Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:40:53 PM
Event ID:      1033
Task Category: None
Level:         Information
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Windows Installer installed the product. Product Name: MediaPortal 2. Product Version: 2.2.1811.11777. Product Language: 1033. Manufacturer: Team MediaPortal. Installation success or error status: 1603.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1033</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:53.000000000Z" />
    <EventRecordID>6640</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>MediaPortal 2</Data>
    <Data>2.2.1811.11777</Data>
    <Data>1033</Data>
    <Data>1603</Data>
    <Data>Team MediaPortal</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
    <Binary>7B37463945464530322D324243422D343433312D413332322D3042303434463335393730397D3030303061323230363635653331646535343932616433616332333564306638386138623030303030393034</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:40:53 PM
Event ID:      11708
Task Category: None
Level:         Information
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Product: MediaPortal 2 -- Installation failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">11708</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:53.000000000Z" />
    <EventRecordID>6639</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>Product: MediaPortal 2 -- Installation failed.</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
    <Binary>7B37463945464530322D324243422D343433312D413332322D3042303434463335393730397D</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-RestartManager
Date:          13/11/2018 11:40:48 PM
Event ID:      10001
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Ending session 0 started ?2018?-?11?-?13T13:07:47.045794500Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RestartManager" Guid="{0888E5EF-9B98-4695-979D-E92CE4247224}" />
    <EventID>10001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:48.746886900Z" />
    <EventRecordID>6638</EventRecordID>
    <Correlation />
    <Execution ProcessID="3428" ThreadID="3060" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <RmSessionEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
      <RmSessionId>0</RmSessionId>
      <UTCStartTime>2018-11-13T13:07:47.045794500Z</UTCStartTime>
    </RmSessionEvent>
  </UserData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:40:48 PM
Event ID:      1042
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:      user-PC
Description:
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{7F9EFE02-2BCB-4431-A322-0B044F359709}v2.2.1811.11777\MP2-Setup.msi. Client Process Id: 4004.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1042</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:48.000000000Z" />
    <EventRecordID>6637</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>C:\ProgramData\Package Cache\{7F9EFE02-2BCB-4431-A322-0B044F359709}v2.2.1811.11777\MP2-Setup.msi</Data>
    <Data>4004</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:40:37 PM
Event ID:      11920
Task Category: None
Level:         Error
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Product: MediaPortal 2 -- Error 1920. Service 'MediaPortal 2 Server Service' (MP2-Server) failed to start. Verify that you have sufficient privileges to start system services.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">11920</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:37.000000000Z" />
    <EventRecordID>6636</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>Product: MediaPortal 2 -- Error 1920. Service 'MediaPortal 2 Server Service' (MP2-Server) failed to start. Verify that you have sufficient privileges to start system services.</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
    <Binary>7B37463945464530322D324243422D343433312D413332322D3042303434463335393730397D</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:20 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_09ee29dd

Analysis symbol: 
Rechecking for solution: 0
Report Id: 786c4a5b-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:20.000000000Z" />
    <EventRecordID>6635</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_09ee29dd</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>786c4a5b-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:20 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_09ee29dd

Analysis symbol: 
Rechecking for solution: 0
Report Id: 786c4a5b-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:20.000000000Z" />
    <EventRecordID>6634</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_09ee29dd</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>786c4a5b-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:40:20 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xa08
Faulting application start time: 0x01d47b5237c77350
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 786c4a5b-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:20.000000000Z" />
    <EventRecordID>6633</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>a08</Data>
    <Data>01d47b5237c77350</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>786c4a5b-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:40:20 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:20.000000000Z" />
    <EventRecordID>6632</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:14 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_065a1219

Analysis symbol: 
Rechecking for solution: 0
Report Id: 74cb9661-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:14.000000000Z" />
    <EventRecordID>6631</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_065a1219</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>74cb9661-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:14 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_065a1219

Analysis symbol: 
Rechecking for solution: 0
Report Id: 74cb9661-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:14.000000000Z" />
    <EventRecordID>6630</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_065a1219</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>74cb9661-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:40:14 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xc70
Faulting application start time: 0x01d47b52342a41d4
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 74cb9661-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:14.000000000Z" />
    <EventRecordID>6629</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>c70</Data>
    <Data>01d47b52342a41d4</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>74cb9661-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:40:14 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:14.000000000Z" />
    <EventRecordID>6628</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:13 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0eb5fa74

Analysis symbol: 
Rechecking for solution: 0
Report Id: 712f0128-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:13.000000000Z" />
    <EventRecordID>6627</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0eb5fa74</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>712f0128-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:13 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0ce9e2c0

Analysis symbol: 
Rechecking for solution: 0
Report Id: 6d909727-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:13.000000000Z" />
    <EventRecordID>6626</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0ce9e2c0</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6d909727-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:08 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0eb5fa74

Analysis symbol: 
Rechecking for solution: 0
Report Id: 712f0128-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:08.000000000Z" />
    <EventRecordID>6625</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0eb5fa74</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>712f0128-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:40:08 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xfd4
Faulting application start time: 0x01d47b52308ce947
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 712f0128-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:08.000000000Z" />
    <EventRecordID>6624</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>fd4</Data>
    <Data>01d47b52308ce947</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>712f0128-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:40:08 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:08.000000000Z" />
    <EventRecordID>6623</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:40:02 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0ce9e2c0

