"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"9:28:36.4793861 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\RaiseExceptionOnPossibleDeadlock","NAME NOT FOUND","Length: 80"
"9:28:36.4794194 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\Session Manager\Segment Heap","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.4795076 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\ResourcePolicies","NAME NOT FOUND","Length: 24"
"9:28:36.4804733 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\3c74afb9-8d82-44e3-b52c-365dbf48382a","NAME NOT FOUND","Length: 528"
"9:28:36.4805440 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\05f95efe-7f75-49c7-a994-60a55cc09571","NAME NOT FOUND","Length: 528"
"9:28:36.4805934 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\e36c4458-ed80-4ad7-a8be-52dda1eb5f1c","NAME NOT FOUND","Length: 528"
"9:28:36.4807145 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\SafeBoot\Option","NAME NOT FOUND","Desired Access: Query Value, Set Value"
"9:28:36.4807283 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\Srp\GP\DLL","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4807469 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\TransparentEnabled","NAME NOT FOUND","Length: 80"
"9:28:36.4807609 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.4808433 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\FileSystem\LPGO","NAME NOT FOUND","Length: 20"
"9:28:36.4815914 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\ResourcePolicies","NAME NOT FOUND","Length: 24"
"9:28:36.4826013 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"9:28:36.4826985 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\QuickAssist.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4827595 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\SafeDllSearchMode","NAME NOT FOUND","Length: 16"
"9:28:36.4828842 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\urlmon.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4829296 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\UxTheme.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4831119 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4831756 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4832364 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4832691 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4834554 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4834981 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4837539 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\d2d1.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4838015 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\d3d11.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4838914 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\iertutil.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4841943 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\MDMRegistration.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4842912 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4843175 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4844368 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4844881 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4845277 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4845564 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4845726 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\NETAPI32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4847221 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4847833 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4848022 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\dcomp.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4848757 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4849163 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\SAS.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4849346 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4851563 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\dxgi.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4852037 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4852437 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4853884 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\msvcp110_win.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4855002 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4855364 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4857582 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4858085 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4858187 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4858517 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4859224 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\DSREG.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4859811 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4860283 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4862829 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4863115 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4867320 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4867589 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4873638 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\PageAllocatorUseSystemHeap","NAME NOT FOUND","Length: 20"
"9:28:36.4873916 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\PageAllocatorSystemHeapIsPrivate","NAME NOT FOUND","Length: 20"
"9:28:36.4874138 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\AggressiveMTATesting","NAME NOT FOUND","Length: 16"
"9:28:36.4875959 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Ole\FeatureDevelopmentProperties","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4876146 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\AppModel\Lookaside\Packages","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4876420 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Ole\FeatureDevelopmentProperties","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4877831 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Ole\FeatureDevelopmentProperties","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4878042 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Ole\FeatureDevelopmentProperties","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4878261 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\Local Settings\Software\Microsoft\Ole","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4878719 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\OLE\Tracing","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4879225 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\1aff6089-e863-4d36-bdfd-3581f07440be","NAME NOT FOUND","Length: 528"
"9:28:36.4879781 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\f0558438-f56a-5987-47da-040ca75aef05","NAME NOT FOUND","Length: 528"
"9:28:36.4880563 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\c7e09e2a-c663-5399-af79-2fccd321d19a","NAME NOT FOUND","Length: 528"
"9:28:36.4880921 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-e2db7f381ffb","NAME NOT FOUND","Length: 528"
"9:28:36.4887917 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\Error Message Instrument","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4888426 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QuickAssist.exe","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4888709 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4888988 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4889336 AM","QuickAssist.exe","6556","RegQueryValue","HKCU\Control Panel\Desktop\EnablePerProcessSystemDPI","NAME NOT FOUND","Length: 20"
"9:28:36.4890120 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32\QuickAssist","NAME NOT FOUND","Length: 172"
