Log Name:      Application
Source:        Windows Error Reporting
Date:          6/25/2021 7:08:29 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Fault bucket 1560478889809979760, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: SpaceEngineers.exe
P2: 1.0.0.0
P3: 989557b6
P4: nvwgf2umx.dll
P5: 27.21.14.6677
P6: 60bffc37
P7: c0000005
P8: 0000000000139cf6
P9: 
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB11D.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBA94.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAA5.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAA9.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAC9.tmp.txt

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_49fee8081d6584b759f41779afa15d441aaf64b_7a351e77_01843e70-3403-49e3-8f4c-f280b4ba02c8

Analysis symbol: 
Rechecking for solution: 0
Report Id: 36d2070a-4489-4a5a-8aa0-d9b35766236b
Report Status: 268435456
Hashed bucket: b35b048c57b7cb8fb5a7ef48529ea970
Cab Guid: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:08:29.2161374Z" />
    <EventRecordID>50624</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>1560478889809979760</Data>
    <Data>4</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>0000000000139cf6</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB11D.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBA94.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAA5.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAA9.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAC9.tmp.txt</Data>
    <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_49fee8081d6584b759f41779afa15d441aaf64b_7a351e77_01843e70-3403-49e3-8f4c-f280b4ba02c8</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>36d2070a-4489-4a5a-8aa0-d9b35766236b</Data>
    <Data>268435456</Data>
    <Data>b35b048c57b7cb8fb5a7ef48529ea970</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          6/25/2021 7:08:25 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Faulting application name: SpaceEngineers.exe, version: 1.0.0.0, time stamp: 0x989557b6
Faulting module name: nvwgf2umx.dll, version: 27.21.14.6677, time stamp: 0x60bffc37
Exception code: 0xc0000005
Fault offset: 0x0000000000139cf6
Faulting process id: 0x157c
Faulting application start time: 0x01d76a1f2c333f2c
Faulting application path: D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
Faulting module path: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll
Report Id: 36d2070a-4489-4a5a-8aa0-d9b35766236b
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>100</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:08:25.3089964Z" />
    <EventRecordID>50623</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>0000000000139cf6</Data>
    <Data>157c</Data>
    <Data>01d76a1f2c333f2c</Data>
    <Data>D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe</Data>
    <Data>C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll</Data>
    <Data>36d2070a-4489-4a5a-8aa0-d9b35766236b</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          6/25/2021 7:08:23 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6B39CF6

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:08:23.9590002Z" />
    <EventRecordID>50622</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6B39CF6
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:06:55 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed with error code The device is not ready.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:55.6050979Z" />
    <EventRecordID>50621</EventRecordID>
    <Correlation />
    <Execution ProcessID="5500" ThreadID="19060" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">WmiApRpl</Data>
    <Data Name="Library">C:\WINDOWS\system32\wbem\wmiaprpl.dll</Data>
    <Data Name="Win32Error">21</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfProc
Date:          6/25/2021 7:06:55 PM
Event ID:      2002
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the job object \BaseNamedObjects\WmiProviderSubSystemHostJob for query access. The calling process may not have permission to open this job. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfProc" Guid="{72d211e1-4c54-4a93-9520-4901681b2271}" />
    <EventID>2002</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:55.5076199Z" />
    <EventRecordID>50620</EventRecordID>
    <Correlation />
    <Execution ProcessID="5500" ThreadID="19060" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Message">\BaseNamedObjects\WmiProviderSubSystemHostJob</Data>
    <Data Name="Win32 Error">1008</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfNet
Date:          6/25/2021 7:06:55 PM
Event ID:      2004
Task Category: None
Level:         Error
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfNet" Guid="{cab2b8a5-49b9-4eec-b1b0-fac21da05a3b}" />
    <EventID>2004</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:55.4657526Z" />
    <EventRecordID>50619</EventRecordID>
    <Correlation />
    <Execution ProcessID="5500" ThreadID="19060" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="NTSTATUS">3221225506</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:06:55 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "MSDTC" in DLL "C:\WINDOWS\system32\msdtcuiu.DLL" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:55.4593649Z" />
    <EventRecordID>50618</EventRecordID>
    <Correlation />
    <Execution ProcessID="5500" ThreadID="19060" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">MSDTC</Data>
    <Data Name="Library">C:\WINDOWS\system32\msdtcuiu.DLL</Data>
    <Data Name="Win32Error">2147942402</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:06:55 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "Lsa" in DLL "C:\Windows\System32\Secur32.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:55.4480420Z" />
    <EventRecordID>50617</EventRecordID>
    <Correlation />
    <Execution ProcessID="5500" ThreadID="19060" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">Lsa</Data>
    <Data Name="Library">C:\Windows\System32\Secur32.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:06:55 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "ESENT" in DLL "C:\WINDOWS\system32\esentprf.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:55.4473666Z" />
    <EventRecordID>50616</EventRecordID>
    <Correlation />
    <Execution ProcessID="5500" ThreadID="19060" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">ESENT</Data>
    <Data Name="Library">C:\WINDOWS\system32\esentprf.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          6/25/2021 7:06:47 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Fault bucket 2058584043970814942, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: SpaceEngineers.exe
P2: 1.0.0.0
P3: 989557b6
P4: nvwgf2umx.dll
P5: 27.21.14.6677
P6: 60bffc37
P7: c0000005
P8: 00000000000abc99
P9: 
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2657.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2F9F.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FAF.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FB1.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FD2.tmp.txt

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_4d514cd94d6b85c9f0618c0cc7dedf85511ced7_7a351e77_ec649393-0a1a-402e-a13d-7ccc99a38ed5

Analysis symbol: 
Rechecking for solution: 0
Report Id: 6b63fc62-cea1-46b9-9254-df7bcf512777
Report Status: 268435456
Hashed bucket: 8fb1b9f809ef24421c918f47f92ae3de
Cab Guid: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:47.2436583Z" />
    <EventRecordID>50615</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2058584043970814942</Data>
    <Data>4</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>00000000000abc99</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2657.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2F9F.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FAF.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FB1.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FD2.tmp.txt</Data>
    <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_4d514cd94d6b85c9f0618c0cc7dedf85511ced7_7a351e77_ec649393-0a1a-402e-a13d-7ccc99a38ed5</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6b63fc62-cea1-46b9-9254-df7bcf512777</Data>
    <Data>268435456</Data>
    <Data>8fb1b9f809ef24421c918f47f92ae3de</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          6/25/2021 7:06:44 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Faulting application name: SpaceEngineers.exe, version: 1.0.0.0, time stamp: 0x989557b6
Faulting module name: nvwgf2umx.dll, version: 27.21.14.6677, time stamp: 0x60bffc37
Exception code: 0xc0000005
Fault offset: 0x00000000000abc99
Faulting process id: 0x9b4
Faulting application start time: 0x01d76a1ef4de144c
Faulting application path: D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
Faulting module path: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll
Report Id: 6b63fc62-cea1-46b9-9254-df7bcf512777
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>100</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:44.2581239Z" />
    <EventRecordID>50614</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>00000000000abc99</Data>
    <Data>9b4</Data>
    <Data>01d76a1ef4de144c</Data>
    <Data>D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe</Data>
    <Data>C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll</Data>
    <Data>6b63fc62-cea1-46b9-9254-df7bcf512777</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          6/25/2021 7:06:42 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6AABC99

