- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
  <EventID Qualifiers="16384">7036</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2011-03-25T04:19:34.573125100Z" />
  <EventRecordID>32916</EventRecordID>
  <Correlation />
  <Execution ProcessID="920" ThreadID="1476" />
  <Channel>System</Channel>
  <Computer>Yegge-Laptop</Computer>
  <Security />
  </System>
- <EventData>
  <Data Name="param1">Application Experience</Data>
  <Data Name="param2">stopped</Data>
  <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
  </Event>