"9:28:36.4890404 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4892083 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Control Panel\Desktop\MuiCached\MachineLanguageConfiguration","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4892303 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\MUI\Settings","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4892565 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4893226 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\MUI\Settings","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4893561 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4893861 AM","QuickAssist.exe","6556","RegQueryValue","HKCU\Control Panel\Desktop\PreferredUILanguages","NAME NOT FOUND","Length: 12"
"9:28:36.4894360 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\MUI\Settings","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4895671 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4895846 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4896750 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\LanguageOverlay\OverlayPackages\en","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4900029 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\System32\edgegdi.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4901582 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\RequireSignedAppInit_DLLs","NAME NOT FOUND","Length: 16"
"9:28:36.4902793 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4903824 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\System32\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4904803 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\System\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4905748 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4906483 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4907579 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\Python 3.6.3\Scripts\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4908499 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\Python 3.6.3\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4909456 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files (x86)\Common Files\Intel\OpenCL\windows\compiler\lib\intel64_win\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4910463 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files (x86)\Common Files\Intel\OpenCL\windows\compiler\lib\ia32_win\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4911303 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\System32\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4912001 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4913033 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\System32\wbem\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4913903 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\System32\WindowsPowerShell\v1.0\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4914513 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\System32\OpenSSH\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4915123 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\Process Lasso\prio.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4917132 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.4917846 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.4920416 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\ResourcePolicies","NAME NOT FOUND","Length: 24"
"9:28:36.4921461 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\ca967c75-04bf-40b5-9a16-98b5f9332a92","NAME NOT FOUND","Length: 528"
"9:28:36.4922154 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\b6fd710b-f783-4b1c-ab9c-c68099dcc0c7","NAME NOT FOUND","Length: 528"
"9:28:36.4923577 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\c1376338-0984-48b8-b933-9c7d779fd84d","NAME NOT FOUND","Length: 528"
"9:28:36.4924771 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Nls\CustomLocale\en-US","NAME NOT FOUND","Length: 532"
"9:28:36.4925291 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Nls\ExtendedLocale\en-US","NAME NOT FOUND","Length: 532"
"9:28:36.4928429 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Nls\Sorting\Ids\en-US","NAME NOT FOUND","Length: 90"
"9:28:36.4928624 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Nls\Sorting\Ids\en","NAME NOT FOUND","Length: 90"
"9:28:36.4930423 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4932395 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4934242 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4936196 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4937722 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4942881 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\prio.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.4945857 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\f25bcd2e-2690-55dc-3bc4-07b65b1b41c9","NAME NOT FOUND","Length: 528"
"9:28:36.4946949 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QuickAssist.exe","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"9:28:36.4947246 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4947551 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4947679 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QuickAssist.exe","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"9:28:36.4947798 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4947924 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4948214 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT FOUND","Length: 20"
"9:28:36.4948424 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QuickAssist.exe","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"9:28:36.4949000 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\OLE\Tracing","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4949309 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\1aff6089-e863-4d36-bdfd-3581f07440be","NAME NOT FOUND","Length: 528"
"9:28:36.4949745 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\f0558438-f56a-5987-47da-040ca75aef05","NAME NOT FOUND","Length: 528"
"9:28:36.4950688 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\OLEAUT","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.4951527 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\0bca4784-8257-51a0-d9ec-24fe1fe4c90d","NAME NOT FOUND","Length: 528"
"9:28:36.4952750 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\ff32ada1-5a4b-583c-889e-a3c027b201f5","NAME NOT FOUND","Length: 528"
"9:28:36.4955669 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\30336ed4-e327-447c-9de0-51b652c86108","NAME NOT FOUND","Length: 528"
"9:28:36.4956159 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\32980f26-c8f5-5767-6b26-635b3fa83c61","NAME NOT FOUND","Length: 528"
"9:28:36.4956622 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-e2db7f381ffb","NAME NOT FOUND","Length: 528"
"9:28:36.4957569 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\7067398c-bae7-4191-bf16-c436de658baf","NAME NOT FOUND","Length: 528"
"9:28:36.4957982 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Direct2D","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.4958400 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Microsoft\Direct3D\Direct2D","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.4958702 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\dcb453db-c652-48be-a0f8-a64459d5162e","NAME NOT FOUND","Length: 528"
"9:28:36.4959785 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\03bbe5b8-c788-4d0b-b47e-5b5731398a89","NAME NOT FOUND","Length: 528"
"9:28:36.4960906 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\86cc27ea-6f87-47f7-8b43-3473527d4a87","NAME NOT FOUND","Length: 528"
"9:28:36.4962626 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\e74efd1a-b62d-4b83-ab00-66f4a166a2d3","NAME NOT FOUND","Length: 528"
"9:28:36.4962919 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\f9e3b648-9af1-4dc3-9a8e-bf42c0fbce9a","NAME NOT FOUND","Length: 528"
"9:28:36.4964280 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\93112de2-0aa3-4ed7-91e3-4264555220c1","NAME NOT FOUND","Length: 528"
