Version=1
EventType=BlueScreen
EventTime=132382818418909862
ReportType=4
Consent=1
ReportStatus=2049
ReportIdentifier=437ed8f1-d147-4745-aad4-f05d95a7413c
IntegratorReportIdentifier=cba72db8-4cc7-4399-94b6-39f1198abec4
Wow64Host=34404
NsAppName=BlueScreen
OriginalFilename=WerFault.exe
AppSessionGuid=00000000-0000-0000-0000-000000000000
BootId=53
IsFatal=4294967295
EtwNonCollectReason=1
Response.type=4
Sig[0].Name=Code
Sig[0].Value=1e
Sig[1].Name=Parameter 1
Sig[1].Value=ffffffffc0000005
Sig[2].Name=Parameter 2
Sig[2].Value=fffff80776ff922a
Sig[3].Name=Parameter 3
Sig[3].Value=0
Sig[4].Name=Parameter 4
Sig[4].Value=ffffffffffffffff
Sig[5].Name=OS version
Sig[5].Value=10_0_19041
Sig[6].Name=Service Pack
Sig[6].Value=0_0
Sig[7].Name=Product
Sig[7].Value=256_1
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.19041.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=2057
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=19041
OsInfo[3].Key=ubr
OsInfo[3].Value=329
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=2057
OsInfo[7].Key=geoid
OsInfo[7].Value=242
OsInfo[8].Key=sku
OsInfo[8].Value=48
OsInfo[9].Key=domain
OsInfo[9].Value=0
OsInfo[10].Key=prodsuite
OsInfo[10].Value=256
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=220635376
OsInfo[15].Key=osinsty
OsInfo[15].Value=3
OsInfo[16].Key=iever
OsInfo[16].Value=11.329.19041.0-11.0.195
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=32611
OsInfo[19].Key=svolsz
OsInfo[19].Value=952
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=191206
OsInfo[22].Key=bldtm
OsInfo[22].Value=1406
OsInfo[23].Key=bldbrch
OsInfo[23].Value=vb_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.19041.329.amd64fre.vb_release.191206-1406
OsInfo[30].Key=buildflightid
OsInfo[30].Value=C0DD2958-3F6C-41DD-85BE-41F4BE4DFAC2.1
OsInfo[31].Key=edition
OsInfo[31].Value=Professional
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[33].Value=RS:6425,RD:38F5
OsInfo[34].Key=fconid
OsInfo[35].Key=containerid
OsInfo[36].Key=containertype
OsInfo[37].Key=edu
OsInfo[37].Value=0
File[0].CabName=070320-10906-01.dmp
File[0].Path=070320-10906-01.dmp
File[0].Flags=851970
File[0].Type=2
File[0].Original.Path=\\?\C:\WINDOWS\Minidump\070320-10906-01.dmp
File[1].CabName=sysdata.xml
File[1].Path=WER-19828-0.sysdata.xml
File[1].Flags=851970
File[1].Type=5
File[1].Original.Path=\\?\C:\WINDOWS\TEMP\WER-19828-0.sysdata.xml
File[2].CabName=WERInternalMetadata.xml
File[2].Path=WER63EA.tmp.WERInternalMetadata.xml
File[2].Flags=851970
File[2].Type=5
File[2].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER63EA.tmp.WERInternalMetadata.xml
File[3].CabName=WERInternalRequest.xml
File[3].Path=WER6439.tmp.xml
File[3].Flags=851970
File[3].Type=5
File[3].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6439.tmp.xml
File[4].CabName=memory.csv
File[4].Path=WER643A.tmp.csv
File[4].Flags=589826
File[4].Type=5
File[4].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER643A.tmp.csv
File[5].CabName=sysinfo.txt
File[5].Path=WER644A.tmp.txt
File[5].Flags=589826
File[5].Type=5
File[5].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER644A.tmp.txt
File[6].CabName=Report.zip
File[6].Path=Report.zip
File[6].Flags=65536
File[6].Type=11
File[6].Original.Path=\\?\C:\WINDOWS\system32\Report.zip
Ns[0].Name=stopcode
Ns[0].Value=0000001E
Ns[1].Name=p1
Ns[1].Value=FFFFFFFFC0000005
Ns[2].Name=p2
Ns[2].Value=FFFFF80776FF922A
Ns[3].Name=p3
Ns[3].Value=0000000000000000
Ns[4].Name=p4
Ns[4].Value=FFFFFFFFFFFFFFFF
FriendlyEventName=Shut down unexpectedly
ConsentKey=BlueScreen
AppName=Windows
AppPath=C:\Windows\System32\WerFault.exe
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=00000000000000000000000000000000
MetadataHash=-1629386236