Analysis symbol: 
Rechecking for solution: 0
Report Id: 6d909727-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:02.000000000Z" />
    <EventRecordID>6622</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0ce9e2c0</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6d909727-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:40:02 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xc18
Faulting application start time: 0x01d47b522ceef478
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 6d909727-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:02.000000000Z" />
    <EventRecordID>6621</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>c18</Data>
    <Data>01d47b522ceef478</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>6d909727-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:40:02 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:10:02.000000000Z" />
    <EventRecordID>6620</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:56 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0e35cb0b

Analysis symbol: 
Rechecking for solution: 0
Report Id: 69f3dadd-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:56.000000000Z" />
    <EventRecordID>6619</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0e35cb0b</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>69f3dadd-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:56 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0e35cb0b

Analysis symbol: 
Rechecking for solution: 0
Report Id: 69f3dadd-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:56.000000000Z" />
    <EventRecordID>6618</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0e35cb0b</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>69f3dadd-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:39:56 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xd40
Faulting application start time: 0x01d47b5229506367
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 69f3dadd-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:56.000000000Z" />
    <EventRecordID>6617</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>d40</Data>
    <Data>01d47b5229506367</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>69f3dadd-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:39:56 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:56.000000000Z" />
    <EventRecordID>6616</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:50 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0dadb347

Analysis symbol: 
Rechecking for solution: 0
Report Id: 6653ea36-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:50.000000000Z" />
    <EventRecordID>6615</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0dadb347</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6653ea36-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:50 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0dadb347

Analysis symbol: 
Rechecking for solution: 0
Report Id: 6653ea36-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:50.000000000Z" />
    <EventRecordID>6614</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0dadb347</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6653ea36-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:39:50 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xea4
Faulting application start time: 0x01d47b5225b2bcb9
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 6653ea36-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:50.000000000Z" />
    <EventRecordID>6613</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>ea4</Data>
    <Data>01d47b5225b2bcb9</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>6653ea36-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:39:50 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:50.000000000Z" />
    <EventRecordID>6612</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:44 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0fe99ba2

Analysis symbol: 
Rechecking for solution: 0
Report Id: 62b7a31e-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:44.000000000Z" />
    <EventRecordID>6611</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0fe99ba2</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>62b7a31e-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:44 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0fe99ba2

Analysis symbol: 
Rechecking for solution: 0
Report Id: 62b7a31e-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:44.000000000Z" />
    <EventRecordID>6610</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0fe99ba2</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>62b7a31e-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:39:43 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xc10
Faulting application start time: 0x01d47b5222153d1c
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 62b7a31e-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:43.000000000Z" />
    <EventRecordID>6609</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>c10</Data>
    <Data>01d47b5222153d1c</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>62b7a31e-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:39:43 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:43.000000000Z" />
    <EventRecordID>6608</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:39:38 PM
Event ID:      11920
Task Category: None
Level:         Error
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Product: MediaPortal 2 -- Error 1920. Service 'MediaPortal 2 Server Service' (MP2-Server) failed to start. Verify that you have sufficient privileges to start system services.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">11920</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:38.000000000Z" />
    <EventRecordID>6607</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>Product: MediaPortal 2 -- Error 1920. Service 'MediaPortal 2 Server Service' (MP2-Server) failed to start. Verify that you have sufficient privileges to start system services.</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
    <Binary>7B37463945464530322D324243422D343433312D413332322D3042303434463335393730397D</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:17 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0b79335f

Analysis symbol: 
Rechecking for solution: 0
Report Id: 52cf98ae-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:17.000000000Z" />
    <EventRecordID>6606</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0b79335f</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>52cf98ae-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:17 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0b79335f

Analysis symbol: 
Rechecking for solution: 0
Report Id: 52cf98ae-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:17.000000000Z" />
    <EventRecordID>6605</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0b79335f</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>52cf98ae-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:39:17 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0x89c
Faulting application start time: 0x01d47b521230d353
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 52cf98ae-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:17.000000000Z" />
    <EventRecordID>6604</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>89c</Data>
    <Data>01d47b521230d353</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>52cf98ae-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:39:17 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:17.000000000Z" />
    <EventRecordID>6603</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:11 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0d791bba

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4f345c80-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:11.000000000Z" />
    <EventRecordID>6602</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0d791bba</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>4f345c80-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:11 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0d791bba

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4f345c80-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:11.000000000Z" />
    <EventRecordID>6601</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0d791bba</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>4f345c80-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:39:11 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xeb8
Faulting application start time: 0x01d47b520e8e1948
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 4f345c80-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:11.000000000Z" />
    <EventRecordID>6600</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>eb8</Data>
    <Data>01d47b520e8e1948</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>4f345c80-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:39:11 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:11.000000000Z" />
    <EventRecordID>6599</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:05 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_017103d7

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4b8f4114-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:05.000000000Z" />
    <EventRecordID>6598</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_017103d7</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>4b8f4114-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:39:05 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_017103d7

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4b8f4114-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:05.000000000Z" />
    <EventRecordID>6597</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_017103d7</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>4b8f4114-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:39:05 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xd34
Faulting application start time: 0x01d47b520aeb5f3d
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 4b8f4114-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:05.000000000Z" />
    <EventRecordID>6596</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>d34</Data>
    <Data>01d47b520aeb5f3d</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>4b8f4114-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:39:05 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:09:05.000000000Z" />
    <EventRecordID>6595</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:38:59 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0520ec03

Analysis symbol: 
Rechecking for solution: 0
Report Id: 47ec8709-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:59.000000000Z" />
    <EventRecordID>6594</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0520ec03</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>47ec8709-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:38:59 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0704d42f

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4449ccfe-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:59.000000000Z" />
    <EventRecordID>6593</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0704d42f</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>4449ccfe-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:38:59 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0f70bc8b

Analysis symbol: 
Rechecking for solution: 0
Report Id: 409b2c12-e745-11e8-851d-2c27d73cbc2b
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:59.000000000Z" />
    <EventRecordID>6592</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0f70bc8b</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>409b2c12-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:38:59 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0520ec03

Analysis symbol: 
Rechecking for solution: 0
Report Id: 47ec8709-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:59.000000000Z" />
    <EventRecordID>6591</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0520ec03</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>47ec8709-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:38:59 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0x78c
Faulting application start time: 0x01d47b520748a532
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 47ec8709-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:59.000000000Z" />
    <EventRecordID>6590</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>78c</Data>
    <Data>01d47b520748a532</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>47ec8709-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:38:59 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:59.000000000Z" />
    <EventRecordID>6589</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:38:53 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0704d42f

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4449ccfe-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:53.000000000Z" />
    <EventRecordID>6588</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0704d42f</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>4449ccfe-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:38:52 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xcb8
Faulting application start time: 0x01d47b5203a5eb26
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 4449ccfe-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:52.000000000Z" />
    <EventRecordID>6587</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>cb8</Data>
    <Data>01d47b5203a5eb26</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>4449ccfe-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:38:52 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:52.000000000Z" />
    <EventRecordID>6586</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          13/11/2018 11:38:47 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: MP2-Server.exe
P2: 2.2.1811.11777
P3: 5bdb6709
P4: MediaPortal.Common
P5: 2.2.1811.11777
P6: 5bdb6703
P7: 3d
P8: 1b
P9: EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0f70bc8b

Analysis symbol: 
Rechecking for solution: 0
Report Id: 409b2c12-e745-11e8-851d-2c27d73cbc2b
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:47.000000000Z" />
    <EventRecordID>6585</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>CLR20r3</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>MediaPortal.Common</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6703</Data>
    <Data>3d</Data>
    <Data>1b</Data>
    <Data>EHF5TSWPMI1EHYMAKNIK4DVARGMYK0PZ</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MP2-Server.exe_ca61b7954074f294c36b3295ea16f496bcd3de8_0f70bc8b</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>409b2c12-e745-11e8-851d-2c27d73cbc2b</Data>
    <Data>4</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          13/11/2018 11:38:46 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Faulting application name: MP2-Server.exe, version: 2.2.1811.11777, time stamp: 0x5bdb6709
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24260, time stamp: 0x5b946d85
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0xc64
Faulting application start time: 0x01d47b51ff5c90c8
Faulting application path: C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 409b2c12-e745-11e8-851d-2c27d73cbc2b
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:46.000000000Z" />
    <EventRecordID>6584</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MP2-Server.exe</Data>
    <Data>2.2.1811.11777</Data>
    <Data>5bdb6709</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7601.24260</Data>
    <Data>5b946d85</Data>
    <Data>e0434352</Data>
    <Data>0000c54f</Data>
    <Data>c64</Data>
    <Data>01d47b51ff5c90c8</Data>
    <Data>C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe</Data>
    <Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
    <Data>409b2c12-e745-11e8-851d-2c27d73cbc2b</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:38:46 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:46.000000000Z" />
    <EventRecordID>6583</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        .NET Runtime
Date:          13/11/2018 11:38:38 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:08:38.000000000Z" />
    <EventRecordID>6582</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Application: MP2-Server.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: MediaPortal.Common.Exceptions.ServiceNotFoundException
   at MediaPortal.Common.ServiceRegistration.GetService(System.Type, Boolean)
   at MediaPortal.Common.ServiceRegistration.Get[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.StopWorker()
   at MediaPortal.Common.Services.TaskScheduler.TaskScheduler.Finalize()

