- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" /> 
  <EventID Qualifiers="16384">1001</EventID> 
  <Version>0</Version> 
  <Level>2</Level> 
  <Task>0</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2017-08-28T08:43:56.906933500Z" /> 
  <EventRecordID>7174</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="0" ThreadID="0" /> 
  <Channel>System</Channel> 
  <Computer>Interface</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="param1">0x0000007e (0xffffffffc0000005, 0xfffff80133e3d98e, 0xffffe18166b88398, 0xffffe18166b87be0)</Data> 
  <Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data> 
  <Data Name="param3">4ed87948-5da5-47f8-a3e0-06875ca7ee10</Data> 
  </EventData>
  </Event>