
- DebugString: "enduser\remoteassistance\common\systeminfo\systeminfoimpl.cpp(396)\QuickAssist.exe!00007FF69EA7AB0D: (caller: 00007FF69EA72461) ReturnHr(1) tid(1630) 80073D54 The process has no package identity."
- DebugString: "onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagefactory.cpp(44)\Windows.ApplicationModel.dll!00007FFE53F4EFCB: (caller: 00007FF69EA7AAEF) LogHr(2) tid(1630) 80073D54 The process has no package identity."
- DebugString: "onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagefactory.cpp(44)\Windows.ApplicationModel.dll!00007FFE53F4EFCB: (caller: 00007FF69EA7AAEF) LogHr(2) tid(1630) 80073D54 The process has no package identity."
- DebugString: "enduser\remoteassistance\common\systeminfo\systeminfoimpl.cpp(396)\QuickAssist.exe!00007FF69EA7AB0D: (caller: 00007FF69EA72461) ReturnHr(2) tid(1630) 80073D54 The process has no package identity."
- DebugString: "enduser\remoteassistance\common\systeminfo\systeminfoimpl.cpp(396)\QuickAssist.exe!00007FF69EA7AB0D: (caller: 00007FF69EA72461) ReturnHr(2) tid(1630) 80073D54 The process has no package identity."
- DebugString: "onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagefactory.cpp(44)\Windows.ApplicationModel.dll!00007FFE53F4EFCB: (caller: 00007FF69EA7AAEF) LogHr(3) tid(1630) 80073D54 The process has no package identity."
- DebugString: "onecore\base\appmodel\runtime\winrt\lib\windows.applicationmodel.packagefactory.cpp(44)\Windows.ApplicationModel.dll!00007FFE53F4EFCB: (caller: 00007FF69EA7AAEF) LogHr(3) tid(1630) 80073D54 The process has no package identity."
- DebugString: "enduser\remoteassistance\common\systeminfo\systeminfoimpl.cpp(396)\QuickAssist.exe!00007FF69EA7AB0D: (caller: 00007FF69EA72461) ReturnHr(3) tid(1630) 80073D54 The process has no package identity."
- DebugString: "enduser\remoteassistance\common\systeminfo\systeminfoimpl.cpp(396)\QuickAssist.exe!00007FF69EA7AB0D: (caller: 00007FF69EA72461) ReturnHr(3) tid(1630) 80073D54 The process has no package identity."
- DLL Loaded: 00007FFE55460000 C:\Windows\System32\twinapi.dll
- Thread 26F4 created, Entry: combase.00007FFE67D5A7F0
- Thread 1350 created, Entry: ntdll.00007FFE694C20E0
- DebugString: "onecore\com\combase\dcomrem\resolver.cxx(2283)\combase.dll!00007FFE67CB5CDE: (caller: 00007FFE67D67BAA) ReturnHr(3) tid(1630) 80040154 Class not registered"
- DebugString: "onecore\com\combase\dcomrem\resolver.cxx(2283)\combase.dll!00007FFE67CB5CDE: (caller: 00007FFE67D67BAA) ReturnHr(3) tid(1630) 80040154 Class not registered"
- DebugString: "onecore\com\combase\dcomrem\resolver.cxx(2491)\combase.dll!00007FFE67D67BD2: (caller: 00007FFE67CB53D5) ReturnHr(4) tid(1630) 80040154 Class not registered"
- DebugString: "onecore\com\combase\dcomrem\resolver.cxx(2491)\combase.dll!00007FFE67D67BD2: (caller: 00007FFE67CB53D5) ReturnHr(4) tid(1630) 80040154 Class not registered"
- Thread 2438 exit
- Thread CC4 exit
- Thread 1454 exit
- Thread 2AD8 exit
- Thread 1350 exit
- Thread 26F4 exit
- Thread 29F0 exit
- Thread 1DA4 exit
- Thread 2324 exit
- Thread 200 exit
- Process stopped with exit code 0x0
- Saving database to C:\Program Files\x64dbg\x64\db\QuickAssist.exe.dd64 31ms
- Debugging stopped!
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement