Skip to content

Instantly share code, notes, and snippets.

/MCW10.txt Secret

Created August 13, 2015 10:09
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anonymous/c3e05207a679e2f0cd40 to your computer and use it in GitHub Desktop.
Save anonymous/c3e05207a679e2f0cd40 to your computer and use it in GitHub Desktop.
Saving and clearing the following Event Viewer logs to C:\ProgramData\Microsoft\Windows\WER\Temp\
Application
System
Microsoft-Windows-TWinUI/Operational
wevtutil clear-log Application /backup:C:\ProgramData\Microsoft\Windows\WER\Temp\Application-2015081314.evt && wevtutil clear-log System /backup:C:\ProgramData\Microsoft\Windows\WER\Temp\System-2015081314.evt && wevtutil clear-log Microsoft-Windows-TWinUI/Operational /backup:C:\ProgramData\Microsoft\Windows\WER\Temp\Microsoft-Windows-TWinUI#Operational-2015081314.evt && exit
Starting Minecraft...
Minecraft was unexpectedly closed, gathering Event log data...
Reading Event Viewer log Application to C:\ProgramData\Microsoft\Windows\WER\Temp\
XML:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Immersive-Shell' Guid='{315A8872-923E-4EA2-9889-33CD4754BF64}'/><EventID>5973</EventID><Version>0</Version><Level>2</Level><Task>5973</Task><Opcode>0</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2015-08-13T10:05:19.528973900Z'/><EventRecordID>450</EventRecordID><Correlation/><Execution ProcessID='1324' ThreadID='5616'/><Channel>Application</Channel><Computer>StensrudLapTop</Computer><Security UserID='S-1-5-21-737635620-2644555982-1385369507-1001'/></System><EventData><Data Name='AppId'>Microsoft.MinecraftUWP_8wekyb3d8bbwe!App</Data><Data Name='ErrorCode'>-2147023170</Data></EventData></Event>
XML:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Windows Error Reporting'/><EventID Qualifiers='0'>1001</EventID><Level>4</Level><Task>0</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2015-08-13T10:05:19.000000000Z'/><EventRecordID>449</EventRecordID><Channel>Application</Channel><Computer>StensrudLapTop</Computer><Security/></System><EventData><Data>133179424968</Data><Data>5</Data><Data>MoAppCrash</Data><Data>Ikke tilgjengelig</Data><Data>0</Data><Data>Microsoft.MinecraftUWP_0.12.2.0_x64__8wekyb3d8bbwe</Data><Data>praid:App</Data><Data>0.0.0.0</Data><Data>55c3d66c</Data><Data>Minecraft.Win10.DX11.exe</Data><Data>0.0.0.0</Data><Data>55c3d66c</Data><Data>c0000005</Data><Data>00000000000f3b4f</Data><Data></Data><Data>
C:\Users\Bj›rn\AppData\Local\Temp\WERE98A.tmp.WERInternalMetadata.xml</Data><Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_Microsoft.Minecr_3bd58d92e066abef6828d08d9e28e98151cab_3b39a1f9_1646ecb6</Data><Data></Data><Data>0</Data><Data>ef6138f6-d214-49da-bc11-84fbd35affbb</Data><Data>0</Data><Data>2e209dfbd029196038ed56f85b13363d</Data></EventData></Event>
XML:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Application Error'/><EventID Qualifiers='0'>1000</EventID><Level>2</Level><Task>100</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2015-08-13T10:05:18.000000000Z'/><EventRecordID>448</EventRecordID><Channel>Application</Channel><Computer>StensrudLapTop</Computer><Security/></System><EventData><Data>Minecraft.Win10.DX11.exe</Data><Data>0.0.0.0</Data><Data>55c3d66c</Data><Data>Minecraft.Win10.DX11.exe</Data><Data>0.0.0.0</Data><Data>55c3d66c</Data><Data>c0000005</Data><Data>00000000000f3b4f</Data><Data>12f8</Data><Data>01d0d5af8e414524</Data><Data>C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_0.12.2.0_x64__8wekyb3d8bbwe\Minecraft.Win10.DX11.exe</Data><Data>C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_0.12.2.0_x64__8wekyb3d8bbwe\Minecraft.Win10.DX11.exe</Data><Data>ef6138f6-d214-49da-bc11-84fbd35affbb</Data><Data>Microsoft.MinecraftUWP_0.12.2.0_x64__8wekyb3d8bbwe</Data><Data>App</Data></EventData></Event>
Done.
Reading Event Viewer log System to C:\ProgramData\Microsoft\Windows\WER\Temp\
XML:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Eventlog' Guid='{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}'/><EventID>104</EventID><Version>0</Version><Level>4</Level><Task>104</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2015-08-13T10:05:17.509482800Z'/><EventRecordID>809</EventRecordID><Correlation/><Execution ProcessID='672' ThreadID='5212'/><Channel>System</Channel><Computer>StensrudLapTop</Computer><Security UserID='S-1-5-21-737635620-2644555982-1385369507-1001'/></System><UserData><LogFileCleared xmlns='http://manifests.microsoft.com/win/2004/08/windows/eventlog'><SubjectUserName>Bj›rn</SubjectUserName><SubjectDomainName>STENSRUDLAPTOP</SubjectDomainName><Channel>Microsoft-Windows-TWinUI/Operational</Channel><BackupPath>C:\ProgramData\Microsoft\Windows\WER\Temp\Microsoft-Windows-TWinUI#Operational-2015081314.evt</BackupPath></LogFileCleared></UserData></Event>
XML:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Eventlog' Guid='{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}'/><EventID>104</EventID><Version>0</Version><Level>4</Level><Task>104</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2015-08-13T10:05:17.489482300Z'/><EventRecordID>808</EventRecordID><Correlation/><Execution ProcessID='672' ThreadID='5212'/><Channel>System</Channel><Computer>StensrudLapTop</Computer><Security UserID='S-1-5-21-737635620-2644555982-1385369507-1001'/></System><UserData><LogFileCleared xmlns='http://manifests.microsoft.com/win/2004/08/windows/eventlog'><SubjectUserName>Bj›rn</SubjectUserName><SubjectDomainName>STENSRUDLAPTOP</SubjectDomainName><Channel>System</Channel><BackupPath>C:\ProgramData\Microsoft\Windows\WER\Temp\System-2015081314.evt</BackupPath></LogFileCleared></UserData></Event>
Done.
Reading Event Viewer log Microsoft-Windows-TWinUI/Operational to C:\ProgramData\Microsoft\Windows\WER\Temp\
XML:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Immersive-Shell' Guid='{315A8872-923E-4EA2-9889-33CD4754BF64}'/><EventID>5961</EventID><Version>0</Version><Level>2</Level><Task>5961</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2015-08-13T10:05:19.528971800Z'/><EventRecordID>74</EventRecordID><Correlation/><Execution ProcessID='1324' ThreadID='5616'/><Channel>Microsoft-Windows-TWinUI/Operational</Channel><Computer>StensrudLapTop</Computer><Security UserID='S-1-5-21-737635620-2644555982-1385369507-1001'/></System><EventData><Data Name='AppId'>Microsoft.MinecraftUWP_8wekyb3d8bbwe!App</Data><Data Name='ContractId'>Windows.Launch</Data><Data Name='ErrorCode'>-2147023170</Data></EventData></Event>
XML:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Immersive-Shell' Guid='{315A8872-923E-4EA2-9889-33CD4754BF64}'/><EventID>1621</EventID><Version>0</Version><Level>4</Level><Task>1613</Task><Opcode>0</Opcode><Keywords>0x4000400000000000</Keywords><TimeCreated SystemTime='2015-08-13T10:05:17.575082500Z'/><EventRecordID>73</EventRecordID><Correlation/><Execution ProcessID='3852' ThreadID='4220'/><Channel>Microsoft-Windows-TWinUI/Operational</Channel><Computer>StensrudLapTop</Computer><Security UserID='S-1-5-21-737635620-2644555982-1385369507-1001'/></System><EventData><Data Name='ApplicationId'>Microsoft.MinecraftUWP_8wekyb3d8bbwe!App</Data><Data Name='ExecutionState'>1</Data><Data Name='AppState'>0</Data><Data Name='Result'>0</Data></EventData></Event>
Done.
OK
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment