Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          7/8/2016 4:51:03 PM
Event ID:      4005
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Myname
Description:
The Windows logon process has unexpectedly terminated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{id}" EventSourceName="Winlogon" />
    <EventID Qualifiers="49152">4005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-07-08T21:51:03.000000000Z" />
    <EventRecordID>2519</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>Myname</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>1F000000</Binary>
  </EventData>
</Event>