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:06:42.7576252Z" />
    <EventRecordID>50613</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6AABC99
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:05:47 PM
Event ID:      16384
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Successfully scheduled Software Protection service for re-start at 2121-06-02T00:05:47Z. Reason: RulesEngine.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">16384</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:47.8001953Z" />
    <EventRecordID>50612</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2121-06-02T00:05:47Z</Data>
    <Data>RulesEngine</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:05:22 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed with error code The device is not ready.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:22.7769504Z" />
    <EventRecordID>50611</EventRecordID>
    <Correlation />
    <Execution ProcessID="2484" ThreadID="1904" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">WmiApRpl</Data>
    <Data Name="Library">C:\WINDOWS\system32\wbem\wmiaprpl.dll</Data>
    <Data Name="Win32Error">21</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfProc
Date:          6/25/2021 7:05:22 PM
Event ID:      2002
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the job object \BaseNamedObjects\WmiProviderSubSystemHostJob for query access. The calling process may not have permission to open this job. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfProc" Guid="{72d211e1-4c54-4a93-9520-4901681b2271}" />
    <EventID>2002</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:22.6770706Z" />
    <EventRecordID>50610</EventRecordID>
    <Correlation />
    <Execution ProcessID="2484" ThreadID="1904" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Message">\BaseNamedObjects\WmiProviderSubSystemHostJob</Data>
    <Data Name="Win32 Error">1008</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfNet
Date:          6/25/2021 7:05:22 PM
Event ID:      2004
Task Category: None
Level:         Error
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfNet" Guid="{cab2b8a5-49b9-4eec-b1b0-fac21da05a3b}" />
    <EventID>2004</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:22.6347652Z" />
    <EventRecordID>50609</EventRecordID>
    <Correlation />
    <Execution ProcessID="2484" ThreadID="1904" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="NTSTATUS">3221225506</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:05:22 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "MSDTC" in DLL "C:\WINDOWS\system32\msdtcuiu.DLL" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:22.6277026Z" />
    <EventRecordID>50608</EventRecordID>
    <Correlation />
    <Execution ProcessID="2484" ThreadID="1904" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">MSDTC</Data>
    <Data Name="Library">C:\WINDOWS\system32\msdtcuiu.DLL</Data>
    <Data Name="Win32Error">2147942402</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:05:22 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "Lsa" in DLL "C:\Windows\System32\Secur32.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:22.6168671Z" />
    <EventRecordID>50607</EventRecordID>
    <Correlation />
    <Execution ProcessID="2484" ThreadID="1904" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">Lsa</Data>
    <Data Name="Library">C:\Windows\System32\Secur32.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:05:22 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "ESENT" in DLL "C:\WINDOWS\system32\esentprf.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:22.6159861Z" />
    <EventRecordID>50606</EventRecordID>
    <Correlation />
    <Execution ProcessID="2484" ThreadID="1904" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">ESENT</Data>
    <Data Name="Library">C:\WINDOWS\system32\esentprf.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:05:17 PM
Event ID:      16394
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Offline downlevel migration succeeded.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="49152">16394</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:17.4920715Z" />
    <EventRecordID>50605</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          6/25/2021 7:05:12 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Fault bucket 2058584043970814942, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: SpaceEngineers.exe
P2: 1.0.0.0
P3: 989557b6
P4: nvwgf2umx.dll
P5: 27.21.14.6677
P6: 60bffc37
P7: c0000005
P8: 00000000000abc99
P9: 
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB15A.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAE1.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAF2.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAF2.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBB12.tmp.txt

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_4d514cd94d6b85c9f0618c0cc7dedf85511ced7_7a351e77_c2da4a8c-1967-4148-b639-1d3eaa3b4ad9

Analysis symbol: 
Rechecking for solution: 0
Report Id: 32774647-1904-4e58-b3de-15fbe21dae1e
Report Status: 268435456
Hashed bucket: 8fb1b9f809ef24421c918f47f92ae3de
Cab Guid: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:12.0763741Z" />
    <EventRecordID>50604</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2058584043970814942</Data>
    <Data>4</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>00000000000abc99</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB15A.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAE1.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAF2.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAF2.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBB12.tmp.txt</Data>
    <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_4d514cd94d6b85c9f0618c0cc7dedf85511ced7_7a351e77_c2da4a8c-1967-4148-b639-1d3eaa3b4ad9</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>32774647-1904-4e58-b3de-15fbe21dae1e</Data>
    <Data>268435456</Data>
    <Data>8fb1b9f809ef24421c918f47f92ae3de</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          6/25/2021 7:05:08 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Faulting application name: SpaceEngineers.exe, version: 1.0.0.0, time stamp: 0x989557b6
Faulting module name: nvwgf2umx.dll, version: 27.21.14.6677, time stamp: 0x60bffc37
Exception code: 0xc0000005
Fault offset: 0x00000000000abc99
Faulting process id: 0x28f4
Faulting application start time: 0x01d76a1eba077c06
Faulting application path: D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
Faulting module path: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll
Report Id: 32774647-1904-4e58-b3de-15fbe21dae1e
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>100</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:08.7740297Z" />
    <EventRecordID>50603</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>00000000000abc99</Data>
    <Data>28f4</Data>
    <Data>01d76a1eba077c06</Data>
    <Data>D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe</Data>
    <Data>C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll</Data>
    <Data>32774647-1904-4e58-b3de-15fbe21dae1e</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          6/25/2021 7:05:07 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6AABC99