"9:28:36.4964895 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\Dwm\DebugFailFast","NAME NOT FOUND","Length: 16"
"9:28:36.4965828 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\acc49822-f0b2-49ff-bff2-1092384822b6","NAME NOT FOUND","Length: 528"
"9:28:36.4974256 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy","NAME NOT FOUND","Length: 20"
"9:28:36.4974912 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.4978985 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\673cf800-208a-5327-3f4b-2be44a66627a","NAME NOT FOUND","Length: 528"
"9:28:36.4982202 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\1029012f-9e40-5284-2037-2e9d52b292f9","NAME NOT FOUND","Length: 528"
"9:28:36.4983260 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\91558f59-b78a-4994-8b64-8067b33bdd71","NAME NOT FOUND","Length: 528"
"9:28:36.4983651 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\91558f59-b78a-4994-8b64-8067b33bdd71","NAME NOT FOUND","Length: 528"
"9:28:36.4995461 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\Server","NAME NOT FOUND","Length: 144"
"9:28:36.4995984 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4996122 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.4996220 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.4996312 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.4996412 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.4996530 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.4996618 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.ResourceLoader\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.4996858 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\OLE\Diagnosis","NAME NOT FOUND","Desired Access: Read"
"9:28:36.4999014 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\MaxSxSHashCount","NAME NOT FOUND","Length: 16"
"9:28:36.5001973 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5002469 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5005838 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\19c13211-dec8-42d5-885a-c4cfa82ea1ed","NAME NOT FOUND","Length: 528"
"9:28:36.5007282 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5007659 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5007750 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5007809 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5007870 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5007925 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5007985 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5008079 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Resources.Core.ResourceContext\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5011503 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Scaling","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5011821 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Scaling","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5012512 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Scaling","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5013146 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Scaling","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5013687 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Mrt\_Merged","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5021457 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5022131 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5032270 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5032867 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5032990 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5033095 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5033227 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5033407 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5033514 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5033606 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.AccessibilitySettings\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5036786 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5037343 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5043635 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5043643 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5043966 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5044118 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5044184 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5044632 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5049210 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5049344 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5050050 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5050078 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5050627 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5051248 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5056204 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5056516 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5058702 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5059116 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5061121 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5061393 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5065290 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5065757 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5069138 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\4e7add1a-6945-435a-82b6-612688ba9f57","NAME NOT FOUND","Length: 528"
"9:28:36.5070249 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\bc71577f-76e9-583a-ecd6-62d0250d900f","NAME NOT FOUND","Length: 528"
"9:28:36.5070688 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\072665fb-8953-5a85-931d-d06aeab3d109","NAME NOT FOUND","Length: 528"
"9:28:36.5071223 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\d0f1a5c6-fc43-48ae-99bf-efb1c38be9d1","NAME NOT FOUND","Length: 528"
"9:28:36.5072513 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\3720dda7-caea-4af3-a138-375aafc3f1d6","NAME NOT FOUND","Length: 528"
"9:28:36.5073421 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\ebadf775-48aa-4bf3-8f8e-ec68d113c98e","NAME NOT FOUND","Length: 528"
"9:28:36.5073763 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\3f30522e-d47a-407c-9067-2e928d00d54e","NAME NOT FOUND","Length: 528"
"9:28:36.5074595 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\32980f26-c8f5-5767-6b26-635b3fa83c61","NAME NOT FOUND","Length: 528"
"9:28:36.5074929 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-e2db7f381ffb","NAME NOT FOUND","Length: 528"
"9:28:36.5075695 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\4b01be74-d810-5994-228e-ee8417be3468","NAME NOT FOUND","Length: 528"
"9:28:36.5077280 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5077688 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5077961 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5078084 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5078230 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5078324 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5078394 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5078459 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Core.CoreWindow\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5079124 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5079668 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5079954 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5080100 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5080215 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5080314 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5080484 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5080595 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5081809 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\a9da4dcc-e78e-5ce7-4078-411a9928f082","NAME NOT FOUND","Length: 528"
"9:28:36.5084063 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\MaxRpcSize","NAME NOT FOUND","Length: 16"
"9:28:36.5084525 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Services\CCG","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5084770 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Services\CCG","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5085836 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QuickAssist.exe","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"9:28:36.5086486 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\Rpc","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5087115 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\IdleTimerWindow","NAME NOT FOUND","Length: 16"
"9:28:36.5088022 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5088555 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5088670 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5088740 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5088796 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5088904 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5088985 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5089046 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5089926 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\XAML\OneCoreTransformsEnabledByDefault","NAME NOT FOUND","Length: 16"
"9:28:36.5099473 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\ebadf775-48aa-4bf3-8f8e-ec68d113c98e","NAME NOT FOUND","Length: 528"
"9:28:36.5112442 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\ResourcePolicies","NAME NOT FOUND","Length: 24"
"9:28:36.5136562 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\Compatibility\QuickAssist.exe","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5140004 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\Compatibility\QuickAssist.exe","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5146301 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE","NAME NOT FOUND","Length: 16"
"9:28:36.5169039 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE","NAME NOT FOUND","Length: 16"
"9:28:36.5171973 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\Compatibility\AppCompatClassName","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5174778 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\CTF\EnableAnchorContext","NAME NOT FOUND","Length: 16"
"9:28:36.5188764 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5189472 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Input\ResyncResetTime","NAME NOT FOUND","Length: 16"
"9:28:36.5189609 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Input\MaxResyncAttempts","NAME NOT FOUND","Length: 16"
"9:28:36.5196280 AM","QuickAssist.exe","6556","CreateFile","C:\Windows\SystemResources\user32.dll.mun","NAME NOT FOUND","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
"9:28:36.5210637 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5211109 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5211300 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5211373 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5211447 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5211535 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5211625 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5211715 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5214047 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5214369 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5217526 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5217835 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5217903 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5217951 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5218004 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5218062 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5218116 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5218166 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.Connectivity.NetworkInformation\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5220068 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5220348 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5223857 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\5a8a94f3-249f-49f8-86d1-e6527c80622b","NAME NOT FOUND","Length: 528"
"9:28:36.5224468 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-e2db7f381ffb","NAME NOT FOUND","Length: 528"
"9:28:36.5262595 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\MiniNT","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5263630 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Services\crypt32\DiagLevel","NAME NOT FOUND","Length: 16"
"9:28:36.5263704 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Services\crypt32\DiagMatchAnyMask","NAME NOT FOUND","Length: 20"
"9:28:36.5267305 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5267916 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\SystemCertificates\My\PhysicalStores","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5272443 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Microsoft\SystemCertificates\My\PhysicalStores","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5274531 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\profapi.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.5277032 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5277586 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5283358 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\SystemCertificates\My\Certificates","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5284305 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\SystemCertificates\My\CRLs","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5285190 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\SystemCertificates\My\CTLs","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5286810 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation\Manufacturer","NAME NOT FOUND","Length: 144"
"9:28:36.5287238 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation\SupportURL","NAME NOT FOUND","Length: 144"
"9:28:36.5287594 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation\SupportAppURL","NAME NOT FOUND","Length: 144"
"9:28:36.5287950 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation\Model","NAME NOT FOUND","Length: 144"
"9:28:36.5291524 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\QuickAssist","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5291644 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\QuickAssist","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5291745 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\QA000000000\Objects\[904fcc42-b957-433c-ab16-c2f52c293e0a]\Elements\25295374","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5291879 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\QA000000000\Objects\[904fcc42-b957-433c-ab16-c2f52c293e0a]\Elements\86370093","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5292341 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5292614 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5292685 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5292766 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5292820 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5292874 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5292928 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5292977 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Profile.AnalyticsInfo\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5295822 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM\DeviceForm","NAME NOT FOUND","Length: 20"
"9:28:36.5296045 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM\DeviceForm","NAME NOT FOUND","Length: 20"
