diff --git a/src/TraceEvent/DynamicTraceEventParser.cs b/src/TraceEvent/DynamicTraceEventParser.cs
index 1f80e3cf1..b8e97bb89 100644
--- a/src/TraceEvent/DynamicTraceEventParser.cs
+++ b/src/TraceEvent/DynamicTraceEventParser.cs
@@ -1353,7 +1353,6 @@ public PayloadFetch(ushort offset, RegisteredTraceEventParser.TdhInputType inTyp
                         Size = 1;
                         break;
                     case RegisteredTraceEventParser.TdhInputType.Int16:
-                    case RegisteredTraceEventParser.TdhInputType.UInt16:
                         Size = 2;
                         if (outType == 1)       // Encoding for String
                         {
@@ -1362,18 +1361,33 @@ public PayloadFetch(ushort offset, RegisteredTraceEventParser.TdhInputType inTyp
                         }
                         Type = typeof(short);
                         break;
+                    case RegisteredTraceEventParser.TdhInputType.UInt16:
+                        Size = 2;
+                        if (outType == 1)       // Encoding for String
+                        {
+                            Type = typeof(char);
+                            break;
+                        }
+                        Type = typeof(ushort);
+                        break;
                     case RegisteredTraceEventParser.TdhInputType.Int32:
-                    case RegisteredTraceEventParser.TdhInputType.UInt32:
                     case RegisteredTraceEventParser.TdhInputType.HexInt32:
                         Type = typeof(int);
                         Size = 4;
                         break;
+                    case RegisteredTraceEventParser.TdhInputType.UInt32:
+                        Type = typeof(uint);
+                        Size = 4;
+                        break;
                     case RegisteredTraceEventParser.TdhInputType.Int64:
-                    case RegisteredTraceEventParser.TdhInputType.UInt64:
                     case RegisteredTraceEventParser.TdhInputType.HexInt64:
                         Type = typeof(long);
                         Size = 8;
                         break;
+                    case RegisteredTraceEventParser.TdhInputType.UInt64:
+                        Type = typeof(ulong);
+                        Size = 8;
+                        break;
                     case RegisteredTraceEventParser.TdhInputType.Float:
                         Type = typeof(float);
                         Size = 4;
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/eventpipe-dotnetcore3.0-win-x64-objver4.nettrace.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/eventpipe-dotnetcore3.0-win-x64-objver4.nettrace.baseline.txt
index fafeb8780..85a6a86a1 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/eventpipe-dotnetcore3.0-win-x64-objver4.nettrace.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/eventpipe-dotnetcore3.0-win-x64-objver4.nettrace.baseline.txt
@@ -2,7 +2,7 @@
 Microsoft-Windows-DotNETRuntime/AppDomainResourceManagement/ThreadCreated, 14, <Event MSec=    "17.8861" PID="10064" PName="Process(10064)" TID="3444" EventName="AppDomainResourceManagement/ThreadCreated" ManagedThreadID="0x0000019A7A321810" AppDomainID="0x0000019A783A12A0" Flags="0x00000000" ManagedThreadIndex="3" OSThreadID="3,444" ClrInstanceID="3"/>
 Microsoft-Windows-DotNETRuntime/Contention/Start, 8, <Event MSec=  "3098.9569" PID="10064" PName="Process(10064)" TID="12248" EventName="Contention/Start" ContentionFlags="Managed" ClrInstanceID="3" LockID="0x00000000" AssociatedObjectID="0x00000000" LockOwnerThreadID="0"/>
 Microsoft-Windows-DotNETRuntime/Contention/Stop, 8, <Event MSec=  "3235.9560" PID="10064" PName="Process(10064)" TID="12272" EventName="Contention/Stop" ContentionFlags="Managed" ClrInstanceID="3" DurationNs="137400255.241591"/>
-Microsoft-Windows-DotNETRuntime/GC, 16, <Event MSec=  "1598.5796" PID="10064" PName="Process(10064)" TID="7532" EventName="GC" ProviderName="Microsoft-Windows-DotNETRuntime" FormattedMessage="BytesAllocated=3,784;\r\n;\r\nClrInstanceID=3 " BytesAllocated="3,784" ClrInstanceID="3"/>
+Microsoft-Windows-DotNETRuntime/GC, 16, <Event MSec=  "1598.5796" PID="10064" PName="Process(10064)" TID="7532" EventName="GC" ProviderName="Microsoft-Windows-DotNETRuntime" FormattedMessage="BytesAllocated=0x00000ec8;\r\n;\r\nClrInstanceID=3 " BytesAllocated="0x00000ec8" ClrInstanceID="3"/>
 Microsoft-Windows-DotNETRuntime/GC/AllocationTick, 35458, <Event MSec=  "2331.8048" PID="10064" PName="Process(10064)" TID="6920" EventName="GC/AllocationTick" AllocationAmount="0x000196A0" AllocationKind="Small" ClrInstanceID="3" AllocationAmount64="104,096" TypeID="0x00007FFEA911EA28" TypeName="System.Object[]" HeapIndex="0" Address="0x0000019A00017FE8"/>
 Microsoft-Windows-DotNETRuntime/GC/BulkMovedObjectRanges, 478, <Event MSec=  "5470.4377" PID="10064" PName="Process(10064)" TID="12272" EventName="GC/BulkMovedObjectRanges" Index="0" Count="142" ClrInstanceID="3">\r\n <GCBulkMovedObjectRangesValues  OldRangeBase="0x0000019A00001048" NewRangeBase="0x0000019A00001048" RangeLength="0x00000330"/>\r\n <GCBulkMovedObjectRangesValues  OldRangeBase="0x0000019A00001378" NewRangeBase="0x0000019A00001378" RangeLength="0x000000C0"/>\r\n <GCBulkMovedObjectRangesValues  OldRangeBase="0x0000019A00001498" NewRangeBase="0x0000019A00001438" RangeLength="0x00000028"/>\r\n <GCBulkMovedObjectRangesValues  OldRangeBase="0x0000019A000014E0" NewRangeBase="0x0000019A00001460" RangeLength="0x00000028"/>\r\n <GCBulkMovedObjectRangesValues  OldRangeBase="0x0000019A00001528" NewRangeBase="0x0000019A00001488" RangeLength="0x000003B0"/>\r\n <GCBulkMovedObjectRangesValues  OldRangeBase="0x0000019A000019A0" NewRangeBase="0x0000019A00001850" RangeLength="0x00000110"/>\r\n <GCBulkMovedObjectRangesValues  OldRangeBase="0x0000019A000
 Microsoft-Windows-DotNETRuntime/GC/FinalizersStart, 2, <Event MSec=  "5476.2263" PID="10064" PName="Process(10064)" TID="11488" EventName="GC/FinalizersStart" ClrInstanceID="3"/>
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x64.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x64.baseline.txt
index 5180957a5..b6ea44e30 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x64.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x64.baseline.txt
@@ -233,7 +233,7 @@ EVENT 3,079.916: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=367
 EVENT 3,079.921: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=Test; ClrInstanceID=9; 
 EVENT 3,110.112: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=9; 
 EVENT 3,110.122: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=9; 
-EVENT 3,120.929: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=10; BytesAllocated=1,936; ClrInstanceID=9; 
+EVENT 3,120.929: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=10; BytesAllocated=0x00000790; ClrInstanceID=9; 
 EVENT 3,210.316: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=66; AllocationAmount=102,760; AllocationKind=Small; ClrInstanceID=9; AllocationAmount64=102,760; TypeID=0x7f95eab6088; TypeName=System.Object; HeapIndex=0; Address=0x02567fc8; ObjectSize=0; 
 EVENT 3,210.813: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=66; AllocationAmount=106,912; AllocationKind=Small; ClrInstanceID=9; AllocationAmount64=106,912; TypeID=0x7f95eab6088; TypeName=System.Object; HeapIndex=0; Address=0x02581fc8; ObjectSize=0; 
 EVENT 3,211.301: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=66; AllocationAmount=106,912; AllocationKind=Small; ClrInstanceID=9; AllocationAmount64=106,912; TypeID=0x7f95eab6088; TypeName=System.Object; HeapIndex=0; Address=0x0259bfc8; ObjectSize=0; 
@@ -378,7 +378,7 @@ EVENT 8,201.576: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=3676; T
 EVENT 8,201.596: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=182; AssemblyID=7,884,224; AppDomainID=8,769,226,034,224; AssemblyFlags=DomainNeutral; FullyQualifiedAssemblyName=mscorlib, Version=4....; BindingID=0; ClrInstanceID=9; 
 EVENT 8,201.600: Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=44; AppDomainID=8,769,226,034,224; AppDomainFlags=Shared; AppDomainName=SharedDomain; AppDomainIndex=0; ClrInstanceID=9; 
 EVENT 8,202.277: Windows Kernel/Process/PerfCtr PID=3676; TID=-1; PName=Test.x64; ProceNum=7; DataLen=104; ProcessID=3,676; MemoryCount=0; HandleCount=0; PeakVirtualSize=492,675,072; PeakWorkingSetSize=18,219,008; PeakPagefileUsage=10,784,768; QuotaPeakPagedPoolUsage=145,520; QuotaPeakNonPagedPoolUsage=26,752; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 8,202.284: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=89; ProcessID=3,676; CreateTime=20/07/29 00:07:03.35...; ExitTime=20/07/29 00:07:08.82...; ExitCode=0; TokenElevationType=2; HandleCount=101; CommitCharge=10,559,488; CommitPeak=10,784,768; CPUCycleCount=18,544,501,267; ReadOperationCount=6; WriteOperationCount=3; ReadTransferKiloBytes=25; WriteTransferKiloBytes=0; HardFaultCount=145; ImageName=Test.x64.exe; 