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-RestartManager
Date:          13/11/2018 11:37:47 PM
Event ID:      10000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Starting session 0 - ?2018?-?11?-?13T13:07:47.045794500Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RestartManager" Guid="{0888E5EF-9B98-4695-979D-E92CE4247224}" />
    <EventID>10000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:07:47.045794500Z" />
    <EventRecordID>6581</EventRecordID>
    <Correlation />
    <Execution ProcessID="3428" ThreadID="3560" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <RmSessionEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
      <RmSessionId>0</RmSessionId>
      <UTCStartTime>2018-11-13T13:07:47.045794500Z</UTCStartTime>
    </RmSessionEvent>
  </UserData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:37:46 PM
Event ID:      1040
Task Category: None
Level:         Information
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{7F9EFE02-2BCB-4431-A322-0B044F359709}v2.2.1811.11777\MP2-Setup.msi. Client Process Id: 4004.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1040</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:07:46.000000000Z" />
    <EventRecordID>6580</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>C:\ProgramData\Package Cache\{7F9EFE02-2BCB-4431-A322-0B044F359709}v2.2.1811.11777\MP2-Setup.msi</Data>
    <Data>4004</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-RestartManager
Date:          13/11/2018 11:32:09 PM
Event ID:      10001
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Ending session 2 started ?2018?-?11?-?13T12:57:40.804567400Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RestartManager" Guid="{0888E5EF-9B98-4695-979D-E92CE4247224}" />
    <EventID>10001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:02:09.586001800Z" />
    <EventRecordID>6579</EventRecordID>
    <Correlation />
    <Execution ProcessID="1976" ThreadID="3048" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <RmSessionEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
      <RmSessionId>2</RmSessionId>
      <UTCStartTime>2018-11-13T12:57:40.804567400Z</UTCStartTime>
    </RmSessionEvent>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-RestartManager
Date:          13/11/2018 11:32:08 PM
Event ID:      10001
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Ending session 0 started ?2018?-?11?-?13T12:59:52.970126900Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RestartManager" Guid="{0888E5EF-9B98-4695-979D-E92CE4247224}" />
    <EventID>10001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:02:08.228799400Z" />
    <EventRecordID>6578</EventRecordID>
    <Correlation />
    <Execution ProcessID="3436" ThreadID="2700" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <RmSessionEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
      <RmSessionId>0</RmSessionId>
      <UTCStartTime>2018-11-13T12:59:52.970126900Z</UTCStartTime>
    </RmSessionEvent>
  </UserData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:32:08 PM
Event ID:      1042
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:      user-PC
Description:
Ending a Windows Installer transaction: C:\d644a899e4cb7b19defb4eeb124839\netfx_Full_x64.msi. Client Process Id: 1976.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1042</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:02:08.000000000Z" />
    <EventRecordID>6577</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>C:\d644a899e4cb7b19defb4eeb124839\netfx_Full_x64.msi</Data>
    <Data>1976</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:32:08 PM
Event ID:      1033
Task Category: None
Level:         Information
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Windows Installer installed the product. Product Name: Microsoft .NET Framework 4.7.1. Product Version: 4.7.02558. Product Language: 0. Manufacturer: Microsoft Corporation. Installation success or error status: 0.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1033</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:02:08.000000000Z" />
    <EventRecordID>6576</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>Microsoft .NET Framework 4.7.1</Data>
    <Data>4.7.02558</Data>
    <Data>0</Data>
    <Data>0</Data>
    <Data>Microsoft Corporation</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
    <Binary>7B45304337353233432D363836422D334545362D384642312D4342343333394533304544447D3030303032326161636361323766343135383762306364346631626233316339353737333030303030303030</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:32:08 PM
Event ID:      11707
Task Category: None
Level:         Information
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Product: Microsoft .NET Framework 4.7.1 -- Installation completed successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">11707</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:02:08.000000000Z" />
    <EventRecordID>6575</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>Product: Microsoft .NET Framework 4.7.1 -- Installation completed successfully.</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
    <Binary>7B45304337353233432D363836422D334545362D384642312D4342343333394533304544447D</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:54 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the .NET Data Provider for Oracle (.NET Data Provider for Oracle) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:54.237869400Z" />
    <EventRecordID>6574</EventRecordID>
    <Correlation />
    <Execution ProcessID="2980" ThreadID="1328" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>.NET Data Provider for Oracle</param1>
      <param2>.NET Data Provider for Oracle</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:54 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the .NET Data Provider for Oracle (.NET Data Provider for Oracle) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:54.159869300Z" />
    <EventRecordID>6573</EventRecordID>
    <Correlation />
    <Execution ProcessID="2256" ThreadID="1952" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>.NET Data Provider for Oracle</param1>
      <param2>.NET Data Provider for Oracle</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>88300000A430000089300000A5300000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:54 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the .NET CLR Networking 4.0.0.0 (.NET CLR Networking 4.0.0.0) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:54.050669100Z" />
    <EventRecordID>6572</EventRecordID>
    <Correlation />
    <Execution ProcessID="2056" ThreadID="1224" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>.NET CLR Networking 4.0.0.0</param1>
      <param2>.NET CLR Networking 4.0.0.0</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:53 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the .NET CLR Networking 4.0.0.0 (.NET CLR Networking 4.0.0.0) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:53.988269000Z" />
    <EventRecordID>6571</EventRecordID>
    <Correlation />
    <Execution ProcessID="1040" ThreadID="2788" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>.NET CLR Networking 4.0.0.0</param1>
      <param2>.NET CLR Networking 4.0.0.0</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:53 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the Windows Workflow Foundation 4.0.0.0 (Windows Workflow Foundation 4.0.0.0) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:53.785468600Z" />
    <EventRecordID>6570</EventRecordID>
    <Correlation />
    <Execution ProcessID="2000" ThreadID="732" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>Windows Workflow Foundation 4.0.0.0</param1>
      <param2>Windows Workflow Foundation 4.0.0.0</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:53 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the Windows Workflow Foundation 4.0.0.0 (Windows Workflow Foundation 4.0.0.0) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:53.270667700Z" />
    <EventRecordID>6569</EventRecordID>
    <Correlation />
    <Execution ProcessID="3360" ThreadID="2548" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>Windows Workflow Foundation 4.0.0.0</param1>
      <param2>Windows Workflow Foundation 4.0.0.0</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>5C300000863000005D30000087300000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:53 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:53.099067400Z" />
    <EventRecordID>6568</EventRecordID>
    <Correlation />
    <Execution ProcessID="2404" ThreadID="852" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>MSDTC Bridge 4.0.0.0</param1>
      <param2>MSDTC Bridge 4.0.0.0</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:53 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:53.052267400Z" />
    <EventRecordID>6567</EventRecordID>
    <Correlation />
    <Execution ProcessID="3324" ThreadID="2868" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>MSDTC Bridge 4.0.0.0</param1>
      <param2>MSDTC Bridge 4.0.0.0</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>443000005A300000453000005B300000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:52 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:52.849467000Z" />
    <EventRecordID>6566</EventRecordID>
    <Correlation />
    <Execution ProcessID="3856" ThreadID="2476" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>SMSvcHost 4.0.0.0</param1>
      <param2>SMSvcHost 4.0.0.0</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:52 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:52.802666900Z" />
    <EventRecordID>6565</EventRecordID>
    <Correlation />
    <Execution ProcessID="3908" ThreadID="2436" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>SMSvcHost 4.0.0.0</param1>
      <param2>SMSvcHost 4.0.0.0</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>26300000423000002730000043300000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:52 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the {f6c5ad57-a5be-4259-9060-b2c4ebfccd96} (WorkflowServiceHost 4.0.0.0) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:52.553066500Z" />
