- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-03-10T11:55:21.394354700Z" />
<EventRecordID>1001</EventRecordID>
<Channel>Application</Channel>
<Computer>DESKTOP-6B8E7MV</Computer>
<Security />
</System>
- <EventData>
<Data>w3mvt4yj.exe</Data>
<Data>0.0.0.0</Data>
<Data>5aa3c76b</Data>
<Data>ucrtbase.dll</Data>
<Data>10.0.16299.125</Data>
<Data>70f70cc4</Data>
<Data>c0000409</Data>
<Data>000000000006b70e</Data>
<Data>22b0</Data>
<Data>01d3b866782549d4</Data>
<Data>C:\Users\zimin\AppData\Local\Temp\w3mvt4yj.exe</Data>
<Data>C:\Windows\System32\ucrtbase.dll</Data>
<Data>c33964ad-d5e3-4785-bfb3-f9c3ceae2b65</Data>
<Data />
<Data />
</EventData>
</Event>
- <System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-03-10T11:55:21.394354700Z" />
<EventRecordID>1001</EventRecordID>
<Channel>Application</Channel>
<Computer>DESKTOP-6B8E7MV</Computer>
<Security />
</System>
- <EventData>
<Data>w3mvt4yj.exe</Data>
<Data>0.0.0.0</Data>
<Data>5aa3c76b</Data>
<Data>ucrtbase.dll</Data>
<Data>10.0.16299.125</Data>
<Data>70f70cc4</Data>
<Data>c0000409</Data>
<Data>000000000006b70e</Data>
<Data>22b0</Data>
<Data>01d3b866782549d4</Data>
<Data>C:\Users\zimin\AppData\Local\Temp\w3mvt4yj.exe</Data>
<Data>C:\Windows\System32\ucrtbase.dll</Data>
<Data>c33964ad-d5e3-4785-bfb3-f9c3ceae2b65</Data>
<Data />
<Data />
</EventData>
</Event>