- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" /> 
  <EventID Qualifiers="0">1000</EventID> 
  <Version>0</Version> 
  <Level>2</Level> 
  <Task>100</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2024-01-11T13:39:20.2425902Z" /> 
  <EventRecordID>1173151</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="0" ThreadID="0" /> 
  <Channel>Application</Channel> 
  <Computer>XXXXXXx</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>powershell.exe</Data> 
  <Data>0.0.0.0</Data> 
  <Data>00000000</Data> 
  <Data>unknown</Data> 
  <Data>0.0.0.0</Data> 
  <Data>00000000</Data> 
  <Data>c0000005</Data> 
  <Data>778c23cf</Data> 
  <Data>fbc</Data> 
  <Data>01da449394569848</Data> 
  <Data>C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe</Data> 
  <Data>unknown</Data> 
  <Data>6b31e4eb-c839-478a-9370-1c612dac4b6b</Data> 
  <Data /> 
  <Data /> 
  </EventData>
  </Event>