+EVENT 8,202.284: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3676; TID=3680; PName=Test.x64; ProceNum=7; DataLen=89; ProcessID=3,676; CreateTime=20/07/29 00:07:03.35...; ExitTime=20/07/29 00:07:08.82...; ExitCode=0; TokenElevationType=2; HandleCount=101; CommitCharge=0x00a12000; CommitPeak=0x00a49000; CPUCycleCount=0x45156a213; ReadOperationCount=6; WriteOperationCount=3; ReadTransferKiloBytes=25; WriteTransferKiloBytes=0; HardFaultCount=145; ImageName=Test.x64.exe; 
 EVENT 8,202.285: Windows Kernel/Process/Stop PID=3676; TID=-1; PName=Test.x64; ProceNum=7; DataLen=123; ProcessID=3,676; ParentID=3,508; ImageFileName=Test.x64.exe; PageDirectoryBase=0x558fb000; Flags=None; SessionID=1; ExitStatus=0; UniqueProcessKey=0xfffffa8300cfb380; CommandLine=Test.x64.exe; PackageFullName=; ApplicationID=; 
 EVENT 9,772.576: Windows Kernel/DiskIO/FlushInit PID=4; TID=44; PName=System; ProceNum=5; DataLen=12; Irp=0xfffffa8302a1dc60; 
 EVENT 9,882.352: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=1097765; PName=; ProceNum=5; DataLen=28; DiskNumber=0; IrpFlags=None; Irp=0xfffffa8302a1dc60; ElapsedTimeMSec=109.777; 
@@ -397,7 +397,7 @@ EVENT 9,902.552: System.Threading.Tasks.TplEventSource/TaskExecute/Start PID=398
 EVENT 9,903.079: System.Threading.Tasks.TplEventSource/TaskExecute/Start PID=3988; TID=3780; PName=PerfView; ProceNum=3; DataLen=12; OriginatingTaskSchedulerID=1; OriginatingTaskID=5; TaskID=8; 
 EVENT 9,903.146: System.Diagnostics.Eventing.FrameworkEventSource/ThreadPoolDequeueWork PID=3988; TID=3672; PName=PerfView; ProceNum=7; DataLen=8; workID=278,775,344; 
 EVENT 9,903.165: System.Threading.Tasks.TplEventSource/TaskExecute/Start PID=3988; TID=3672; PName=PerfView; ProceNum=7; DataLen=12; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=7; 
-EVENT 9,903.179: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3988; TID=3672; PName=PerfView; ProceNum=7; DataLen=10; BytesAllocated=1,328; ClrInstanceID=11; 
+EVENT 9,903.179: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3988; TID=3672; PName=PerfView; ProceNum=7; DataLen=10; BytesAllocated=0x00000530; ClrInstanceID=11; 
 EVENT 9,903.345: Microsoft-Windows-DotNETRuntime/Exception/Start PID=3988; TID=3780; PName=PerfView; ProceNum=3; DataLen=170; ExceptionType=System.IO.FileNotFou...; ExceptionMessage=The session PerfView...; ExceptionEIP=0x0a3910f0; ExceptionHRESULT=-2,147,024,894; ExceptionFlags=CLSCompliant; ClrInstanceID=11; 
 EVENT 9,903.405: Microsoft-Windows-DotNETRuntime/ThreadPoolWorkerThread/Start PID=3988; TID=1944; PName=PerfView; ProceNum=4; DataLen=10; ActiveWorkerThreadCount=5; RetiredWorkerThreadCount=0; ClrInstanceID=11; 
 EVENT 9,903.425: System.Threading.Tasks.TplEventSource/TaskExecute/Stop PID=3988; TID=3780; PName=PerfView; ProceNum=3; DataLen=16; OriginatingTaskSchedulerID=1; OriginatingTaskID=5; TaskID=8; IsExceptional=False; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x86.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x86.baseline.txt
index eb9ff216d..bb33262ea 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x86.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.2.x86.baseline.txt
@@ -236,7 +236,7 @@ EVENT 2,840.394: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=364
 EVENT 2,840.396: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=3644; TID=3708; PName=Test.x86; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=Test; ClrInstanceID=11; 
 EVENT 2,851.384: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart PID=3644; TID=3708; PName=Test.x86; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=11; 
 EVENT 2,851.390: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop PID=3644; TID=3708; PName=Test.x86; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=11; 
-EVENT 2,856.818: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3644; TID=3708; PName=Test.x86; ProceNum=2; DataLen=10; BytesAllocated=1,328; ClrInstanceID=11; 
+EVENT 2,856.818: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3644; TID=3708; PName=Test.x86; ProceNum=2; DataLen=10; BytesAllocated=0x00000530; ClrInstanceID=11; 
 EVENT 2,900.624: Windows Kernel/UdpIp/RecvIPV6 PID=2108; TID=-1; PName=svchost; ProceNum=6; DataLen=56; size=482; dport=1,900; sport=1,900; seqnum=0; connid=0x00000000; 
 EVENT 2,902.453: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=3644; TID=3708; PName=Test.x86; ProceNum=2; DataLen=98; AllocationAmount=102,640; AllocationKind=Small; ClrInstanceID=11; AllocationAmount64=102,640; TypeID=0x04e03214; TypeName=System.Globalization...; HeapIndex=0; Address=0x027f7fd4; ObjectSize=0; 
 EVENT 2,903.996: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=3644; TID=3708; PName=Test.x86; ProceNum=2; DataLen=58; AllocationAmount=106,808; AllocationKind=Small; ClrInstanceID=11; AllocationAmount64=106,808; TypeID=0x00d86050; TypeName=System.Object; HeapIndex=0; Address=0x02811fe4; ObjectSize=0; 
@@ -378,7 +378,7 @@ EVENT 7,902.615: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=3644; T
 EVENT 7,902.621: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=3644; TID=3708; PName=Test.x86; ProceNum=7; DataLen=182; AssemblyID=11,031,232; AppDomainID=1,958,808,584; AssemblyFlags=DomainNeutral; FullyQualifiedAssemblyName=mscorlib, Version=4....; BindingID=0; ClrInstanceID=11; 
 EVENT 7,902.622: Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload PID=3644; TID=3708; PName=Test.x86; ProceNum=7; DataLen=44; AppDomainID=1,958,808,584; AppDomainFlags=Shared; AppDomainName=SharedDomain; AppDomainIndex=0; ClrInstanceID=11; 
 EVENT 7,903.317: Windows Kernel/Process/PerfCtr PID=3644; TID=-1; PName=Test.x86; ProceNum=7; DataLen=104; ProcessID=3,644; MemoryCount=0; HandleCount=0; PeakVirtualSize=105,160,704; PeakWorkingSetSize=14,159,872; PeakPagefileUsage=7,307,264; QuotaPeakPagedPoolUsage=126,592; QuotaPeakNonPagedPoolUsage=13,880; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 7,903.326: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3644; TID=3708; PName=Test.x86; ProceNum=7; DataLen=89; ProcessID=3,644; CreateTime=20/07/29 00:06:22.40...; ExitTime=20/07/29 00:06:27.70...; ExitCode=0; TokenElevationType=2; HandleCount=104; CommitCharge=7,196,672; CommitPeak=7,307,264; CPUCycleCount=18,189,847,275; ReadOperationCount=7; WriteOperationCount=3; ReadTransferKiloBytes=51; WriteTransferKiloBytes=0; HardFaultCount=15; ImageName=Test.x86.exe; 
+EVENT 7,903.326: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3644; TID=3708; PName=Test.x86; ProceNum=7; DataLen=89; ProcessID=3,644; CreateTime=20/07/29 00:06:22.40...; ExitTime=20/07/29 00:06:27.70...; ExitCode=0; TokenElevationType=2; HandleCount=104; CommitCharge=0x006dd000; CommitPeak=0x006f8000; CPUCycleCount=0x43c330aeb; ReadOperationCount=7; WriteOperationCount=3; ReadTransferKiloBytes=51; WriteTransferKiloBytes=0; HardFaultCount=15; ImageName=Test.x86.exe; 
 EVENT 7,903.327: Windows Kernel/Process/Stop PID=3644; TID=-1; PName=Test.x86; ProceNum=7; DataLen=123; ProcessID=3,644; ParentID=3,508; ImageFileName=Test.x86.exe; PageDirectoryBase=0x02b4d000; Flags=Wow64; SessionID=1; ExitStatus=0; UniqueProcessKey=0xfffffa8300c27080; CommandLine=Test.x86.exe; PackageFullName=; ApplicationID=; 
 EVENT 10,248.410: Windows Kernel/DiskIO/FlushInit PID=4; TID=36; PName=System; ProceNum=2; DataLen=12; Irp=0xfffffa8302b1b560; 
 EVENT 10,276.116: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=277066; PName=; ProceNum=2; DataLen=28; DiskNumber=0; IrpFlags=None; Irp=0xfffffa8302b1b560; ElapsedTimeMSec=27.707; 
@@ -420,9 +420,9 @@ EVENT 10,375.614: Microsoft-Windows-DotNETRuntime/Contention/Stop PID=3988; TID=
 EVENT 10,375.768: Microsoft-Windows-DotNETRuntime/Contention/Stop PID=3988; TID=4088; PName=PerfView; ProceNum=4; DataLen=3; ContentionFlags=Native; ClrInstanceID=11; DurationNs=0.000; 
 EVENT 10,375.986: System.Threading.Tasks.TplEventSource/TaskExecute/Start PID=3988; TID=4088; PName=PerfView; ProceNum=4; DataLen=12; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=3; 
 EVENT 10,376.024: System.Threading.Tasks.TplEventSource/TaskExecute/Start PID=3988; TID=3744; PName=PerfView; ProceNum=0; DataLen=12; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=4; 
-EVENT 10,376.028: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3988; TID=3744; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=1,328; ClrInstanceID=11; 
+EVENT 10,376.028: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3988; TID=3744; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=0x00000530; ClrInstanceID=11; 
 EVENT 10,376.370: System.Threading.Tasks.TplEventSource/TaskExecute/Start PID=3988; TID=2916; PName=PerfView; ProceNum=2; DataLen=12; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=2; 
-EVENT 10,376.372: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3988; TID=2916; PName=PerfView; ProceNum=2; DataLen=10; BytesAllocated=1,328; ClrInstanceID=11; 
+EVENT 10,376.372: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=3988; TID=2916; PName=PerfView; ProceNum=2; DataLen=10; BytesAllocated=0x00000530; ClrInstanceID=11; 
 EVENT 10,378.073: Microsoft-Windows-DotNETRuntime/Exception/Start PID=3988; TID=3744; PName=PerfView; ProceNum=0; DataLen=170; ExceptionType=System.IO.FileNotFou...; ExceptionMessage=The session PerfView...; ExceptionEIP=0x0a3910f0; ExceptionHRESULT=-2,147,024,894; ExceptionFlags=CLSCompliant; ClrInstanceID=11; 
 EVENT 10,378.800: System.Threading.Tasks.TplEventSource/TaskExecute/Stop PID=3988; TID=3744; PName=PerfView; ProceNum=2; DataLen=16; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=4; IsExceptional=False; 
 EVENT 10,508.734: PerfView/ManifestData PID=3988; TID=4032; PName=PerfView; ProceNum=4; DataLen=13046; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=13046; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x64.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x64.baseline.txt
index 85c1f4642..1fe43f130 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x64.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x64.baseline.txt
@@ -298,7 +298,7 @@ EVENT 11,088.519: Windows Kernel/Image/Unload PID=3404; TID=-1; PName=Test; Proc
 EVENT 11,088.535: Windows Kernel/Image/Unload PID=3404; TID=-1; PName=Test; ProceNum=3; DataLen=308; ImageBase=0x7ff1aab0000; ImageSize=22,532,096; ImageChecksum=0; TimeDateStamp=1,341,806,538; DefaultBase=0x7ff1aab0000; BuildTime=12/07/09 04:02:18.00...; FileName=C:\Windows\assembly\...; 
 EVENT 11,088.539: Windows Kernel/Image/Unload PID=3404; TID=-1; PName=Test; ProceNum=3; DataLen=210; ImageBase=0x7ff220a0000; ImageSize=9,822,208; ImageChecksum=9,805,278; TimeDateStamp=1,341,807,025; DefaultBase=0x7ff220a0000; BuildTime=12/07/09 04:10:25.00...; FileName=C:\Windows\Microsoft...; 
 EVENT 11,088.602: Windows Kernel/Process/PerfCtr PID=3404; TID=-1; PName=Test; ProceNum=3; DataLen=104; ProcessID=3,404; MemoryCount=0; HandleCount=0; PeakVirtualSize=500,547,584; PeakWorkingSetSize=14,200,832; PeakPagefileUsage=13,242,368; QuotaPeakPagedPoolUsage=165,192; QuotaPeakNonPagedPoolUsage=23,424; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 11,088.611: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3404; TID=3556; PName=Test; ProceNum=3; DataLen=85; ProcessID=3,404; CreateTime=20/07/28 23:45:21.05...; ExitTime=20/07/28 23:45:26.09...; ExitCode=0; TokenElevationType=3; HandleCount=97; CommitCharge=13,168,640; CommitPeak=13,242,368; CPUCycleCount=17,944,340,549; ReadOperationCount=7; WriteOperationCount=3; ReadTransferKiloBytes=25; WriteTransferKiloBytes=0; HardFaultCount=2; ImageName=Test.exe; 
+EVENT 11,088.611: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3404; TID=3556; PName=Test; ProceNum=3; DataLen=85; ProcessID=3,404; CreateTime=20/07/28 23:45:21.05...; ExitTime=20/07/28 23:45:26.09...; ExitCode=0; TokenElevationType=3; HandleCount=97; CommitCharge=0x00c8f000; CommitPeak=0x00ca1000; CPUCycleCount=0x42d90e845; ReadOperationCount=7; WriteOperationCount=3; ReadTransferKiloBytes=25; WriteTransferKiloBytes=0; HardFaultCount=2; ImageName=Test.exe; 
 EVENT 11,088.611: Windows Kernel/Process/Stop PID=3404; TID=-1; PName=Test; ProceNum=3; DataLen=111; ProcessID=3,404; ParentID=1,664; ImageFileName=Test.exe; PageDirectoryBase=0xbe0d6000; Flags=None; SessionID=1; ExitStatus=0; UniqueProcessKey=0xfffffa8322f79580; CommandLine=test.exe; PackageFullName=; ApplicationID=; 
 EVENT 11,617.435: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Start PID=3208; TID=3740; PName=explorer; ProceNum=3; DataLen=0; 
 EVENT 11,617.512: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Stop PID=3208; TID=3740; PName=explorer; ProceNum=3; DataLen=0; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x86.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x86.baseline.txt
index 9bd552b40..e4bddff79 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x86.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.5.x86.baseline.txt
@@ -268,7 +268,7 @@ EVENT 8,316.181: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=4200; T
 EVENT 8,316.195: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=4200; TID=2940; PName=Test.x86; ProceNum=0; DataLen=182; AssemblyID=8,210,552; AppDomainID=1,954,640,256; AssemblyFlags=DomainNeutral, Nativ...; FullyQualifiedAssemblyName=mscorlib, Version=4....; BindingID=0; ClrInstanceID=11; 
 EVENT 8,316.205: Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload PID=4200; TID=2940; PName=Test.x86; ProceNum=0; DataLen=44; AppDomainID=1,954,640,256; AppDomainFlags=Shared; AppDomainName=SharedDomain; AppDomainIndex=0; ClrInstanceID=11; 
 EVENT 8,316.922: Windows Kernel/Process/PerfCtr PID=4200; TID=-1; PName=Test.x86; ProceNum=0; DataLen=104; ProcessID=4,200; MemoryCount=0; HandleCount=0; PeakVirtualSize=114,003,968; PeakWorkingSetSize=11,415,552; PeakPagefileUsage=9,084,928; QuotaPeakPagedPoolUsage=142,160; QuotaPeakNonPagedPoolUsage=12,200; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 8,316.932: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=4200; TID=2940; PName=Test.x86; ProceNum=0; DataLen=89; ProcessID=4,200; CreateTime=20/07/28 23:51:53.73...; ExitTime=20/07/28 23:51:58.76...; ExitCode=0; TokenElevationType=3; HandleCount=101; CommitCharge=8,970,240; CommitPeak=9,084,928; CPUCycleCount=17,866,906,938; ReadOperationCount=7; WriteOperationCount=3; ReadTransferKiloBytes=25; WriteTransferKiloBytes=0; HardFaultCount=2; ImageName=Test.x86.exe; 
+EVENT 8,316.932: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=4200; TID=2940; PName=Test.x86; ProceNum=0; DataLen=89; ProcessID=4,200; CreateTime=20/07/28 23:51:53.73...; ExitTime=20/07/28 23:51:58.76...; ExitCode=0; TokenElevationType=3; HandleCount=101; CommitCharge=0x0088e000; CommitPeak=0x008aa000; CPUCycleCount=0x428f35d3a; ReadOperationCount=7; WriteOperationCount=3; ReadTransferKiloBytes=25; WriteTransferKiloBytes=0; HardFaultCount=2; ImageName=Test.x86.exe; 
 EVENT 8,316.932: Windows Kernel/Process/Stop PID=4200; TID=-1; PName=Test.x86; ProceNum=0; DataLen=123; ProcessID=4,200; ParentID=1,664; ImageFileName=Test.x86.exe; PageDirectoryBase=0x5961c000; Flags=Wow64; SessionID=1; ExitStatus=0; UniqueProcessKey=0xfffffa83129f6940; CommandLine=Test.x86.exe; PackageFullName=; ApplicationID=; 
 EVENT 9,172.367: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerOnShellHookMessage/Start PID=3208; TID=3740; PName=explorer; ProceNum=6; DataLen=4; Message=19; 
 EVENT 9,172.370: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Start PID=3208; TID=3740; PName=explorer; ProceNum=6; DataLen=0; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.6.2.x86.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.6.2.x86.baseline.txt
index 41159ec2b..f819d8e4f 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/net.4.6.2.x86.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/net.4.6.2.x86.baseline.txt
@@ -107,19 +107,19 @@ EVENT 391.244: KernelTraceControl/MetaData/EventInfo PID=15316; TID=22048; PName
 EVENT 391.244: Microsoft-JScript/MethodRundown/DCEndComplete PID=15316; TID=22048; PName=browser_broker; ProceNum=1; DataLen=0; 
 EVENT 391.244: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; ScriptContextID=0x1dc2f46f370; 
 EVENT 391.252: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; ScriptContextID=0x1dc2f4c26a0; 
-EVENT 391.257: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=126; SourceID=32; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=http://tpc.googlesyn...; 
-EVENT 391.259: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=196; SourceID=34; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=https://pagead2.goog...; 
+EVENT 391.257: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=126; SourceID=0x00000020; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=http://tpc.googlesyn...; 
+EVENT 391.259: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=196; SourceID=0x00000022; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=https://pagead2.goog...; 
 EVENT 391.271: KernelTraceControl/MetaData/EventMapInfo PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=408; 
-EVENT 391.271: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=72; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70fc0; MethodSize=8; MethodID=2,622; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=32; Line=2; Column=29; MethodName=Global code; 
-EVENT 391.274: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=52; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70e60; MethodSize=8; MethodID=2,669; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=32; Line=12; Column=7; MethodName=S; 
-EVENT 391.276: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=86; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70fb8; MethodSize=8; MethodID=2,623; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=32; Line=3; Column=2; MethodName=Anonymous function; 
-EVENT 391.278: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=54; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70ef0; MethodSize=8; MethodID=2,625; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=32; Line=3; Column=43; MethodName=ba; 
-EVENT 391.280: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=52; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70f40; MethodSize=8; MethodID=2,626; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=32; Line=4; Column=78; MethodName=h; 
+EVENT 391.271: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=72; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70fc0; MethodSize=0x00000008; MethodID=2,622; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000020; Line=2; Column=29; MethodName=Global code; 
+EVENT 391.274: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=52; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70e60; MethodSize=0x00000008; MethodID=2,669; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000020; Line=12; Column=7; MethodName=S; 
+EVENT 391.276: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=86; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70fb8; MethodSize=0x00000008; MethodID=2,623; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000020; Line=3; Column=2; MethodName=Anonymous function; 
+EVENT 391.278: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=54; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70ef0; MethodSize=0x00000008; MethodID=2,625; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000020; Line=3; Column=43; MethodName=ba; 
+EVENT 391.280: Microsoft-JScript/MethodRundown/MethodDCStart PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=52; ScriptContextID=0x1dc2f4c26a0; MethodStartAddress=0x1dc43c70f40; MethodSize=0x00000008; MethodID=2,626; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000020; Line=4; Column=78; MethodName=h; 
 EVENT 391.296: Microsoft-JScript/MethodRundown/DCStartInit PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=0; 
 EVENT 391.299: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=8; ScriptContextID=0x24acefd2d90; 
-EVENT 391.343: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=96; SourceID=12; ScriptContextID=0x24acefd2d90; SourceFlags=0; Url=http://www.google-an...; 
-EVENT 391.345: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=116; SourceID=13; ScriptContextID=0x24acefd2d90; SourceFlags=0; Url=http://az416426.vo.m...; 
-EVENT 391.348: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=180; SourceID=14; ScriptContextID=0x24acefd2d90; SourceFlags=0; Url=http://www.nuget.org...; 
+EVENT 391.343: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=96; SourceID=0x0000000c; ScriptContextID=0x24acefd2d90; SourceFlags=0; Url=http://www.google-an...; 
+EVENT 391.345: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=116; SourceID=0x0000000d; ScriptContextID=0x24acefd2d90; SourceFlags=0; Url=http://az416426.vo.m...; 
+EVENT 391.348: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=24180; TID=8624; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=180; SourceID=0x0000000e; ScriptContextID=0x24acefd2d90; SourceFlags=0; Url=http://www.nuget.org...; 
 EVENT 392.511: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=13544; TID=8564; PName=ScreenToGif - Preview 14; ProceNum=3; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=10; 
 EVENT 392.534: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=13096; TID=19364; PName=dotnet; ProceNum=2; DataLen=22; SegmentSize=268,435,456; LargeObjectSegmentSize=134,217,728; ServerGC=False; ClrInstanceID=30; 
 EVENT 392.653: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=11216; TID=18688; PName=IntelliTrace; ProceNum=3; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=10; 
@@ -135,12 +135,12 @@ EVENT 416.970: Microsoft-JScript/MethodRundown/DCStartComplete PID=17836; TID=13
 EVENT 416.972: Microsoft-JScript/MethodRundown/DCEndInit PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=0; 
 EVENT 416.973: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; ScriptContextID=0x1dc2f46f370; 
 EVENT 416.975: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; ScriptContextID=0x1dc2f4c26a0; 
-EVENT 416.977: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=126; SourceID=32; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=http://tpc.googlesyn...; 
-EVENT 416.978: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=196; SourceID=34; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=https://pagead2.goog...; 
+EVENT 416.977: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=126; SourceID=0x00000020; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=http://tpc.googlesyn...; 
+EVENT 416.978: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=196; SourceID=0x00000022; ScriptContextID=0x1dc2f4c26a0; SourceFlags=0; Url=https://pagead2.goog...; 
 EVENT 417.410: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=8; ScriptContextID=0x1dc2f434d30; 
-EVENT 417.412: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=156; SourceID=36; ScriptContextID=0x1dc2f434d30; SourceFlags=0; Url=https://pixel.adsafe...; 
-EVENT 417.413: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=114; SourceID=37; ScriptContextID=0x1dc2f434d30; SourceFlags=0; Url=https://static.adsaf...; 
-EVENT 417.414: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=1364; SourceID=35; ScriptContextID=0x1dc2f434d30; SourceFlags=0; Url=https://ad.atdmt.com...; 
+EVENT 417.412: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=156; SourceID=0x00000024; ScriptContextID=0x1dc2f434d30; SourceFlags=0; Url=https://pixel.adsafe...; 
+EVENT 417.413: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=114; SourceID=0x00000025; ScriptContextID=0x1dc2f434d30; SourceFlags=0; Url=https://static.adsaf...; 
+EVENT 417.414: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=1364; SourceID=0x00000023; ScriptContextID=0x1dc2f434d30; SourceFlags=0; Url=https://ad.atdmt.com...; 
 EVENT 418.880: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; ScriptContextID=0x1dc4129d340; 
 EVENT 419.207: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=17836; TID=13508; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; ScriptContextID=0x1dc2f472b00; 
 EVENT 419.949: Microsoft-JScript/MethodRundown/DCStartInit PID=8588; TID=13128; PName=devenv; ProceNum=2; DataLen=0; 
@@ -174,11 +174,11 @@ EVENT 434.870: Microsoft-JScript/Jscript_GC_Mark/Start PID=17836; TID=6692; PNam
 EVENT 434.870: Microsoft-JScript/Jscript_GC_Mark/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=8; RecyclerID=0x1d42ab93f30; 
 EVENT 434.872: Microsoft-JScript/Jscript_GC_DecommitConcurrentCollectPageAllocator/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=8; RecyclerID=0x1d42ab93f30; 
 EVENT 436.975: Microsoft-IE/Mshtml_LowPriMethodCall_Watchdog PID=8588; TID=9752; PName=devenv; ProceNum=1; DataLen=0; 
-EVENT 448.912: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=41,852,928; 
-EVENT 448.916: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=41,848,832; 
-EVENT 448.917: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=41,844,736; 
-EVENT 448.919: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=41,840,640; 
-EVENT 448.920: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=41,836,544; 
+EVENT 448.912: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=0x027ea000; 
+EVENT 448.916: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=0x027e9000; 
+EVENT 448.917: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=0x027e8000; 
+EVENT 448.919: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=0x027e7000; 
+EVENT 448.920: Microsoft-JScript/Jscript_Page_Allocator_Size/UsedPageSize PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=1; DataLen=8; SizeInBytes=0x027e6000; 
 EVENT 449.122: Microsoft-JScript/Jscript_GC_DecommitConcurrentCollectPageAllocator/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; RecyclerID=0x1d42ab93f30; 