    <EventRecordID>6564</EventRecordID>
    <Correlation />
    <Execution ProcessID="3564" ThreadID="2696" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>{f6c5ad57-a5be-4259-9060-b2c4ebfccd96}</param1>
      <param2>WorkflowServiceHost 4.0.0.0</param2>
      <binaryDataSize>0</binaryDataSize>
      <binaryData>
      </binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:52 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the {890c10c3-8c2a-4fe3-a36a-9eca153d47cb} (ServiceModel 4.0.0.0) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:52.475066300Z" />
    <EventRecordID>6563</EventRecordID>
    <Correlation />
    <Execution ProcessID="2584" ThreadID="3288" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}</param1>
      <param2>ServiceModel 4.0.0.0</param2>
      <binaryDataSize>0</binaryDataSize>
      <binaryData>
      </binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:48 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the ASP.NET (ASP.NET) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:48.715459700Z" />
    <EventRecordID>6562</EventRecordID>
    <Correlation />
    <Execution ProcessID="2272" ThreadID="1724" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>ASP.NET</param1>
      <param2>ASP.NET</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>B42D0000942E0000B52D0000952E0000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          13/11/2018 11:30:48 PM
Event ID:      1019
Task Category: Setup
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Finish registering ASP.NET (version 4.0.30319.0). Detailed registration logs can be found in C:\Users\user\AppData\Local\Temp\ASPNETSetup_00009.log
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="16384">1019</EventID>
    <Level>4</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:48.000000000Z" />
    <EventRecordID>6561</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>4.0.30319.0</Data>
    <Data>C:\Users\user\AppData\Local\Temp\ASPNETSetup_00009.log</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          13/11/2018 11:30:48 PM
Event ID:      1020
Task Category: Setup
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Updates to the IIS metabase were aborted because IIS is either not installed or is disabled on this machine. To configure ASP.NET to run in IIS, please install or enable IIS and re-register ASP.NET using aspnet_regiis.exe /i.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="32768">1020</EventID>
    <Level>3</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:48.000000000Z" />
    <EventRecordID>6560</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:47 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the ASP.NET (ASP.NET) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:47.498657600Z" />
    <EventRecordID>6559</EventRecordID>
    <Correlation />
    <Execution ProcessID="2272" ThreadID="1724" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>ASP.NET</param1>
      <param2>ASP.NET</param2>
      <binaryDataSize>12</binaryDataSize>
      <binaryData>B22D0000B32D000034070000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:47 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the ASP.NET_4.0.30319 (ASP.NET_4.0.30319) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:47.420657500Z" />
    <EventRecordID>6558</EventRecordID>
    <Correlation />
    <Execution ProcessID="2272" ThreadID="1724" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>ASP.NET_4.0.30319</param1>
      <param2>ASP.NET_4.0.30319</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:44 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the ASP.NET (ASP.NET) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:44.487852300Z" />
    <EventRecordID>6557</EventRecordID>
    <Correlation />
    <Execution ProcessID="596" ThreadID="1684" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>ASP.NET</param1>
      <param2>ASP.NET</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>B42D0000942E0000B52D0000952E0000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          13/11/2018 11:30:45 PM
Event ID:      1017
Task Category: Setup
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Start registering ASP.NET (version 4.0.30319.0) (internal flag: 0x00000404)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="16384">1017</EventID>
    <Level>4</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:45.000000000Z" />
    <EventRecordID>6556</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>4.0.30319.0</Data>
    <Data>0x00000404</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          13/11/2018 11:30:44 PM
Event ID:      1019
Task Category: Setup
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Finish registering ASP.NET (version 4.0.30319.0). Detailed registration logs can be found in C:\Users\user\AppData\Local\Temp\ASPNETSetup_00008.log
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="16384">1019</EventID>
    <Level>4</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:44.000000000Z" />
    <EventRecordID>6555</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>4.0.30319.0</Data>
    <Data>C:\Users\user\AppData\Local\Temp\ASPNETSetup_00008.log</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          13/11/2018 11:30:44 PM
Event ID:      1020
Task Category: Setup
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Updates to the IIS metabase were aborted because IIS is either not installed or is disabled on this machine. To configure ASP.NET to run in IIS, please install or enable IIS and re-register ASP.NET using aspnet_regiis.exe /i.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="32768">1020</EventID>
    <Level>3</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:44.000000000Z" />
    <EventRecordID>6554</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:43 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the ASP.NET_4.0.30319 (ASP.NET_4.0.30319) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:43.551850700Z" />
    <EventRecordID>6553</EventRecordID>
    <Correlation />
    <Execution ProcessID="596" ThreadID="1684" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>ASP.NET_4.0.30319</param1>
      <param2>ASP.NET_4.0.30319</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>D22C0000B22D0000D32C0000B32D0000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:42 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the aspnet_state (ASP.NET State Service) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:42.085448100Z" />
    <EventRecordID>6552</EventRecordID>
    <Correlation />
    <Execution ProcessID="596" ThreadID="1684" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>aspnet_state</param1>
      <param2>ASP.NET State Service</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>E82B0000D02C0000E92B0000D12C0000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          13/11/2018 11:30:38 PM
Event ID:      1017
Task Category: Setup
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Start registering ASP.NET (version 4.0.30319.0) (internal flag: 0x00000404)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 4.0.30319.0" />
    <EventID Qualifiers="16384">1017</EventID>
    <Level>4</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:38.000000000Z" />
    <EventRecordID>6551</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>4.0.30319.0</Data>
    <Data>0x00000404</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:36 PM
Event ID:      1002
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the .NET Memory Cache 4.0 (.NET Memory Cache 4.0) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:36.921839000Z" />
    <EventRecordID>6550</EventRecordID>
    <Correlation />
    <Execution ProcessID="324" ThreadID="332" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>.NET Memory Cache 4.0</param1>
      <param2>.NET Memory Cache 4.0</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>C2120000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:30:36 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Performance counters for the .NET Memory Cache 4.0 (.NET Memory Cache 4.0) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:36.841636200Z" />
    <EventRecordID>6549</EventRecordID>
    <Correlation />
    <Execution ProcessID="3564" ThreadID="2204" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>.NET Memory Cache 4.0</param1>
      <param2>.NET Memory Cache 4.0</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>D82B0000E62B0000D92B0000E72B0000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        VSS
Date:          13/11/2018 11:30:13 PM
Event ID:      8224
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The VSS service is shutting down due to idle timeout. 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">8224</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T13:00:13.000000000Z" />
    <EventRecordID>6548</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Binary>2D20436F64653A2020434F525356434330303030303737332D2043616C6C3A2020434F525356434330303030303735352D205049443A202030303030313031362D205449443A202030303030323035362D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-RestartManager
Date:          13/11/2018 11:29:52 PM
Event ID:      10000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Starting session 0 - ?2018?-?11?-?13T12:59:52.970126900Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RestartManager" Guid="{0888E5EF-9B98-4695-979D-E92CE4247224}" />
    <EventID>10000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:59:52.970126900Z" />
    <EventRecordID>6547</EventRecordID>
    <Correlation />
    <Execution ProcessID="3436" ThreadID="3368" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <RmSessionEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
      <RmSessionId>0</RmSessionId>
      <UTCStartTime>2018-11-13T12:59:52.970126900Z</UTCStartTime>
    </RmSessionEvent>
  </UserData>
</Event>

