- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Level>2</Level>
  <Task>100</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2017-08-25T07:04:40.770100200Z" />
  <EventRecordID>2369</EventRecordID>
  <Channel>Application</Channel>
  <Computer>XXXXXXX</Computer>
  <Security />
  </System>
- <EventData>
  <Data>TrueImage.exe</Data>
  <Data>22.3.1.9202</Data>
  <Data>599b29fe</Data>
  <Data>ntdll.dll</Data>
  <Data>10.0.15063.447</Data>
  <Data>d51d5c5e</Data>
  <Data>c0000005</Data>
  <Data>0004b2e3</Data>
  <Data>f94</Data>
  <Data>01d31cdb58ef65bc</Data>
  <Data>C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe</Data>
  <Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
  <Data>644796a3-7df1-45f1-a140-8c42db8c4bff</Data>
  <Data />
  <Data />
  </EventData>
  </Event>