 EVENT 449.383: Microsoft-JScript/Jscript_GC_SweepWeakRef/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; RecyclerID=0x1d42ab93f30; 
 EVENT 450.222: Microsoft-JScript/Jscript_GC_SweepWeakRef/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; RecyclerID=0x1d42ab93f30; 
@@ -203,22 +203,22 @@ EVENT 450.931: Microsoft-JScript/Jscript_Recycler_Allocation/Allocate_Function P
 EVENT 450.932: Microsoft-JScript/Jscript_Recycler_Allocation/Allocate_Function PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=12; MemoryAddress=0x1dc44d480c0; MethodID=3,130; 
 EVENT 450.933: Microsoft-JScript/Jscript_Recycler_Allocation/Allocate_Function PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=12; MemoryAddress=0x1dc44d48120; MethodID=3,131; 
 EVENT 450.942: Microsoft-JScript/Jscript_Recycler_Allocation/Allocate_Function PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=12; MemoryAddress=0x1dc44d4c000; MethodID=3,133; 
-EVENT 451.227: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=28; HeapHandle=0x1d42ab14240; Size=32; Address=0x1dc41ad8540; Source=3; 
-EVENT 451.393: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=28; HeapHandle=0x1d42ab14240; Size=80; Address=0x1dc44ff6b20; Source=3; 
-EVENT 451.399: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=28; HeapHandle=0x1d42ab14240; Size=32; Address=0x1dc41ad8520; Source=3; 
-EVENT 451.401: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=28; HeapHandle=0x1d42ab14240; Size=32; Address=0x1dc41ad8500; Source=3; 
+EVENT 451.227: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=2; DataLen=28; HeapHandle=0x1d42ab14240; Size=0x00000020; Address=0x1dc41ad8540; Source=3; 
+EVENT 451.393: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=28; HeapHandle=0x1d42ab14240; Size=0x00000050; Address=0x1dc44ff6b20; Source=3; 
+EVENT 451.399: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=28; HeapHandle=0x1d42ab14240; Size=0x00000020; Address=0x1dc41ad8520; Source=3; 
+EVENT 451.401: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=28; HeapHandle=0x1d42ab14240; Size=0x00000020; Address=0x1dc41ad8500; Source=3; 
 EVENT 451.424: Microsoft-JScript/Jscript_Recycler_Allocation/Allocate_DOM_Object PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=12; MemoryAddress=0x1dc44d60000; TypeId=4,199; 
 EVENT 451.426: Microsoft-JScript/Jscript_Recycler_Allocation/External_AddRef PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; MemoryAddress=0x1dc44d60000; 
 EVENT 451.430: Microsoft-JScript/Jscript_Recycler_Allocation/External_Release PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; MemoryAddress=0x1dc44d60000; 
-EVENT 451.697: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=0; EventContextId=2,045,197,022,976; 
-EVENT 451.700: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=256; EventContextId=2,045,197,022,976; 
-EVENT 451.709: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=2; EventContextId=2,045,197,022,976; 
-EVENT 451.710: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=0; EventContextId=2,045,197,022,976; 
-EVENT 451.712: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=0; EventContextId=2,045,197,022,976; 
-EVENT 451.713: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=256; EventContextId=2,045,197,022,976; 
-EVENT 451.714: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=2; EventContextId=2,045,197,022,976; 
-EVENT 451.715: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=0; EventContextId=2,045,197,022,976; 
-EVENT 451.746: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=28; HeapHandle=0x1d42ab14240; Size=64; Address=0x1dc3027d240; Source=3; 
+EVENT 451.697: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=0; EventContextId=0x1dc2f3df700; 
+EVENT 451.700: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=256; EventContextId=0x1dc2f3df700; 
+EVENT 451.709: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=2; EventContextId=0x1dc2f3df700; 
+EVENT 451.710: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=0; EventContextId=0x1dc2f3df700; 
+EVENT 451.712: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=0; EventContextId=0x1dc2f3df700; 
+EVENT 451.713: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; View=0x1dc2c938000; grfLAYOUT=256; EventContextId=0x1dc2f3df700; 
+EVENT 451.714: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=2; EventContextId=0x1dc2f3df700; 
+EVENT 451.715: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=20; DOC=0x1dc2c938000; Flags=0; EventContextId=0x1dc2f3df700; 
+EVENT 451.746: Microsoft-JScript/Memprotect_GC_Allocation PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=28; HeapHandle=0x1d42ab14240; Size=0x00000040; Address=0x1dc3027d240; Source=3; 
 EVENT 451.754: Microsoft-JScript/Jscript_Recycler_Allocation/Allocate_DOM_Object PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=12; MemoryAddress=0x1dc44d60060; TypeId=4,144; 
 EVENT 451.756: Microsoft-JScript/Jscript_Recycler_Allocation/External_AddRef PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=8; MemoryAddress=0x1dc44d60060; 
 EVENT 451.764: Microsoft-JScript/Jscript_Recycler_Allocation/External_Release PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; MemoryAddress=0x1dc44d60060; 
@@ -228,8 +228,8 @@ EVENT 452.407: Microsoft-JScript/Jscript_Recycler_Allocation/External_AddRef PID
 EVENT 452.408: Microsoft-JScript/Jscript_Recycler_Allocation/External_Release PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; MemoryAddress=0x1dc42d984d0; 
 EVENT 452.410: Microsoft-JScript/Jscript_Recycler_Allocation/External_AddRef PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; MemoryAddress=0x1dc42d984d0; 
 EVENT 452.411: Microsoft-JScript/Jscript_Recycler_Allocation/External_Release PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; MemoryAddress=0x1dc42d984d0; 
-EVENT 452.416: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=20; View=0x1dc2c938000; grfLAYOUT=0; EventContextId=2,045,152,134,912; 
-EVENT 452.422: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=20; DOC=0x1dc2c938000; Flags=2; EventContextId=2,045,197,022,976; 
+EVENT 452.416: Microsoft-IE/Mshtml_CMarkup_Layout/Start PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=20; View=0x1dc2c938000; grfLAYOUT=0; EventContextId=0x1dc2c910700; 
+EVENT 452.422: Microsoft-IE/Mshtml_CMarkup_Layout/Stop PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=20; DOC=0x1dc2c938000; Flags=2; EventContextId=0x1dc2f3df700; 
 EVENT 452.482: Microsoft-JScript/Jscript_Recycler_Allocation/Allocate_Object PID=17836; TID=6692; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; MemoryAddress=0x1dc44d28260; 
 EVENT 459.300: Microsoft-JScript/Jscript_GC_BackgroundZeroPage/Start PID=17836; TID=13432; PName=MicrosoftEdgeCP; ProceNum=3; DataLen=8; RecyclerID=0x1d42ab93f30; 
 EVENT 459.482: Microsoft-JScript/Jscript_GC_BackgroundZeroPage/Stop PID=17836; TID=13432; PName=MicrosoftEdgeCP; ProceNum=0; DataLen=8; RecyclerID=0x1d42ab93f30; 
@@ -329,7 +329,7 @@ EVENT 715.266: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=20484; TID=1478
 EVENT 715.269: Microsoft-Windows-DotNETRuntime/GC/FinalizeObject PID=20484; TID=14784; PName=PerfView; ProceNum=0; DataLen=10; TypeName=System.WeakReference; ObjectID=0x03114e08; TypeID=0x6a29ff04; ClrInstanceID=10; 
 EVENT 715.273: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=20484; TID=14784; PName=PerfView; ProceNum=0; DataLen=77; Count=1; ClrInstanceID=10; TypeID_0=0x6a29ff04; TypeName_0=System.WeakReference; 
 EVENT 717.746: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_UNREGISTER PID=20484; TID=14784; PName=PerfView; ProceNum=1; DataLen=16; ProviderName=e13b77a8-14b6-11de-8...; 
-EVENT 717.884: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=20484; TID=14784; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 717.884: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=20484; TID=14784; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 718.467: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=20484; TID=14784; PName=PerfView; ProceNum=0; DataLen=6; Count=62; ClrInstanceID=10; 
 EVENT 718.680: Microsoft-Windows-DotNETRuntime/AppDomainResourceManagement/ThreadCreated PID=20484; TID=10760; PName=PerfView; ProceNum=3; DataLen=30; ManagedThreadID=21,198,064; AppDomainID=20,472,728; Flags=0; ManagedThreadIndex=9; OSThreadID=10,760; ClrInstanceID=10; 
 EVENT 718.876: Windows Kernel/Thread/Stop PID=20484; TID=14784; PName=PerfView; ProceNum=1; DataLen=72; StackBase=0xffffd00020ce2000; StackLimit=0xffffd00020cdc000; UserStackBase=0x05120000; UserStackLimit=0x05111000; StartAddr=0x0000000f; Win32StartAddr=0x73a5ec70; TebBase=0x0106e000; SubProcessTag=0; BasePriority=10; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=-1; ParentProcessID=-1; 