Log Name:      Application
Source:        MsiInstaller
Date:          13/11/2018 11:29:52 PM
Event ID:      1040
Task Category: None
Level:         Information
Keywords:      Classic
User:          user-PC\user
Computer:      user-PC
Description:
Beginning a Windows Installer transaction: C:\d644a899e4cb7b19defb4eeb124839\netfx_Full_x64.msi. Client Process Id: 1976.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1040</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:59:52.000000000Z" />
    <EventRecordID>6546</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <EventData>
    <Data>C:\d644a899e4cb7b19defb4eeb124839\netfx_Full_x64.msi</Data>
    <Data>1976</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>(NULL)</Data>
    <Data>
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          13/11/2018 11:28:49 PM
Event ID:      903
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The Software Protection service has stopped.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">903</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:58:49.000000000Z" />
    <EventRecordID>6545</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-RestartManager
Date:          13/11/2018 11:27:40 PM
Event ID:      10000
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Starting session 2 - ?2018?-?11?-?13T12:57:40.804567400Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RestartManager" Guid="{0888E5EF-9B98-4695-979D-E92CE4247224}" />
    <EventID>10000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:57:40.804567400Z" />
    <EventRecordID>6544</EventRecordID>
    <Correlation />
    <Execution ProcessID="1976" ThreadID="3048" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <RmSessionEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
      <RmSessionId>2</RmSessionId>
      <UTCStartTime>2018-11-13T12:57:40.804567400Z</UTCStartTime>
    </RmSessionEvent>
  </UserData>
</Event>

Log Name:      Application
Source:        System Restore
Date:          13/11/2018 11:26:58 PM
Event ID:      8194
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Successfully created restore point (Process = C:\Users\user\AppData\Local\Temp\{7268073E-6E1B-46E3-A6B7-9E95C0F0BF6E}\.be\MP2-Setup.exe -q -burn.elevated BurnPipe.{9D32444E-3D57-4C46-B2AB-741F58A15AE3} {AC6F0882-89B7-4BB6-BDFD-E2776F705F60} 3764; Description = MediaPortal 2).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="System Restore" />
    <EventID Qualifiers="0">8194</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:56:58.000000000Z" />
    <EventRecordID>6543</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>C:\Users\user\AppData\Local\Temp\{7268073E-6E1B-46E3-A6B7-9E95C0F0BF6E}\.be\MP2-Setup.exe -q -burn.elevated BurnPipe.{9D32444E-3D57-4C46-B2AB-741F58A15AE3} {AC6F0882-89B7-4BB6-BDFD-E2776F705F60} 3764</Data>
    <Data>MediaPortal 2</Data>
    <Binary>00000000A1010000970100000000000022CE28677C6DDA79E28C1C000000000000000000</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:25:46 PM
Event ID:      1000
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      user-PC
Description:
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:55:46.179011200Z" />
    <EventRecordID>6542</EventRecordID>
    <Correlation />
    <Execution ProcessID="4088" ThreadID="4092" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>WmiApRpl</param1>
      <param2>WmiApRpl</param2>
      <binaryDataSize>16</binaryDataSize>
      <binaryData>302B0000D62B0000312B0000D72B0000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          13/11/2018 11:25:46 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      user-PC
Description:
Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
    <EventID>1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:55:46.139008900Z" />
    <EventRecordID>6541</EventRecordID>
    <Correlation />
    <Execution ProcessID="4088" ThreadID="4092" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
      <param1>WmiApRpl</param1>
      <param2>WmiApRpl</param2>
      <binaryDataSize>12</binaryDataSize>
      <binaryData>2E2B00002F2B000034070000</binaryData>
    </EventXML>
  </UserData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Winlogon
Date:          13/11/2018 11:24:04 PM
Event ID:      4101
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Windows license validated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" />
    <EventID Qualifiers="16384">4101</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:54:04.000000000Z" />
    <EventRecordID>6540</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>0x00000000</Data>
    <Data>0x00000001</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        UNS
Date:          13/11/2018 11:23:03 PM
Event ID:      2000
Task Category: UNS
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
User Notification Service started.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="UNS" />
    <EventID Qualifiers="16384">2000</EventID>
    <Level>4</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:53:03.000000000Z" />
    <EventRecordID>6539</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>User Notification Service started.
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Search
Date:          13/11/2018 11:23:00 PM
Event ID:      1003
Task Category: Search service
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The Windows Search Service started.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
    <EventID Qualifiers="16384">1003</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:53:00.000000000Z" />
    <EventRecordID>6538</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ExtraInfo">
    </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          13/11/2018 11:22:58 PM
Event ID:      302
Task Category: Logging/Recovery
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Windows (2856) Windows: The database engine has successfully completed recovery steps.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">302</EventID>
    <Level>4</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:58.000000000Z" />
    <EventRecordID>6537</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Windows</Data>
    <Data>2856</Data>
    <Data>Windows: </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          13/11/2018 11:22:58 PM
Event ID:      301
Task Category: Logging/Recovery
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Windows (2856) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">301</EventID>
    <Level>4</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:58.000000000Z" />
    <EventRecordID>6536</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Windows</Data>
    <Data>2856</Data>
    <Data>Windows: </Data>
    <Data>C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          13/11/2018 11:22:58 PM
Event ID:      301
Task Category: Logging/Recovery
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Windows (2856) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00075.log.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">301</EventID>
    <Level>4</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:58.000000000Z" />
    <EventRecordID>6535</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Windows</Data>
    <Data>2856</Data>
    <Data>Windows: </Data>
    <Data>C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00075.log</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          13/11/2018 11:22:57 PM
Event ID:      300
Task Category: Logging/Recovery
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Windows (2856) Windows: The database engine is initiating recovery steps.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">300</EventID>
    <Level>4</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:57.000000000Z" />
    <EventRecordID>6534</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Windows</Data>
    <Data>2856</Data>
    <Data>Windows: </Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          13/11/2018 11:22:57 PM
Event ID:      102
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Windows (2856) Windows: The database engine (6.01.7601.0000) started a new instance (0).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">102</EventID>
    <Level>4</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:57.000000000Z" />
    <EventRecordID>6533</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Windows</Data>
    <Data>2856</Data>
    <Data>Windows: </Data>
    <Data>0</Data>
    <Data>6</Data>
    <Data>01</Data>
    <Data>7601</Data>
    <Data>0000</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          13/11/2018 11:22:57 PM
Event ID:      902
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The Software Protection service has started.
6.1.7601.17514
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">902</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:57.000000000Z" />
    <EventRecordID>6532</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>6.1.7601.17514</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          13/11/2018 11:22:57 PM
Event ID:      1003
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 4de78642-0f7f-4b61-9392-8add86d70ae8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 50e329f7-a5fa-46b2-85fd-f224e5da7764, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
3: 5a79ecd8-d33f-406c-a619-7785899b5d59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
4: 770bc271-8dc1-467d-b574-73cbacbeccd1, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
5: 90a61a0d-0b76-4bf1-a8b8-89061855a4c9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
6: 92f9d22a-65f5-49a7-90fe-06491b4fc379, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
7: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
8: 9ccffaf9-86a2-414e-b031-b2f777720e90, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
9: b92e9980-b9d5-4821-9c94-140f632f6312, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
10: c1027486-8ae8-4633-9cf9-9658ed80504d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