"9:28:36.5297145 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5297473 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5297540 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5297589 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5297637 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5297687 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5297738 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5297793 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Networking.NetworkOperators.MobileBroadbandModem\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5300867 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5301282 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5304392 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5304640 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5306757 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\2e2bbb16-0c36-4b9b-a567-40924a199fd5","NAME NOT FOUND","Length: 528"
"9:28:36.5307238 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\56dd9c57-06cc-48ba-b123-876a6495ba13","NAME NOT FOUND","Length: 528"
"9:28:36.5308215 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\1aff6089-e863-4d36-bdfd-3581f07440be","NAME NOT FOUND","Length: 528"
"9:28:36.5308949 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities\cellularDeviceIdentity","NAME NOT FOUND","Length: 16"
"9:28:36.5309267 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\27a8fdf4-9b77-575b-be3b-e7163ef159bb","NAME NOT FOUND","Length: 528"
"9:28:36.5311309 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5311595 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5317963 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\785e3ea5-a921-427c-8edb-0583d49c7636","NAME NOT FOUND","Length: 528"
"9:28:36.5326836 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\WindowsCodecs.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.5328542 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5328880 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5331943 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\f3a71a4b-6118-4257-8ccb-39a33ba059d4","NAME NOT FOUND","Length: 528"
"9:28:36.5332905 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\7c29709d-3c02-47fb-8a39-d8287522fadb","NAME NOT FOUND","Length: 528"
"9:28:36.5333829 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5334375 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{E9A4A80A-44FE-4DE4-8971-7150B10A5199}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5334792 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{7693E886-51C9-4070-8419-9F70738EC8FA}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5335226 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{AC4CE3CB-E1C1-44CD-8215-5A1665509EC2}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5335704 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{0DBECEC1-9EB3-4860-9C6F-DDBE86634575}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5336366 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{72B624DF-AE11-4948-A65C-351EB0829419}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5337158 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{01B90D9A-8209-47F7-9C52-E1244BF50CED}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5337994 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{E7E79A30-4F2C-4FAB-8D00-394F2D6BBEBE}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5338668 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{7F12E753-FC71-43D7-A51D-92F35977ABB5}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5339349 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{AA94DCC2-B8B0-4898-B835-000AABD74393}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5340133 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1765E14E-1BD4-462E-B6B1-590BF1262AC6}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5340823 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{22C21F93-7DDB-411C-9B17-C5B7BD064ABC}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5341633 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{ED822C8C-D6BE-4301-A631-0E1416BAD28F}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5342450 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{6D68D1DE-D432-4B0F-923A-091183A9BDA7}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5343111 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{076C2A6C-F78F-4C46-A723-3583E70876EA}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5343837 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{C17CABB2-D4A3-47D7-A557-339B2EFBD4F1}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5344508 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{9CB5172B-D600-46BA-AB77-77BB7E3A00D9}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5345215 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5345754 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5345873 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5349452 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5349989 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5350697 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Namespaces","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5368388 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5368671 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5368739 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5368788 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5368837 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5368890 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5368944 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5368993 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebAuthenticationCoreManager\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5370929 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5371210 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5374198 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\077b8c4a-e425-578d-f1ac-6fdf1220ff68","NAME NOT FOUND","Length: 528"
"9:28:36.5374585 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-e2db7f381ffb","NAME NOT FOUND","Length: 528"
"9:28:36.5374892 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\7acf487e-104b-533e-f68a-a7e9b0431edb","NAME NOT FOUND","Length: 528"
"9:28:36.5375730 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\Server","NAME NOT FOUND","Length: 144"
"9:28:36.5376014 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5376105 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:36.5376161 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:36.5376214 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:36.5376267 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:36.5376320 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\Permissions","NAME NOT FOUND","Length: 140"
"9:28:36.5376369 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.Web.Core.WebTokenRequest\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5377051 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\QuickAssist","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5377758 AM","QuickAssist.exe","6556","CreateFile","C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.5378048 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\QuickAssist","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5379186 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Edge\WebView2\","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5379309 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Edge\WebView2\","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5380948 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Edge\WebView2\","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5381056 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Edge\WebView2\","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5384551 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5384820 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5389117 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\CRYPTBASE.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.5391370 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5391881 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5397126 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DisplayVersion","NAME NOT FOUND","Length: 144"
