2025-04-15T12:06:02.1228243 D3020\henning \Crashed true <QueryList><Query Id="0" Path="Application"><Select Path="Application">*[System[Provider[@Name='Application Error']]]</Select></Query></QueryList> true <QueryList><Query Id="0" Path="Application"><Select Path="Application">*[System[Provider[@Name='Application Hang']]]</Select></Query></QueryList> S-1-5-18 LeastPrivilege IgnoreNew false true true true false true false true true false false false PT0S 7 msg.exe * /time:864000 Application Hang or Crash, see EvtLog.