11: c1e88de3-96c4-4563-ad7d-775f65b1e670, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
12: c33001fc-5e9c-4f27-8c05-e0154adb0db4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
13: cf3c5b35-35ff-4c95-9bbd-a188e47ad14c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
14: cff07cac-7534-4cc3-b3f3-99e1a0aa3c20, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
15: d188820a-cb63-4bad-a9a2-40b843ee23b7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
16: d8e04254-f9a5-4729-ae86-886de6aa907c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
17: da22eadd-46dc-4056-a287-f5041c852470, 1, 1 [(0 [0x00000000, 1, 0], [(?)(?)( 1 0x00000000 3 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)(?)])(1 )(2 )]
18: e120e868-3df2-464a-95a0-b52fa5ada4bf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
19: e838d943-63ed-4a0b-9fb1-47152908acc9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
20: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
21: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">1003</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:57.000000000Z" />
    <EventRecordID>6531</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>55c92734-d682-4d71-983e-d6ec3f16059f</Data>
    <Data>
1: 4de78642-0f7f-4b61-9392-8add86d70ae8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 50e329f7-a5fa-46b2-85fd-f224e5da7764, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
3: 5a79ecd8-d33f-406c-a619-7785899b5d59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
4: 770bc271-8dc1-467d-b574-73cbacbeccd1, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
5: 90a61a0d-0b76-4bf1-a8b8-89061855a4c9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
6: 92f9d22a-65f5-49a7-90fe-06491b4fc379, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
7: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
8: 9ccffaf9-86a2-414e-b031-b2f777720e90, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
9: b92e9980-b9d5-4821-9c94-140f632f6312, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
10: c1027486-8ae8-4633-9cf9-9658ed80504d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
11: c1e88de3-96c4-4563-ad7d-775f65b1e670, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
12: c33001fc-5e9c-4f27-8c05-e0154adb0db4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
13: cf3c5b35-35ff-4c95-9bbd-a188e47ad14c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
14: cff07cac-7534-4cc3-b3f3-99e1a0aa3c20, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
15: d188820a-cb63-4bad-a9a2-40b843ee23b7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
16: d8e04254-f9a5-4729-ae86-886de6aa907c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
17: da22eadd-46dc-4056-a287-f5041c852470, 1, 1 [(0 [0x00000000, 1, 0], [(?)(?)( 1 0x00000000 3 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)(?)])(1 )(2 )]
18: e120e868-3df2-464a-95a0-b52fa5ada4bf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
19: e838d943-63ed-4a0b-9fb1-47152908acc9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
20: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
21: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          13/11/2018 11:22:57 PM
Event ID:      1066
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">1066</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:57.000000000Z" />
    <EventRecordID>6530</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        SecurityCenter
Date:          13/11/2018 11:22:56 PM
Event ID:      1
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The Windows Security Center Service has started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="SecurityCenter" />
    <EventID Qualifiers="0">1</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:56.000000000Z" />
    <EventRecordID>6529</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          13/11/2018 11:22:53 PM
Event ID:      900
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The Software Protection service is starting.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
    <EventID Qualifiers="16384">900</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:53.000000000Z" />
    <EventRecordID>6528</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        LMS
Date:          13/11/2018 11:22:53 PM
Event ID:      0
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:      user-PC
Description:
LMS started
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="LMS" />
    <EventID Qualifiers="16384">0</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:52:53.000000000Z" />
    <EventRecordID>6527</EventRecordID>
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>LMS started</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          13/11/2018 11:20:53 PM
Event ID:      5617
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
Windows Management Instrumentation Service subsystems initialized successfully
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
    <EventID Qualifiers="49152">5617</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:50:53.000000000Z" />
    <EventRecordID>6526</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          13/11/2018 11:20:51 PM
Event ID:      5611
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      user-PC
Description:
The Windows Management Instrumentation service has detected an inconsistent system shutdown.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
    <EventID Qualifiers="49152">5611</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:50:51.000000000Z" />
    <EventRecordID>6525</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          13/11/2018 11:20:48 PM
Event ID:      5615
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      USER-PC
Description:
Windows Management Instrumentation Service started sucessfully
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
    <EventID Qualifiers="49152">5615</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:50:48.000000000Z" />
    <EventRecordID>6524</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>USER-PC</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-EventSystem
Date:          13/11/2018 11:20:47 PM
Event ID:      4625
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      USER-PC
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
    <EventID Qualifiers="16384">4625</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:50:47.000000000Z" />
    <EventRecordID>6523</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>USER-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">86400</Data>
    <Data Name="param2">SuppressDuplicateDuration</Data>
    <Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          13/11/2018 11:20:47 PM
Event ID:      1531
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      user-PC
Description:
The User Profile Service has started successfully.  


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1531</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:50:47.848828700Z" />
    <EventRecordID>6522</EventRecordID>
    <Correlation />
    <Execution ProcessID="992" ThreadID="524" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-RestartManager
Date:          13/11/2018 11:15:04 PM
Event ID:      10001
Task Category: None
Level:         Information
Keywords:      
User:          user-PC\user
Computer:      user-PC
Description:
Ending session 0 started ?2018?-?11?-?13T12:43:44.105497100Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-RestartManager" Guid="{0888E5EF-9B98-4695-979D-E92CE4247224}" />
    <EventID>10001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2018-11-13T12:45:04.870116500Z" />
    <EventRecordID>6521</EventRecordID>
    <Correlation />
    <Execution ProcessID="3896" ThreadID="3720" />
    <Channel>Application</Channel>
    <Computer>user-PC</Computer>
    <Security UserID="S-1-5-21-1074371277-1214576197-998651128-1000" />
  </System>
  <UserData>
    <RmSessionEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
      <RmSessionId>0</RmSessionId>
      <UTCStartTime>2018-11-13T12:43:44.105497100Z</UTCStartTime>
    </RmSessionEvent>
  </UserData>
</Event>