- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> 
  <EventID Qualifiers="16384">7036</EventID> 
  <Version>0</Version> 
  <Level>4</Level> 
  <Task>0</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8080000000000000</Keywords> 
  <TimeCreated SystemTime="2011-03-25T04:19:34.573125100Z" /> 
  <EventRecordID>32916</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="920" ThreadID="1476" /> 
  <Channel>System</Channel> 
  <Computer>Yegge-Laptop</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="param1">Application Experience</Data> 
  <Data Name="param2">stopped</Data> 
  <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary> 
  </EventData>
  </Event>