"9:28:36.5400084 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\channel","NAME NOT FOUND","Length: 24"
"9:28:36.5400411 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\ap","NAME NOT FOUND","Length: 24"
"9:28:36.5401249 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\e16ec3d2-bb0f-4e8f-bdb8-de0bea82dc3d","NAME NOT FOUND","Length: 528"
"9:28:36.5401894 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\2102e897-4bb0-4a07-9989-63844719a8ea","NAME NOT FOUND","Length: 528"
"9:28:36.5402554 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Edge\WebView2\","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5402688 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Edge\WebView2\","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5408144 AM","QuickAssist.exe","6556","CreateFile","C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.8.0_x64__8wekyb3d8bbwe\VERSION.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:28:36.5410111 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5410649 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5414080 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\540dc156-e9d6-42dc-a225-29794149a495","NAME NOT FOUND","Length: 528"
"9:28:36.5424850 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DisplayVersion","NAME NOT FOUND","Length: 144"
"9:28:36.5429123 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5429436 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5432459 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5432718 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5435283 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\9a2edb8f-5883-499f-aced-6e4b69d43ddf","NAME NOT FOUND","Length: 528"
"9:28:36.5436934 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\30336ed4-e327-447c-9de0-51b652c86108","NAME NOT FOUND","Length: 528"
"9:28:36.5437399 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\a40b455c-253c-4311-ac6d-6e667edccefc","NAME NOT FOUND","Length: 528"
"9:28:36.5437788 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-e2db7f381ffb","NAME NOT FOUND","Length: 528"
"9:28:36.5438104 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\32980f26-c8f5-5767-6b26-635b3fa83c61","NAME NOT FOUND","Length: 528"
"9:28:36.5441079 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{56AD4C5D-B908-4F85-8FF1-7940C29B3BCF}\Instance","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5441184 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{56AD4C5D-B908-4F85-8FF1-7940C29B3BCF}\Instance","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5444377 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5444968 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\TreatAs","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5445219 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\TreatAs","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5445865 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5445995 AM","QuickAssist.exe","6556","RegQueryValue","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5446416 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5446990 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5447660 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocServer32","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5448312 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5448460 AM","QuickAssist.exe","6556","RegQueryValue","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32\InprocServer32","NAME NOT FOUND","Length: 12"
"9:28:36.5448863 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5449370 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5449916 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5450506 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5451166 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5451496 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5451956 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5452130 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5452909 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5453364 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\TreatAs","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5453851 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\TreatAs","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5454459 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5454604 AM","QuickAssist.exe","6556","RegQueryValue","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:36.5455048 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5455601 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5456175 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocServer32","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5456920 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5457061 AM","QuickAssist.exe","6556","RegQueryValue","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32\InprocServer32","NAME NOT FOUND","Length: 12"
"9:28:36.5457360 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5457699 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5458073 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5458477 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5458919 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5459069 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5459352 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5459503 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5459757 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\LocalServer32","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5459914 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\LocalServer32","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5460148 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:36.5460235 AM","QuickAssist.exe","6556","RegQueryValue","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\AppID","NAME NOT FOUND","Length: 112"
"9:28:36.5460477 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\LocalServer","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5460623 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\LocalServer","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5460954 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5461299 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\Elevation","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5461461 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\Elevation","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5462346 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5462884 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\TreatAs","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5463029 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\TreatAs","NAME NOT FOUND","Desired Access: Read"
"9:28:36.5463763 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\b1642597-285e-560a-7f60-7e02f5da22c0","NAME NOT FOUND","Length: 528"
"9:28:36.5480184 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msedgewebview2.exe","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"9:28:36.5480290 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\Wow64\x86\xtajit","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5481103 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.5481392 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.5481732 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msedgewebview2.exe","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"9:28:36.5486276 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\Session Manager\BAM","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5486828 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5487118 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\System\CurrentControlSet\Control\SafeBoot\Option","NAME NOT FOUND","Desired Access: Query Value, Set Value"