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:05:07.3455303Z" />
    <EventRecordID>50602</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6AABC99
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:03:48 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed with error code The device is not ready.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:48.2489883Z" />
    <EventRecordID>50601</EventRecordID>
    <Correlation />
    <Execution ProcessID="10484" ThreadID="5592" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">WmiApRpl</Data>
    <Data Name="Library">C:\WINDOWS\system32\wbem\wmiaprpl.dll</Data>
    <Data Name="Win32Error">21</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfProc
Date:          6/25/2021 7:03:48 PM
Event ID:      2002
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the job object \BaseNamedObjects\WmiProviderSubSystemHostJob for query access. The calling process may not have permission to open this job. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfProc" Guid="{72d211e1-4c54-4a93-9520-4901681b2271}" />
    <EventID>2002</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:48.1479151Z" />
    <EventRecordID>50600</EventRecordID>
    <Correlation />
    <Execution ProcessID="10484" ThreadID="5592" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Message">\BaseNamedObjects\WmiProviderSubSystemHostJob</Data>
    <Data Name="Win32 Error">1008</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfNet
Date:          6/25/2021 7:03:48 PM
Event ID:      2004
Task Category: None
Level:         Error
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfNet" Guid="{cab2b8a5-49b9-4eec-b1b0-fac21da05a3b}" />
    <EventID>2004</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:48.1066221Z" />
    <EventRecordID>50599</EventRecordID>
    <Correlation />
    <Execution ProcessID="10484" ThreadID="5592" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="NTSTATUS">3221225506</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:03:48 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "MSDTC" in DLL "C:\WINDOWS\system32\msdtcuiu.DLL" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:48.0998607Z" />
    <EventRecordID>50598</EventRecordID>
    <Correlation />
    <Execution ProcessID="10484" ThreadID="5592" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">MSDTC</Data>
    <Data Name="Library">C:\WINDOWS\system32\msdtcuiu.DLL</Data>
    <Data Name="Win32Error">2147942402</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:03:48 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "Lsa" in DLL "C:\Windows\System32\Secur32.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:48.0893960Z" />
    <EventRecordID>50597</EventRecordID>
    <Correlation />
    <Execution ProcessID="10484" ThreadID="5592" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">Lsa</Data>
    <Data Name="Library">C:\Windows\System32\Secur32.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:03:48 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "ESENT" in DLL "C:\WINDOWS\system32\esentprf.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:48.0887585Z" />
    <EventRecordID>50596</EventRecordID>
    <Correlation />
    <Execution ProcessID="10484" ThreadID="5592" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">ESENT</Data>
    <Data Name="Library">C:\WINDOWS\system32\esentprf.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          6/25/2021 7:03:31 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Fault bucket 2058584043970814942, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: SpaceEngineers.exe
P2: 1.0.0.0
P3: 989557b6
P4: nvwgf2umx.dll
P5: 27.21.14.6677
P6: 60bffc37
P7: c0000005
P8: 00000000000abc99
P9: 
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2869.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER323D.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER324E.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER325C.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER327C.tmp.txt

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_4d514cd94d6b85c9f0618c0cc7dedf85511ced7_7a351e77_b9c69f0d-e00b-4a44-8fe3-8e000b3a4ae0

Analysis symbol: 
Rechecking for solution: 0
Report Id: f9e3c07a-eed6-4532-8cf8-3ffcfe091979
Report Status: 268435456
Hashed bucket: 8fb1b9f809ef24421c918f47f92ae3de
Cab Guid: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:31.3373212Z" />
    <EventRecordID>50595</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2058584043970814942</Data>
    <Data>4</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>00000000000abc99</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2869.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER323D.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER324E.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER325C.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER327C.tmp.txt</Data>
    <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_4d514cd94d6b85c9f0618c0cc7dedf85511ced7_7a351e77_b9c69f0d-e00b-4a44-8fe3-8e000b3a4ae0</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>f9e3c07a-eed6-4532-8cf8-3ffcfe091979</Data>
    <Data>268435456</Data>
    <Data>8fb1b9f809ef24421c918f47f92ae3de</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          6/25/2021 7:03:28 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Faulting application name: SpaceEngineers.exe, version: 1.0.0.0, time stamp: 0x989557b6
Faulting module name: nvwgf2umx.dll, version: 27.21.14.6677, time stamp: 0x60bffc37
Exception code: 0xc0000005
Fault offset: 0x00000000000abc99
Faulting process id: 0x18c8
Faulting application start time: 0x01d76a1e6c2ad601
Faulting application path: D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
Faulting module path: C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll
Report Id: f9e3c07a-eed6-4532-8cf8-3ffcfe091979
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>100</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:28.1628584Z" />
    <EventRecordID>50594</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>nvwgf2umx.dll</Data>
    <Data>27.21.14.6677</Data>
    <Data>60bffc37</Data>
    <Data>c0000005</Data>
    <Data>00000000000abc99</Data>
    <Data>18c8</Data>
    <Data>01d76a1e6c2ad601</Data>
    <Data>D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe</Data>
    <Data>C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b2801df14ec7de03\nvwgf2umx.dll</Data>
    <Data>f9e3c07a-eed6-4532-8cf8-3ffcfe091979</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          6/25/2021 7:03:27 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6AABC99

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:03:27.3693604Z" />
    <EventRecordID>50593</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FFCE6AABC99
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:02:49 PM
Event ID:      903
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Software Protection service has stopped.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">903</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:49.5555694Z" />
    <EventRecordID>50592</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:02:49 PM
Event ID:      16384
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Successfully scheduled Software Protection service for re-start at 2121-06-02T00:02:49Z. Reason: RulesEngine.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">16384</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:49.5450693Z" />
    <EventRecordID>50591</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2121-06-02T00:02:49Z</Data>
    <Data>RulesEngine</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        SecurityCenter
Date:          6/25/2021 7:02:21 PM
Event ID:      15
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_ON.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="SecurityCenter" />
    <EventID Qualifiers="0">15</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:21.6003197Z" />
    <EventRecordID>50590</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Windows Defender</Data>
    <Data>SECURITY_PRODUCT_STATE_ON</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        SecurityCenter
Date:          6/25/2021 7:02:19 PM
Event ID:      1
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Windows Security Center Service has started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="SecurityCenter" />
    <EventID Qualifiers="0">1</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:19.5768229Z" />
    <EventRecordID>50589</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:02:19 PM
Event ID:      902
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Software Protection service has started.
10.0.19041.1052
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">902</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:19.5213232Z" />
    <EventRecordID>50588</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>10.0.19041.1052</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:02:19 PM
Event ID:      1003
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 040fa323-92b1-4baf-97a2-5b67feaefddb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 0724cb7d-3437-4cb7-93cb-830375d0079d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 0ad2ac98-7bb9-4201-8d92-312299201369, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 1a9a717a-cf13-4ba5-83c3-0fe25fa868d5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 221a02da-e2a1-4b75-864c-0a4410a33fdf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 291ece0e-9c38-40ca-a9e1-32cc7ec19507, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
7: 2936d1d2-913a-4542-b54e-ce5a602a2a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: 2c293c26-a45a-4a2a-a350-c69a67097529, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: 2de67392-b7a7-462a-b1ca-108dd189f588, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: 2ffd8952-423e-4903-b993-72a1aa44cf82, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: 30a42c86-b7a0-4a34-8c90-ff177cb2acb7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: 345a5db0-d94f-4e3b-a0c0-7c42f7bc3ebf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: 3502365a-f88a-4ba4-822a-5769d3073b65, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
14: 377333b1-8b5d-48d6-9679-1225c872d37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
15: 3df374ef-d444-4494-a5a1-4b0d9fd0e203, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
16: 3f1afc82-f8ac-4f6c-8005-1d233e606eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
17: 49cd895b-53b2-4dc4-a5f7-b18aa019ad37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
18: 4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
19: 4f3da0d2-271d-4508-ae81-626b60809a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
20: 60b3ec1b-9545-4921-821f-311b129dd6f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
21: 613d217f-7f13-4268-9907-1662339531cd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
22: 62f0c100-9c53-4e02-b886-a3528ddfe7f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
23: 6365275e-368d-46ca-a0ef-fc0404119333, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
24: 721f9237-9341-4453-a661-09e8baa6cca5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
25: 73111121-5638-40f6-bc11-f1d7b0d64300, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
26: 7a802526-4c94-4bd1-ba14-835a1aca2120, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
27: 7cb546c0-c7d5-44d8-9a5c-69ecdd782b69, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
28: 82bbc092-bc50-4e16-8e18-b74fc486aec3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
29: 8ab9bdd1-1f67-4997-82d9-8878520837d9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
30: 8b351c9c-f398-4515-9900-09df49427262, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
31: 90da7373-1c51-430b-bf26-c97e9c5cdc31, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
32: 95dca82f-385d-4d39-b85b-5c73fa285d6f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
33: a48938aa-62fa-4966-9d44-9f04da3f72f2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
34: b0773a15-df3a-4312-9ad2-83d69648e356, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
35: b4bfe195-541e-4e64-ad23-6177f19e395e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
36: b68e61d2-68ca-4757-be45-0cc2f3e68eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
37: bd3762d7-270d-4760-8fb3-d829ca45278a, 1, 1 [(0 )(1 )(2 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(3 )]
38: c86d5194-4840-4dae-9c1c-0301003a5ab0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
39: d552befb-48cc-4327-8f39-47d2d94f987c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
40: d6eadb3b-5ca8-4a6b-986e-35b550756111, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
41: df96023b-dcd9-4be2-afa0-c6c871159ebe, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
42: e0c42288-980c-4788-a014-c080d2e1926e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
43: e4db50ea-bda1-4566-b047-0ca50abc6f07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
44: e558417a-5123-4f6f-91e7-385c1c7ca9d4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
45: e7a950a2-e548-4f10-bf16-02ec848e0643, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
46: eb6d346f-1c60-4643-b960-40ec31596c45, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
47: ec868e65-fadf-4759-b23e-93fe37f2cc29, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
48: ef51e000-2659-4f25-8345-3de70a9cf4c4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
49: f7af7d09-40e4-419c-a49b-eae366689ebd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
50: fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
51: fe74f55b-0338-41d6-b267-4a201abe7285, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">1003</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:19.4053216Z" />
    <EventRecordID>50587</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>55c92734-d682-4d71-983e-d6ec3f16059f</Data>
    <Data>
1: 040fa323-92b1-4baf-97a2-5b67feaefddb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 0724cb7d-3437-4cb7-93cb-830375d0079d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 0ad2ac98-7bb9-4201-8d92-312299201369, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 1a9a717a-cf13-4ba5-83c3-0fe25fa868d5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 221a02da-e2a1-4b75-864c-0a4410a33fdf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 291ece0e-9c38-40ca-a9e1-32cc7ec19507, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
7: 2936d1d2-913a-4542-b54e-ce5a602a2a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: 2c293c26-a45a-4a2a-a350-c69a67097529, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: 2de67392-b7a7-462a-b1ca-108dd189f588, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: 2ffd8952-423e-4903-b993-72a1aa44cf82, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: 30a42c86-b7a0-4a34-8c90-ff177cb2acb7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: 345a5db0-d94f-4e3b-a0c0-7c42f7bc3ebf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: 3502365a-f88a-4ba4-822a-5769d3073b65, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
14: 377333b1-8b5d-48d6-9679-1225c872d37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
15: 3df374ef-d444-4494-a5a1-4b0d9fd0e203, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
16: 3f1afc82-f8ac-4f6c-8005-1d233e606eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
17: 49cd895b-53b2-4dc4-a5f7-b18aa019ad37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
18: 4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
19: 4f3da0d2-271d-4508-ae81-626b60809a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
20: 60b3ec1b-9545-4921-821f-311b129dd6f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
21: 613d217f-7f13-4268-9907-1662339531cd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
22: 62f0c100-9c53-4e02-b886-a3528ddfe7f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
23: 6365275e-368d-46ca-a0ef-fc0404119333, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
24: 721f9237-9341-4453-a661-09e8baa6cca5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
25: 73111121-5638-40f6-bc11-f1d7b0d64300, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
