- System 

  - Provider 

   [ Name]  Microsoft-Windows-WER-SystemErrorReporting 
   [ Guid]  {ABCE23E7-DE45-4366-8631-84FA6C525952} 
   [ EventSourceName]  BugCheck 
 
  - EventID 1001 

   [ Qualifiers]  16384 
 
   Version 0 
 
   Level 2 
 
   Task 0 
 
   Opcode 0 
 
   Keywords 0x80000000000000 
 
  - TimeCreated 

   [ SystemTime]  2017-08-28T08:43:56.906933500Z 
 
   EventRecordID 7174 
 
   Correlation 
 
  - Execution 

   [ ProcessID]  0 
   [ ThreadID]  0 
 
   Channel System 
 
   Computer Interface 
 
   Security 
 

- EventData 

  param1 0x0000007e (0xffffffffc0000005, 0xfffff80133e3d98e, 0xffffe18166b88398, 0xffffe18166b87be0) 
  param2 C:\WINDOWS\MEMORY.DMP 
  param3 4ed87948-5da5-47f8-a3e0-06875ca7ee10 