"9:28:36.5487294 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\TransparentEnabled","NAME NOT FOUND","Length: 80"
"9:28:36.5487544 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers","NAME NOT FOUND","Desired Access: Query Value"
"9:28:36.5488322 AM","QuickAssist.exe","6556","RegQueryValue","HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\Program Files (x86)\Microsoft\EdgeWebView\Application\104.0.1293.70\msedgewebview2.exe","NAME NOT FOUND","Length: 16"
"9:28:36.5489940 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest","NAME NOT FOUND","Length: 20"
"9:28:36.7704036 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:36.7704509 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:36.7712059 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\SOFTWARE\Microsoft\QuickAssist","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.3761570 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\ResourcePolicies","NAME NOT FOUND","Length: 24"
"9:28:37.4747804 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Server","NAME NOT FOUND","Length: 144"
"9:28:37.4748245 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:37.4748337 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:37.4748415 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:37.4748487 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:37.4748563 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:37.4748635 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Permissions","NAME NOT FOUND","Length: 140"
"9:28:37.4748700 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:37.4749476 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\Server","NAME NOT FOUND","Length: 144"
"9:28:37.4749826 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:37.4749909 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:37.4750034 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:37.4750105 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:37.4750171 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:37.4750242 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\Permissions","NAME NOT FOUND","Length: 140"
"9:28:37.4750306 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Package\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:37.4753052 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:37.4753417 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:37.4757540 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\eadb8f1b-577d-4d09-8104-b61a3d9036e5","NAME NOT FOUND","Length: 528"
"9:28:37.4758064 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\eadb8f1b-577d-4d09-8104-b61a3d9036e5","NAME NOT FOUND","Length: 528"
"9:28:37.7352876 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\Server","NAME NOT FOUND","Length: 144"
"9:28:37.7353517 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7353633 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:37.7353729 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:37.7353824 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:37.7353907 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:37.7353978 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\Permissions","NAME NOT FOUND","Length: 140"
"9:28:37.7354038 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.ViewManagement.InputPane\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:37.7357007 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 20"
"9:28:37.7357500 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\CI\Disable26178932","NAME NOT FOUND","Length: 80"
"9:28:37.7363556 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense","NAME NOT FOUND","Length: 24"
"9:28:37.7365610 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\AppID\QuickAssist.exe","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7365720 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\AppID\QuickAssist.exe","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7366117 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\AppID\QuickAssist.exe","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7366220 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\AppID\QuickAssist.exe","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7366509 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\AppCompat\RaiseDefaultAuthnLevel","NAME NOT FOUND","Length: 16"
"9:28:37.7366810 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\DefaultAccessPermission","NAME NOT FOUND","Length: 144"
"9:28:37.7371782 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\System\CurrentControlSet\Control\Lsa\AnonymousAppContainerImpersonationLevelCheck","NAME NOT FOUND","Length: 80"
"9:28:37.7373522 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7374033 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7374502 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:37.7384057 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities\inputInjection","NAME NOT FOUND","Length: 16"
"9:28:37.7385573 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4F88-951C-9D0782B4E376}","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7386189 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\TreatAs","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7386435 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\TreatAs","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7387068 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:37.7387193 AM","QuickAssist.exe","6556","RegQueryValue","HKCR\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:37.7387572 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:37.7388061 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"9:28:37.7388591 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\InprocServer32","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7388821 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\InprocServer32","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7389170 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7389308 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7389655 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Classes\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7389796 AM","QuickAssist.exe","6556","RegOpenKey","HKCR\CLSID\{4CE576FA-83DC-4f88-951C-9D0782B4E376}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7396800 AM","QuickAssist.exe","6556","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\App Management","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7397094 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\App Management","NAME NOT FOUND","Desired Access: Query Value"
"9:28:37.7398125 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\Server","NAME NOT FOUND","Length: 144"
"9:28:37.7398499 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\CustomAttributes","NAME NOT FOUND","Desired Access: Read"
"9:28:37.7398579 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\RemoteServer","NAME NOT FOUND","Length: 144"
"9:28:37.7398640 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\ActivateAsUser","NAME NOT FOUND","Length: 16"
"9:28:37.7398731 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\ActivateInSharedBroker","NAME NOT FOUND","Length: 16"
"9:28:37.7398800 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\ActivateInBrokerForMediumILContainer","NAME NOT FOUND","Length: 16"
"9:28:37.7398873 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\Permissions","NAME NOT FOUND","Length: 140"
"9:28:37.7398941 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Shell.Holographic.ContextIdentifier\ActivateOnHostFlags","NAME NOT FOUND","Length: 16"
"9:28:38.8462010 AM","QuickAssist.exe","6556","RegOpenKey","HKLM\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US","NAME NOT FOUND","Desired Access: Read"
"9:28:45.0955893 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE","NAME NOT FOUND","Length: 16"
"9:28:45.1020318 AM","QuickAssist.exe","6556","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT FOUND","Length: 20"