26: 7a802526-4c94-4bd1-ba14-835a1aca2120, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
27: 7cb546c0-c7d5-44d8-9a5c-69ecdd782b69, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
28: 82bbc092-bc50-4e16-8e18-b74fc486aec3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
29: 8ab9bdd1-1f67-4997-82d9-8878520837d9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
30: 8b351c9c-f398-4515-9900-09df49427262, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
31: 90da7373-1c51-430b-bf26-c97e9c5cdc31, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
32: 95dca82f-385d-4d39-b85b-5c73fa285d6f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
33: a48938aa-62fa-4966-9d44-9f04da3f72f2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
34: b0773a15-df3a-4312-9ad2-83d69648e356, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
35: b4bfe195-541e-4e64-ad23-6177f19e395e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
36: b68e61d2-68ca-4757-be45-0cc2f3e68eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
37: bd3762d7-270d-4760-8fb3-d829ca45278a, 1, 1 [(0 )(1 )(2 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(3 )]
38: c86d5194-4840-4dae-9c1c-0301003a5ab0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
39: d552befb-48cc-4327-8f39-47d2d94f987c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
40: d6eadb3b-5ca8-4a6b-986e-35b550756111, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
41: df96023b-dcd9-4be2-afa0-c6c871159ebe, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
42: e0c42288-980c-4788-a014-c080d2e1926e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
43: e4db50ea-bda1-4566-b047-0ca50abc6f07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
44: e558417a-5123-4f6f-91e7-385c1c7ca9d4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
45: e7a950a2-e548-4f10-bf16-02ec848e0643, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
46: eb6d346f-1c60-4643-b960-40ec31596c45, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
47: ec868e65-fadf-4759-b23e-93fe37f2cc29, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
48: ef51e000-2659-4f25-8345-3de70a9cf4c4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
49: f7af7d09-40e4-419c-a49b-eae366689ebd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
50: fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
51: fe74f55b-0338-41d6-b267-4a201abe7285, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:02:19 PM
Event ID:      1066
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Initialization status for service objects.
C:\WINDOWS\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">1066</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:19.2908226Z" />
    <EventRecordID>50586</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>C:\WINDOWS\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:02:19 PM
Event ID:      16394
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Offline downlevel migration succeeded.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="49152">16394</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:19.2653201Z" />
    <EventRecordID>50585</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          6/25/2021 7:02:19 PM
Event ID:      900
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Software Protection service is starting.
Parameters:<explicit>
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">900</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:19.1418220Z" />
    <EventRecordID>50584</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>&lt;explicit&gt;</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        edgeupdate
Date:          6/25/2021 7:02:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Service stopped.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="edgeupdate" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:02:18.7088253Z" />
    <EventRecordID>50583</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service stopped</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:01:39 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed with error code The device is not ready.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:01:39.8400981Z" />
    <EventRecordID>50582</EventRecordID>
    <Correlation />
    <Execution ProcessID="6344" ThreadID="6288" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">WmiApRpl</Data>
    <Data Name="Library">C:\WINDOWS\system32\wbem\wmiaprpl.dll</Data>
    <Data Name="Win32Error">21</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfProc
Date:          6/25/2021 7:01:39 PM
Event ID:      2002
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the job object \BaseNamedObjects\WmiProviderSubSystemHostJob for query access. The calling process may not have permission to open this job. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfProc" Guid="{72d211e1-4c54-4a93-9520-4901681b2271}" />
    <EventID>2002</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:01:39.6890819Z" />
    <EventRecordID>50581</EventRecordID>
    <Correlation />
    <Execution ProcessID="6344" ThreadID="6288" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Message">\BaseNamedObjects\WmiProviderSubSystemHostJob</Data>
    <Data Name="Win32 Error">1008</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfNet
Date:          6/25/2021 7:01:39 PM
Event ID:      2004
Task Category: None
Level:         Error
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfNet" Guid="{cab2b8a5-49b9-4eec-b1b0-fac21da05a3b}" />
    <EventID>2004</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:01:39.6398609Z" />
    <EventRecordID>50580</EventRecordID>
    <Correlation />
    <Execution ProcessID="6344" ThreadID="6288" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="NTSTATUS">3221225506</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:01:39 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "MSDTC" in DLL "C:\WINDOWS\system32\msdtcuiu.DLL" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:01:39.6310042Z" />
    <EventRecordID>50579</EventRecordID>
    <Correlation />
    <Execution ProcessID="6344" ThreadID="6288" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">MSDTC</Data>
    <Data Name="Library">C:\WINDOWS\system32\msdtcuiu.DLL</Data>
    <Data Name="Win32Error">2147942402</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:01:39 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "Lsa" in DLL "C:\Windows\System32\Secur32.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:01:39.6088587Z" />
    <EventRecordID>50578</EventRecordID>
    <Correlation />
    <Execution ProcessID="6344" ThreadID="6288" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">Lsa</Data>
    <Data Name="Library">C:\Windows\System32\Secur32.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 7:01:39 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "ESENT" in DLL "C:\WINDOWS\system32\esentprf.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:01:39.6080220Z" />
    <EventRecordID>50577</EventRecordID>
    <Correlation />
    <Execution ProcessID="6344" ThreadID="6288" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">ESENT</Data>
    <Data Name="Library">C:\WINDOWS\system32\esentprf.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          6/25/2021 7:00:30 PM
Event ID:      6000
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
    <EventID Qualifiers="32768">6000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:30.6084276Z" />
    <EventRecordID>50576</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SessionEnv</Data>
    <Binary>D9060000</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          6/25/2021 7:00:30 PM
Event ID:      6003
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The winlogon notification subscriber <SessionEnv> was unavailable to handle a critical notification event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
    <EventID Qualifiers="32768">6003</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:30.0457094Z" />
    <EventRecordID>50575</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SessionEnv</Data>
    <Binary>D9060000</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Date:          6/25/2021 7:00:27 PM
Event ID:      64
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Certificate for local system with Thumbprint 28 c3 75 5f 87 d6 a0 2f 9f 0e 33 bc b2 8c a0 db dc 9f ef 46 is about to expire or already expired.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CertificateServicesClient-AutoEnrollment" Guid="{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43}" EventSourceName="AutoEnrollment" />
    <EventID Qualifiers="32768">64</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:27.5194898Z" />
    <EventRecordID>50574</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="Context">local system</Data>
    <Data Name="ObjId">28 c3 75 5f 87 d6 a0 2f 9f 0e 33 bc b2 8c a0 db dc 9f ef 46</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Search
Date:          6/25/2021 7:00:19 PM
Event ID:      1003
Task Category: Search service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Windows Search Service started.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
    <EventID Qualifiers="16384">1003</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:19.4829208Z" />
    <EventRecordID>50573</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ExtraInfo">
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          6/25/2021 7:00:19 PM
Event ID:      326
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
SearchIndexer (5484,D,50) Windows: The database engine attached a database (1, C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb). (Time=0 seconds) 
 
Saved Cache: 0 0 
Additional Data: lgposAttach = 000004F1:00AE:0268,
dbv = 1568.110.240 
 
Internal Timing Sequence: 
[1] 0.000002 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)
[2] 0.001947 -0.000343 (1) WT +J(0) +M(C:0K, Fs:25, WS:36K # 0K, PF:32K # 0K, P:32K)
[3] 0.003331 -0.001029 (6) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:3480/2) +M(C:0K, Fs:39, WS:124K # 0K, PF:140K # 0K, P:140K)
[4] 0.000078 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)
[5] -
[6] -
[7] -
[8] 0.001253 -0.000972 (2) CM +J(CM:2, PgRf:2, Rd:14/2, Dy:0/0, Lg:54/1) +M(C:0K, Fs:57, WS:224K # 0K, PF:720K # 0K, P:720K)
[9] 0.019279 -0.000506 (5) CM -0.018580 (1) WT +J(CM:5, PgRf:23, Rd:0/5, Dy:0/0, Lg:0/0) +M(C:0K, Fs:69, WS:276K # 0K, PF:256K # 196K, P:256K)
[10] 0.000438 -0.000370 (1) CM +J(CM:1, PgRf:40, Rd:0/1, Dy:0/0, Lg:0/0) +M(C:0K, Fs:10, WS:40K # 28K, PF:96K # 96K, P:96K)
[11] 0.000009 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:2, WS:8K # 8K, PF:0K # 0K, P:0K)
[12] 0.000030 +J(CM:0, PgRf:42, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:3, WS:12K # 12K, PF:0K # 0K, P:0K)
[13] 0.0 +J(0)
[14] 0.0 +J(0)
[15] 0.000003 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">326</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:19.3735273Z" />
    <EventRecordID>50572</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SearchIndexer</Data>
    <Data>5484,D,50</Data>
    <Data>Windows: </Data>
    <Data>1</Data>
    <Data>C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb</Data>
    <Data>0</Data>
    <Data>
[1] 0.000002 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)
[2] 0.001947 -0.000343 (1) WT +J(0) +M(C:0K, Fs:25, WS:36K # 0K, PF:32K # 0K, P:32K)
[3] 0.003331 -0.001029 (6) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:3480/2) +M(C:0K, Fs:39, WS:124K # 0K, PF:140K # 0K, P:140K)
[4] 0.000078 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)
[5] -
[6] -
[7] -
[8] 0.001253 -0.000972 (2) CM +J(CM:2, PgRf:2, Rd:14/2, Dy:0/0, Lg:54/1) +M(C:0K, Fs:57, WS:224K # 0K, PF:720K # 0K, P:720K)
[9] 0.019279 -0.000506 (5) CM -0.018580 (1) WT +J(CM:5, PgRf:23, Rd:0/5, Dy:0/0, Lg:0/0) +M(C:0K, Fs:69, WS:276K # 0K, PF:256K # 196K, P:256K)
[10] 0.000438 -0.000370 (1) CM +J(CM:1, PgRf:40, Rd:0/1, Dy:0/0, Lg:0/0) +M(C:0K, Fs:10, WS:40K # 28K, PF:96K # 96K, P:96K)
[11] 0.000009 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:2, WS:8K # 8K, PF:0K # 0K, P:0K)
[12] 0.000030 +J(CM:0, PgRf:42, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:3, WS:12K # 12K, PF:0K # 0K, P:0K)
[13] 0.0 +J(0)
[14] 0.0 +J(0)
[15] 0.000003 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0).</Data>
    <Data>0 0</Data>
    <Data>lgposAttach = 000004F1:00AE:0268,
dbv = 1568.110.240</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          6/25/2021 7:00:19 PM
Event ID:      105
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
SearchIndexer (5484,D,0) Windows: The database engine started a new instance (0). (Time=0 seconds) 
 
Additional Data:
  