@@ -534,7 +534,7 @@ EVENT 1,117.553: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=5920; TI
 EVENT 1,117.554: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=5920; TID=24244; PName=test; ProceNum=3; DataLen=6; Count=0; ClrInstanceID=10; 
 EVENT 1,117.642: Microsoft-Windows-DotNETRuntime/GC/BulkSurvivingObjectRanges PID=5920; TID=24420; PName=test; ProceNum=3; DataLen=58; Index=0; Count=4; ClrInstanceID=10; 
 EVENT 1,117.656: Microsoft-Windows-DotNETRuntime/GC/BulkSurvivingObjectRanges PID=5920; TID=24420; PName=test; ProceNum=3; DataLen=166; Index=0; Count=13; ClrInstanceID=10; 
-EVENT 1,121.635: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=5920; TID=24420; PName=test; ProceNum=2; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 1,121.635: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=5920; TID=24420; PName=test; ProceNum=2; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 1,160.491: Windows Kernel/UdpIp/RecvIPV6 PID=96; TID=-1; PName=svchost; ProceNum=1; DataLen=56; size=75; dport=3,389; sport=62,385; seqnum=0; connid=0x00000000; 
 EVENT 1,164.360: Microsoft-Windows-DotNETRuntime/ThreadPoolWorkerThread/Stop PID=7056; TID=8244; PName=VsHub; ProceNum=0; DataLen=10; ActiveWorkerThreadCount=2; RetiredWorkerThreadCount=0; ClrInstanceID=10; 
 EVENT 1,165.707: Microsoft-Windows-DotNETRuntime/ThreadPoolWorkerThread/Stop PID=7056; TID=14724; PName=VsHub; ProceNum=2; DataLen=10; ActiveWorkerThreadCount=1; RetiredWorkerThreadCount=0; ClrInstanceID=10; 
@@ -709,7 +709,7 @@ EVENT 2,791.819: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=24464; TI
 EVENT 2,791.838: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24464; TID=13020; PName=PerfView; ProceNum=2; DataLen=460; ModuleID=1,798,770,688; AssemblyID=19,480,992; AppDomainID=19,252,288; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
 EVENT 2,791.845: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=24464; TID=13020; PName=PerfView; ProceNum=2; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
 EVENT 2,792.097: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24464; TID=13020; PName=PerfView; ProceNum=1; DataLen=420; ModuleID=1,806,307,328; AssemblyID=19,484,504; AppDomainID=19,252,288; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
-EVENT 2,805.583: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=24464; TID=13020; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 2,805.583: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=24464; TID=13020; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 2,813.894: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=24464; TID=13020; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 2,814.712: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=24464; TID=13020; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 2,814.713: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=24464; TID=13020; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
@@ -735,7 +735,7 @@ EVENT 3,204.219: System.Threading.Tasks.TplEventSource/TaskScheduled/Send PID=61
 EVENT 3,204.741: System.Diagnostics.Eventing.FrameworkEventSource/ThreadPoolDequeueWork PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=8; workID=108,642,980; 
 EVENT 3,204.747: System.Threading.Tasks.TplEventSource/TaskExecute/Start PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=12; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=664; 
 EVENT 3,208.560: System.Threading.Tasks.TplEventSource/TaskExecute/Stop PID=6160; TID=15468; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=0; DataLen=16; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=661; IsExceptional=False; 
-EVENT 3,209.260: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 3,209.260: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 3,209.273: Microsoft-Windows-DotNETRuntime/Thread/Creating PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=6; ID=0x260b80d0; ClrInstanceID=10; 
 EVENT 3,209.794: Microsoft-Windows-DotNETRuntime/Thread/Running PID=6160; TID=13800; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=6; ID=0x260b80d0; ClrInstanceID=10; 
 EVENT 3,224.952: System.Diagnostics.Eventing.FrameworkEventSource/GetResponse/Start PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=144; id=9,223,372,032,620,40...; uri=https://az667904.vo....; success=True; synchronous=False; 
@@ -762,7 +762,7 @@ EVENT 3,231.686: System.Threading.Tasks.TplEventSource/TaskWaitContinuationCompl
 EVENT 3,231.692: System.Threading.Tasks.TplEventSource/TaskWaitContinuationComplete PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=2; DataLen=4; TaskID=670; 
 EVENT 3,231.696: System.Threading.Tasks.TplEventSource/TaskWaitContinuationComplete PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=2; DataLen=4; TaskID=669; 
 EVENT 3,231.713: System.Threading.Tasks.TplEventSource/TaskExecute/Stop PID=6160; TID=10684; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=2; DataLen=16; OriginatingTaskSchedulerID=1; OriginatingTaskID=0; TaskID=664; IsExceptional=False; 
-EVENT 3,231.793: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=6160; TID=21512; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 3,231.793: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=6160; TID=21512; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 3,231.873: Microsoft-Windows-DotNETRuntime/ThreadPool/IOPack PID=6160; TID=21512; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=10; NativeOverlapped=0x06f211d8; Overlapped=0x06f211b0; ClrInstanceID=10; 
 EVENT 3,232.045: Microsoft-Windows-DotNETRuntime/IOThreadCreation/Start PID=6160; TID=15552; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=3; DataLen=10; IOThreadCount=4; RetiredIOThreads=0; ClrInstanceID=10; 
 EVENT 3,232.083: System.Diagnostics.Eventing.FrameworkEventSource/ThreadPoolEnqueueWork PID=6160; TID=21512; PName=Microsoft.VsHub.Server.HttpHost; ProceNum=0; DataLen=8; workID=245,404,228; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/netcore.3.1.x64.twocontainers.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/netcore.3.1.x64.twocontainers.baseline.txt
index e54395112..046d6946b 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/netcore.3.1.x64.twocontainers.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/netcore.3.1.x64.twocontainers.baseline.txt
@@ -141,41 +141,41 @@ EVENT 736.479: KernelTraceControl/MetaData/EventInfo PID=9728; TID=9088; PName=P
 EVENT 736.479: PerfView/PerfViewLog PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=104; message=Turning on more CLR ...; 
 EVENT 736.687: KernelTraceControl/MetaData/EventInfo PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=1012; 
 EVENT 736.687: KernelTraceControl/MetaData/EventMapInfo PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=230; 
-EVENT 736.687: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=48; providerName=DotNet; providerGuid=319dc449-ada5-50f7-4...; level=Verbose; keywords=-1; stacks=1; values=; 
+EVENT 736.687: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=48; providerName=DotNet; providerGuid=319dc449-ada5-50f7-4...; level=Verbose; keywords=0xffffffffffffffff; stacks=1; values=; 
 EVENT 736.749: PerfView/PerfViewLog PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=252; message=Enabling Provider:Do...; 
-EVENT 737.902: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=110; providerName=Microsoft-Windows-Ke...; providerGuid=b675ec37-bdb6-4648-b...; level=Verbose; keywords=112; stacks=1; values=; 
+EVENT 737.902: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=110; providerName=Microsoft-Windows-Ke...; providerGuid=b675ec37-bdb6-4648-b...; level=Verbose; keywords=0x00000070; stacks=1; values=; 
 EVENT 737.942: PerfView/PerfViewLog PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=286; message=Enabling Provider:Mi...; 
-EVENT 738.106: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=69; ProviderName=b675ec37-bdb6-4648-b...; SessionName=PerfViewSession; MatchAnyKeyword=-9,223,372,036,854,7...; MatchAllKeyword=0; EnableProperty=3,141; Level=255; 
-EVENT 738.196: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=94; providerName=Microsoft-Windows-Ke...; providerGuid=edd08927-9cc4-4e65-b...; level=Verbose; keywords=128; stacks=1; values=; 
+EVENT 738.106: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=69; ProviderName=b675ec37-bdb6-4648-b...; SessionName=PerfViewSession; MatchAnyKeyword=0x8000000000000070; MatchAllKeyword=0x00000000; EnableProperty=3,141; Level=255; 
+EVENT 738.196: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=94; providerName=Microsoft-Windows-Ke...; providerGuid=edd08927-9cc4-4e65-b...; level=Verbose; keywords=0x00000080; stacks=1; values=; 
 EVENT 738.235: PerfView/PerfViewLog PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=270; message=Enabling Provider:Mi...; 
-EVENT 738.439: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=edd08927-9cc4-4e65-b...; SessionName=PerfViewSession; MatchAnyKeyword=128; MatchAllKeyword=0; EnableProperty=3,140; Level=5; 
-EVENT 739.371: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=100; providerName=Microsoft-Windows-Ke...; providerGuid=22fb2cd6-0e7b-422b-a...; level=Informational; keywords=16; stacks=1; values=; 
+EVENT 738.439: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=edd08927-9cc4-4e65-b...; SessionName=PerfViewSession; MatchAnyKeyword=0x00000080; MatchAllKeyword=0x00000000; EnableProperty=3,140; Level=5; 
+EVENT 739.371: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=100; providerName=Microsoft-Windows-Ke...; providerGuid=22fb2cd6-0e7b-422b-a...; level=Informational; keywords=0x00000010; stacks=1; values=; 
 EVENT 739.397: PerfView/PerfViewLog PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=288; message=Enabling Provider:Mi...; 
-EVENT 739.503: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=22fb2cd6-0e7b-422b-a...; SessionName=PerfViewSession; MatchAnyKeyword=2,064; MatchAllKeyword=0; EnableProperty=4,037; Level=4; 
-EVENT 739.664: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=50; providerName=ASP.NET; providerGuid=aff081fe-0247-4275-9...; level=Verbose; keywords=-3; stacks=0; values=; 
+EVENT 739.503: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=22fb2cd6-0e7b-422b-a...; SessionName=PerfViewSession; MatchAnyKeyword=0x00000810; MatchAllKeyword=0x00000000; EnableProperty=4,037; Level=4; 
+EVENT 739.664: PerfView/ProviderEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=50; providerName=ASP.NET; providerGuid=aff081fe-0247-4275-9...; level=Verbose; keywords=0xfffffffffffffffd; stacks=0; values=; 
 EVENT 740.646: Microsoft-Windows-Kernel-File/Create PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=154; IrpPtr=0xffffb2037822b548; FileObject=0xffffb20361dfa340; CreateOptions=2097152; CreateDisposition=OPEN_EXISTING; FileAttributes=0; ShareAccess=ReadWrite, Delete; FileName=C:\windows\SysWOW64\...; 
-EVENT 742.197: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=43d1a55c-76d6-4f7e-9...; SessionName=PerfViewSession; MatchAnyKeyword=2; MatchAllKeyword=0; EnableProperty=3,136; Level=5; 
-EVENT 742.348: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=c651f5f6-1c0d-492e-8...; SessionName=PerfViewSession; MatchAnyKeyword=-1; MatchAllKeyword=0; EnableProperty=3,137; Level=255; 
+EVENT 742.197: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=43d1a55c-76d6-4f7e-9...; SessionName=PerfViewSession; MatchAnyKeyword=0x00000002; MatchAllKeyword=0x00000000; EnableProperty=3,136; Level=5; 
+EVENT 742.348: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=69; ProviderName=c651f5f6-1c0d-492e-8...; SessionName=PerfViewSession; MatchAnyKeyword=0xffffffffffffffff; MatchAllKeyword=0x00000000; EnableProperty=3,137; Level=255; 
 EVENT 745.577: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=9728; TID=9992; PName=PerfView; ProceNum=0; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=9; 
 EVENT 747.806: Windows Kernel/TcpIp/Recv PID=1136; TID=-1; PName=svchost; ProceNum=0; DataLen=28; daddr=167.220.2.117; saddr=10.0.0.4; dport=22,251; sport=3,389; size=61; connid=0x2000000000; seqnum=32; 
 EVENT 751.768: System.Threading.Tasks.TplEventSource/ManifestData PID=9728; TID=9992; PName=PerfView; ProceNum=1; DataLen=22039; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=22039; 
 EVENT 758.847: System.Diagnostics.Eventing.FrameworkEventSource/ManifestData PID=9728; TID=9476; PName=PerfView; ProceNum=1; DataLen=23708; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=23708; 
-EVENT 761.680: PerfView/ClrEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=16; keywords=89,142,578,365; level=Verbose; 
-EVENT 764.306: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=5; 
-EVENT 764.310: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0; largeSurfacesInUseAllocated=0; largeSurfacesInUseActual=0; largeSurfacesPeakInUseActual=0; largeSurfacesAllowed=0; poolsTotalAllocated=0; poolsInUseAllocated=0; poolsInUseActual=0; poolsPeakInUseActual=0; poolsAllowed=0; largeSurfacesPendingRelease=0; poolsPendingRelease=0; largeSurfacesMaxStructuralWaste=0; poolsMaxStructuralWaste=0; 
-EVENT 764.311: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=5; 
-EVENT 764.314: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=20; DeviceId=1,906,473,652,064; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
+EVENT 761.680: PerfView/ClrEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=16; keywords=0x14c14fccbd; level=Verbose; 
+EVENT 764.306: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=0x00000005; 
+EVENT 764.310: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0x00000000; largeSurfacesInUseAllocated=0x00000000; largeSurfacesInUseActual=0x00000000; largeSurfacesPeakInUseActual=0x00000000; largeSurfacesAllowed=0x00000000; poolsTotalAllocated=0x00000000; poolsInUseAllocated=0x00000000; poolsInUseActual=0x00000000; poolsPeakInUseActual=0x00000000; poolsAllowed=0x00000000; largeSurfacesPendingRelease=0x00000000; poolsPendingRelease=0x00000000; largeSurfacesMaxStructuralWaste=0x00000000; poolsMaxStructuralWaste=0x00000000; 
+EVENT 764.311: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=0x00000005; 
+EVENT 764.314: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=20; DeviceId=0x1bbe2af4f60; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
 EVENT 770.429: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=10120; TID=5476; PName=PerfView; ProceNum=1; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=9; 
 EVENT 773.515: System.Threading.Tasks.TplEventSource/ManifestData PID=10120; TID=5476; PName=PerfView; ProceNum=1; DataLen=22039; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=22039; 
 EVENT 777.590: System.Diagnostics.Eventing.FrameworkEventSource/ManifestData PID=10120; TID=5476; PName=PerfView; ProceNum=1; DataLen=23708; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=23708; 
 EVENT 777.771: Microsoft-JScript/MethodRundown/DCStartInit PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=0; 
 EVENT 777.775: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=8; ScriptContextID=0x1aa1f2fc2a0; 
 EVENT 777.785: KernelTraceControl/MetaData/EventMapInfo PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=408; 
-EVENT 777.785: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=72; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540fc0; MethodSize=8; MethodID=1; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=-1; Line=1; Column=1; MethodName=Global code; 
-EVENT 777.788: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=86; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540ee8; MethodSize=8; MethodID=58; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=-1; Line=1; Column=5,993; MethodName=Anonymous function; 
-EVENT 777.791: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=86; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540ed8; MethodSize=8; MethodID=59; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=-1; Line=1; Column=6,126; MethodName=Anonymous function; 
-EVENT 777.792: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=66; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540f48; MethodSize=8; MethodID=2; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=-1; Line=1; Column=29; MethodName=TimeSpan; 
-EVENT 777.794: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=98; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540f40; MethodSize=8; MethodID=3; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=-1; Line=1; Column=57; MethodName=TimeSpan.prototype.t...; 
+EVENT 777.785: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=72; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540fc0; MethodSize=0x00000008; MethodID=1; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0xffffffffffffffff; Line=1; Column=1; MethodName=Global code; 
+EVENT 777.788: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=86; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540ee8; MethodSize=0x00000008; MethodID=58; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0xffffffffffffffff; Line=1; Column=5,993; MethodName=Anonymous function; 