 
Internal Timing Sequence: 
[1] 0.001681 +J(0) +M(C:0K, Fs:525, WS:2052K # 2052K, PF:6156K # 6156K, P:6156K)
[2] 0.000258 +J(0) +M(C:0K, Fs:141, WS:560K # 560K, PF:516K # 516K, P:516K)
[3] 0.000784 +J(0) +M(C:0K, Fs:12, WS:40K # 40K, PF:72K # 72K, P:72K)
[4] 0.000109 +J(0) +M(C:0K, Fs:33, WS:132K # 132K, PF:384K # 384K, P:384K)
[5] 0.000838 +J(0) +M(C:0K, Fs:12, WS:48K # 48K, PF:24K # 24K, P:24K)
[6] 0.002474 +J(0) +M(C:0K, Fs:23, WS:92K # 92K, PF:12K # 12K, P:12K)
[7] 0.003176 -0.001575 (2) WT +J(0) +M(C:0K, Fs:275, WS:1096K # 1096K, PF:1032K # 1032K, P:1032K)
[8] -
[9] -
[10] -
[11] -
[12] -
[13] 0.005169 -0.000261 (1) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:616/1) +M(C:0K, Fs:8, WS:-1000K # 24K, PF:-1020K # 12K, P:-1020K)
[14] 0.000019 +J(0)
[15] 0.000079 +J(0) +M(C:0K, Fs:65, WS:260K # 0K, PF:64K # 0K, P:64K)
[16] 0.000108 +J(0) +M(C:0K, Fs:3, WS:4K # 0K, PF:0K # 0K, P:0K).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">105</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:19.3422802Z" />
    <EventRecordID>50571</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SearchIndexer</Data>
    <Data>5484,D,0</Data>
    <Data>Windows: </Data>
    <Data>0</Data>
    <Data>0</Data>
    <Data>
[1] 0.001681 +J(0) +M(C:0K, Fs:525, WS:2052K # 2052K, PF:6156K # 6156K, P:6156K)
[2] 0.000258 +J(0) +M(C:0K, Fs:141, WS:560K # 560K, PF:516K # 516K, P:516K)
[3] 0.000784 +J(0) +M(C:0K, Fs:12, WS:40K # 40K, PF:72K # 72K, P:72K)
[4] 0.000109 +J(0) +M(C:0K, Fs:33, WS:132K # 132K, PF:384K # 384K, P:384K)
[5] 0.000838 +J(0) +M(C:0K, Fs:12, WS:48K # 48K, PF:24K # 24K, P:24K)
[6] 0.002474 +J(0) +M(C:0K, Fs:23, WS:92K # 92K, PF:12K # 12K, P:12K)
[7] 0.003176 -0.001575 (2) WT +J(0) +M(C:0K, Fs:275, WS:1096K # 1096K, PF:1032K # 1032K, P:1032K)
[8] -
[9] -
[10] -
[11] -
[12] -
[13] 0.005169 -0.000261 (1) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:616/1) +M(C:0K, Fs:8, WS:-1000K # 24K, PF:-1020K # 12K, P:-1020K)
[14] 0.000019 +J(0)
[15] 0.000079 +J(0) +M(C:0K, Fs:65, WS:260K # 0K, PF:64K # 0K, P:64K)
[16] 0.000108 +J(0) +M(C:0K, Fs:3, WS:4K # 0K, PF:0K # 0K, P:0K).</Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          6/25/2021 7:00:19 PM
Event ID:      102
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
SearchIndexer (5484,P,98) Windows: The database engine (10.00.19043.0000) is starting a new instance (0).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">102</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:19.3266532Z" />
    <EventRecordID>50570</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SearchIndexer</Data>
    <Data>5484,P,98</Data>
    <Data>Windows: </Data>
    <Data>0</Data>
    <Data>10</Data>
    <Data>00</Data>
    <Data>19043</Data>
    <Data>0000</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendSoftAPService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Child process [9248 - xTendSoftAP.exe ] terminated with -1
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendSoftAPService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.9672819Z" />
    <EventRecordID>50569</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Child process [9248 - xTendSoftAP.exe ] terminated with -1</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendSoftAPService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Service stopped successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendSoftAPService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.9672819Z" />
    <EventRecordID>50568</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service stopped successfully.</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendSoftAPService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Stopping xTendSoftAPService
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendSoftAPService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.8579052Z" />
    <EventRecordID>50567</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Stopping xTendSoftAPService</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        SonosLibraryService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Service started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="SonosLibraryService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.5141597Z" />
    <EventRecordID>50566</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service started successfully.</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendSoftAPService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Service started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendSoftAPService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.4985326Z" />
    <EventRecordID>50565</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service started successfully.</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendUtilityService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Service started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendUtilityService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.4985326Z" />
    <EventRecordID>50564</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service started successfully.</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendSoftAPService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Starting xTendSoftAP.exe 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendSoftAPService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.4829068Z" />
    <EventRecordID>50563</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Starting xTendSoftAP.exe </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendUtilityService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Starting xTendUtility.exe 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendUtilityService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.4829068Z" />
    <EventRecordID>50562</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Starting xTendUtility.exe </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendSoftAPService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
envar XTEND_HOME=C:\WINDOWS\System32\drivers\RivetNetworks\Killer
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendSoftAPService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.4672810Z" />
    <EventRecordID>50561</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>envar XTEND_HOME=C:\WINDOWS\System32\drivers\RivetNetworks\Killer</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        xTendUtilityService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
envar XTEND_HOME=C:\WINDOWS\System32\drivers\RivetNetworks\Killer
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="xTendUtilityService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.4672810Z" />
    <EventRecordID>50560</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>envar XTEND_HOME=C:\WINDOWS\System32\drivers\RivetNetworks\Killer</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-MSMQ
Date:          6/25/2021 7:00:18 PM
Event ID:      2028
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Message Queuing service started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-MSMQ" Guid="{ce18af71-5efd-4f5a-9bd5-635e34632f69}" EventSourceName="MSMQ" />
    <EventID Qualifiers="16384">2028</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.4047829Z" />
    <EventRecordID>50559</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        AdobeARMservice
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The operation completed successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="AdobeARMservice" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.2641563Z" />
    <EventRecordID>50558</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service started</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        RtkAudioUniversalService
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The operation completed successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="RtkAudioUniversalService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.2172837Z" />
    <EventRecordID>50557</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>RtkAudioUniversalService</Data>
    <Data>CppWindowsService in OnStart</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Killer Analytics Service
Date:          6/25/2021 7:00:18 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The operation completed successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Killer Analytics Service" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.2016561Z" />
    <EventRecordID>50556</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service started/resumed</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Killer Analytics Service
Date:          6/25/2021 7:00:18 PM
Event ID:      16
Task Category: (1)
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The directory cannot be removed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Killer Analytics Service" />
    <EventID Qualifiers="0">16</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:18.2016561Z" />
    <EventRecordID>50555</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service Starting</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          6/25/2021 7:00:17 PM
Event ID:      5617
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      PhuzzyWu
Description:
Windows Management Instrumentation Service subsystems initialized successfully
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" />
    <EventID>5617</EventID>
    <Version>2</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:17.2480507Z" />
    <EventRecordID>50554</EventRecordID>
    <Correlation />
    <Execution ProcessID="2292" ThreadID="2388" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          6/25/2021 7:00:17 PM
Event ID:      5615
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      PhuzzyWu
Description:
Windows Management Instrumentation Service started sucessfully
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" />
    <EventID>5615</EventID>
    <Version>2</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:17.0321435Z" />
    <EventRecordID>50553</EventRecordID>
    <Correlation />
    <Execution ProcessID="2292" ThreadID="2344" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-EventSystem
Date:          6/25/2021 7:00:17 PM
Event ID:      4625
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
    <EventID Qualifiers="16384">4625</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:17.1235318Z" />
    <EventRecordID>50552</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">86400</Data>
    <Data Name="param2">SuppressDuplicateDuration</Data>
    <Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          6/25/2021 7:00:16 PM
Event ID:      1531
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      PhuzzyWu
Description:
The User Profile Service has started successfully.  


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89b1e9f0-5aff-44a6-9b44-0a07a7ce5845}" />
    <EventID>1531</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-26T00:00:16.9672843Z" />
    <EventRecordID>50551</EventRecordID>
    <Correlation />
    <Execution ProcessID="1000" ThreadID="1076" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          6/25/2021 6:59:37 PM
Event ID:      1532
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      PhuzzyWu
Description:
The User Profile Service has stopped.  


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89b1e9f0-5aff-44a6-9b44-0a07a7ce5845}" />
    <EventID>1532</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:37.9169563Z" />
    <EventRecordID>50550</EventRecordID>
    <Correlation />
    <Execution ProcessID="1356" ThreadID="2052" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        SecurityCenter
Date:          6/25/2021 6:59:37 PM
Event ID:      2
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The Windows Security Center Service has stopped.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="SecurityCenter" />
    <EventID Qualifiers="0">2</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:37.9185277Z" />
    <EventRecordID>50549</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        RtkAudioUniversalService
Date:          6/25/2021 6:59:37 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The operation completed successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="RtkAudioUniversalService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:37.9120269Z" />
    <EventRecordID>50548</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>RtkAudioUniversalService</Data>
    <Data>CppWindowsService in OnStop</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        SonosLibraryService
Date:          6/25/2021 6:59:37 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Service has been successfully shut down.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="SonosLibraryService" />
    <EventID Qualifiers="0">0</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:37.9115254Z" />
    <EventRecordID>50547</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service has been successfully shut down.</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Killer Analytics Service
Date:          6/25/2021 6:59:34 PM
Event ID:      16
Task Category: (1)
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The directory cannot be removed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Killer Analytics Service" />
    <EventID Qualifiers="0">16</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:34.8087990Z" />
    <EventRecordID>50546</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Service Stopping</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          6/25/2021 6:59:34 PM
Event ID:      6000
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
    <EventID Qualifiers="32768">6000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:34.7148378Z" />
    <EventRecordID>50545</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SessionEnv</Data>
    <Binary>D9060000</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          6/25/2021 6:59:34 PM
Event ID:      6000
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
The winlogon notification subscriber <WSearch> was unavailable to handle a notification event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
    <EventID Qualifiers="32768">6000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:34.6736383Z" />
    <EventRecordID>50544</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>WSearch</Data>
    <Binary>D9060000</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Winsrv
Date:          6/25/2021 6:59:33 PM
Event ID:      10001
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      PhuzzyWu
Description:
The following application attempted to veto the shutdown: steam.exe.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winsrv" Guid="{9d55b53d-449b-4824-a637-24f9d69aa02f}" />
    <EventID>10001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:33.8704488Z" />
    <EventRecordID>50543</EventRecordID>
    <Correlation />
    <Execution ProcessID="1352" ThreadID="16372" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <VetoAppEvent xmlns="http://manifests.microsoft.com/win/2004/08/windows/winsrv">
      <AppName>steam.exe</AppName>
      <ResponseTime>15</ResponseTime>
    </VetoAppEvent>
  </UserData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          6/25/2021 6:59:02 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Fault bucket 1701230891783547811, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0

Problem signature:
P1: SpaceEngineers.exe
P2: 1.0.0.0
P3: 989557b6
P4: StackHash_ac46
P5: 0.0.0.0
P6: 00000000
P7: PCH_D0_FROM_ntdll+0x000000000009D974
P8: c0000005
P9: 0000000000000008
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7FC.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB1FF.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB210.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB20E.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB22E.tmp.txt

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_74c8bcf8f974a352abb9f5f520a370da36cece_7a351e77_315cd501-466d-4799-8444-5b5c351ea270

Analysis symbol: 
Rechecking for solution: 0
Report Id: d270f699-fa93-4a35-9a1e-260352479f99
Report Status: 268435456
Hashed bucket: 69c4a052e8d55a05f79bfc7b89adeba3
Cab Guid: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:59:02.4577764Z" />
    <EventRecordID>50542</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>1701230891783547811</Data>
    <Data>5</Data>
    <Data>BEX64</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>StackHash_ac46</Data>
    <Data>0.0.0.0</Data>
    <Data>00000000</Data>
    <Data>PCH_D0_FROM_ntdll+0x000000000009D974</Data>
    <Data>c0000005</Data>
    <Data>0000000000000008</Data>
    <Data>
    </Data>
    <Data>
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7FC.tmp.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB1FF.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB210.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB20E.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB22E.tmp.txt</Data>
    <Data>\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SpaceEngineers.e_74c8bcf8f974a352abb9f5f520a370da36cece_7a351e77_315cd501-466d-4799-8444-5b5c351ea270</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>d270f699-fa93-4a35-9a1e-260352479f99</Data>
    <Data>268435456</Data>
    <Data>69c4a052e8d55a05f79bfc7b89adeba3</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          6/25/2021 6:58:59 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Faulting application name: SpaceEngineers.exe, version: 1.0.0.0, time stamp: 0x989557b6
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000000000000
Faulting process id: 0x36c0
Faulting application start time: 0x01d76a1dc6f67edc
Faulting application path: D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
Faulting module path: unknown
Report Id: d270f699-fa93-4a35-9a1e-260352479f99
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>100</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:58:59.0600778Z" />
    <EventRecordID>50541</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>SpaceEngineers.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>989557b6</Data>
    <Data>unknown</Data>
    <Data>0.0.0.0</Data>
    <Data>00000000</Data>
    <Data>c0000005</Data>
    <Data>0000000000000000</Data>
    <Data>36c0</Data>
    <Data>01d76a1dc6f67edc</Data>
    <Data>D:\SteamLibrary\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe</Data>
    <Data>unknown</Data>
    <Data>d270f699-fa93-4a35-9a1e-260352479f99</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          6/25/2021 6:58:57 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      PhuzzyWu
Description:
Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 0000000000000000

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:58:57.6285766Z" />
    <EventRecordID>50540</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: SpaceEngineers.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 0000000000000000
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 6:57:02 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "WmiApRpl" in DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" failed with error code The device is not ready.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:57:02.7405283Z" />
    <EventRecordID>50539</EventRecordID>
    <Correlation />
    <Execution ProcessID="14016" ThreadID="10576" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">WmiApRpl</Data>
    <Data Name="Library">C:\WINDOWS\system32\wbem\wmiaprpl.dll</Data>
    <Data Name="Win32Error">21</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfProc
Date:          6/25/2021 6:57:02 PM
Event ID:      2002
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the job object \BaseNamedObjects\WmiProviderSubSystemHostJob for query access. The calling process may not have permission to open this job. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfProc" Guid="{72d211e1-4c54-4a93-9520-4901681b2271}" />
    <EventID>2002</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:57:02.6257024Z" />
    <EventRecordID>50538</EventRecordID>
    <Correlation />
    <Execution ProcessID="14016" ThreadID="10576" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Message">\BaseNamedObjects\WmiProviderSubSystemHostJob</Data>
    <Data Name="Win32 Error">1008</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-PerfNet
Date:          6/25/2021 6:57:02 PM
Event ID:      2004
Task Category: None
Level:         Error
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfNet" Guid="{cab2b8a5-49b9-4eec-b1b0-fac21da05a3b}" />
    <EventID>2004</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:57:02.5801788Z" />
    <EventRecordID>50537</EventRecordID>
    <Correlation />
    <Execution ProcessID="14016" ThreadID="10576" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="NTSTATUS">3221225506</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 6:57:02 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "MSDTC" in DLL "C:\WINDOWS\system32\msdtcuiu.DLL" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:57:02.5707265Z" />
    <EventRecordID>50536</EventRecordID>
    <Correlation />
    <Execution ProcessID="14016" ThreadID="10576" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">MSDTC</Data>
    <Data Name="Library">C:\WINDOWS\system32\msdtcuiu.DLL</Data>
    <Data Name="Win32Error">2147942402</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 6:57:02 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "Lsa" in DLL "C:\Windows\System32\Secur32.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:57:02.5495386Z" />
    <EventRecordID>50535</EventRecordID>
    <Correlation />
    <Execution ProcessID="14016" ThreadID="10576" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">Lsa</Data>
    <Data Name="Library">C:\Windows\System32\Secur32.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/25/2021 6:57:02 PM
Event ID:      1008
Task Category: None
Level:         Warning
Keywords:      
User:          PHUZZYWU\NewCountry
Computer:      PhuzzyWu
Description:
The Open procedure for service "ESENT" in DLL "C:\WINDOWS\system32\esentprf.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
    <EventID>1008</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-06-25T23:57:02.5488830Z" />
    <EventRecordID>50534</EventRecordID>
    <Correlation />
    <Execution ProcessID="14016" ThreadID="10576" />
    <Channel>Application</Channel>
    <Computer>PhuzzyWu</Computer>
    <Security UserID="S-1-5-21-4160703341-1243451369-3665441113-1001" />
  </System>
  <EventData>
    <Data Name="Service">ESENT</Data>
    <Data Name="Library">C:\WINDOWS\system32\esentprf.dll</Data>
    <Data Name="Win32Error">5</Data>
  </EventData>
</Event>