+EVENT 777.791: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=86; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540ed8; MethodSize=0x00000008; MethodID=59; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0xffffffffffffffff; Line=1; Column=6,126; MethodName=Anonymous function; 
+EVENT 777.792: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=66; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540f48; MethodSize=0x00000008; MethodID=2; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0xffffffffffffffff; Line=1; Column=29; MethodName=TimeSpan; 
+EVENT 777.794: Microsoft-JScript/MethodRundown/MethodDCStart PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=98; ScriptContextID=0x1aa1f2fc2a0; MethodStartAddress=0x1b21f540f40; MethodSize=0x00000008; MethodID=3; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0xffffffffffffffff; Line=1; Column=57; MethodName=TimeSpan.prototype.t...; 
 EVENT 777.953: Microsoft-JScript/MethodRundown/DCStartComplete PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=0; 
 EVENT 777.954: Microsoft-JScript/MethodRundown/DCEndInit PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=0; 
 EVENT 777.955: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=6848; TID=7292; PName=smartscreen; ProceNum=1; DataLen=8; ScriptContextID=0x1aa1f2fc2a0; 
@@ -192,10 +192,10 @@ EVENT 780.924: System.Threading.Tasks.TplEventSource/ManifestData PID=4864; TID=
 EVENT 807.279: KernelTraceControl/MetaData/EventMapInfo PID=9048; TID=7048; PName=svchost; ProceNum=0; DataLen=116; 
 EVENT 807.279: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=9048; TID=7048; PName=svchost; ProceNum=0; DataLen=75; Interface=vEthernet (Ethernet)...; TotalServerCount=2; Index=1; DynamicAddress=static; Address=172.23.112.1:0; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
 EVENT 807.281: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=9048; TID=7048; PName=svchost; ProceNum=0; DataLen=75; Interface=vEthernet (Ethernet)...; TotalServerCount=2; Index=2; DynamicAddress=static; Address=168.63.129.16:0; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
-EVENT 811.406: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=5; 
-EVENT 811.410: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0; largeSurfacesInUseAllocated=0; largeSurfacesInUseActual=0; largeSurfacesPeakInUseActual=0; largeSurfacesAllowed=0; poolsTotalAllocated=0; poolsInUseAllocated=0; poolsInUseActual=0; poolsPeakInUseActual=0; poolsAllowed=0; largeSurfacesPendingRelease=0; poolsPendingRelease=0; largeSurfacesMaxStructuralWaste=0; poolsMaxStructuralWaste=0; 
-EVENT 811.412: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=5; 
-EVENT 811.414: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=20; DeviceId=1,906,473,652,064; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
+EVENT 811.406: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=0x00000005; 
+EVENT 811.410: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0x00000000; largeSurfacesInUseAllocated=0x00000000; largeSurfacesInUseActual=0x00000000; largeSurfacesPeakInUseActual=0x00000000; largeSurfacesAllowed=0x00000000; poolsTotalAllocated=0x00000000; poolsInUseAllocated=0x00000000; poolsInUseActual=0x00000000; poolsPeakInUseActual=0x00000000; poolsAllowed=0x00000000; largeSurfacesPendingRelease=0x00000000; poolsPendingRelease=0x00000000; largeSurfacesMaxStructuralWaste=0x00000000; poolsMaxStructuralWaste=0x00000000; 
+EVENT 811.412: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=8; Id=0x00000005; 
+EVENT 811.414: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=1; DataLen=20; DeviceId=0x1bbe2af4f60; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
 EVENT 817.938: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=8308; TID=5448; PName=svchost; ProceNum=1; DataLen=75; Interface=vEthernet (Ethernet)...; TotalServerCount=2; Index=1; DynamicAddress=static; Address=172.23.112.1:0; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
 EVENT 817.941: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=8308; TID=5448; PName=svchost; ProceNum=1; DataLen=75; Interface=vEthernet (Ethernet)...; TotalServerCount=2; Index=2; DynamicAddress=static; Address=168.63.129.16:0; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
 EVENT 826.277: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=1912; TID=10056; PName=svchost; ProceNum=1; DataLen=155; Interface=vEthernet (Microsoft...; TotalServerCount=1; Index=1; DynamicAddress=dynamic; Address=168.63.129.16:0; 
@@ -217,24 +217,24 @@ EVENT 848.494: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=9728; TID=
 EVENT 848.574: Microsoft-Windows-Kernel-File/Create PID=7088; TID=8180; PName=com.docker.backend; ProceNum=0; DataLen=76; IrpPtr=0xffffb20377f440f8; FileObject=0xffffb20366791840; CreateOptions=FILE_ATTRIBUTE_ARCHI...; CreateDisposition=OPEN_EXISTING; FileAttributes=Normal; ShareAccess=ReadWrite; FileName=\Device\Harddisk0\DR...; 
 EVENT 848.631: Microsoft-Windows-DotNETRuntime/Method/JittingStarted PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=132; MethodID=144,568,192; ModuleID=38,289,452; MethodToken=0; MethodILSize=0; MethodNamespace=dynamicClass; MethodName=IL_STUB_PInvoke; MethodSignature=int32  (unsigned int...; ClrInstanceID=9; 
 EVENT 848.747: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=144; MethodID=144,568,192; ModuleID=38,289,452; MethodStartAddress=0x0a607250; MethodSize=143; MethodToken=0; MethodFlags=Dynamic, Jitted; MethodNamespace=dynamicClass; MethodName=IL_STUB_PInvoke; MethodSignature=int32  (unsigned int...; ClrInstanceID=9; ReJITID=0; OptimizationTier=Unknown; 
-EVENT 854.723: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=5; 
-EVENT 854.728: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0; largeSurfacesInUseAllocated=0; largeSurfacesInUseActual=0; largeSurfacesPeakInUseActual=0; largeSurfacesAllowed=0; poolsTotalAllocated=0; poolsInUseAllocated=0; poolsInUseActual=0; poolsPeakInUseActual=0; poolsAllowed=0; largeSurfacesPendingRelease=0; poolsPendingRelease=0; largeSurfacesMaxStructuralWaste=0; poolsMaxStructuralWaste=0; 
-EVENT 854.730: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=5; 
-EVENT 854.731: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=20; DeviceId=1,906,473,652,064; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
-EVENT 872.482: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=5; 
-EVENT 872.486: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0; largeSurfacesInUseAllocated=0; largeSurfacesInUseActual=0; largeSurfacesPeakInUseActual=0; largeSurfacesAllowed=0; poolsTotalAllocated=0; poolsInUseAllocated=0; poolsInUseActual=0; poolsPeakInUseActual=0; poolsAllowed=0; largeSurfacesPendingRelease=0; poolsPendingRelease=0; largeSurfacesMaxStructuralWaste=0; poolsMaxStructuralWaste=0; 
-EVENT 872.487: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=5; 
-EVENT 872.489: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=20; DeviceId=1,906,473,652,064; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
-EVENT 917.401: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=5; 
-EVENT 917.405: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0; largeSurfacesInUseAllocated=0; largeSurfacesInUseActual=0; largeSurfacesPeakInUseActual=0; largeSurfacesAllowed=0; poolsTotalAllocated=0; poolsInUseAllocated=0; poolsInUseActual=0; poolsPeakInUseActual=0; poolsAllowed=0; largeSurfacesPendingRelease=0; poolsPendingRelease=0; largeSurfacesMaxStructuralWaste=0; poolsMaxStructuralWaste=0; 
-EVENT 917.406: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=5; 
-EVENT 917.408: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=20; DeviceId=1,906,473,652,064; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
-EVENT 974.670: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=750; ClrInstanceID=9; 
-EVENT 979.789: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=750; ClrInstanceID=9; 
-EVENT 981.798: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=750; ClrInstanceID=9; 
+EVENT 854.723: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=0x00000005; 
+EVENT 854.728: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0x00000000; largeSurfacesInUseAllocated=0x00000000; largeSurfacesInUseActual=0x00000000; largeSurfacesPeakInUseActual=0x00000000; largeSurfacesAllowed=0x00000000; poolsTotalAllocated=0x00000000; poolsInUseAllocated=0x00000000; poolsInUseActual=0x00000000; poolsPeakInUseActual=0x00000000; poolsAllowed=0x00000000; largeSurfacesPendingRelease=0x00000000; poolsPendingRelease=0x00000000; largeSurfacesMaxStructuralWaste=0x00000000; poolsMaxStructuralWaste=0x00000000; 
+EVENT 854.730: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=0x00000005; 
+EVENT 854.731: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=20; DeviceId=0x1bbe2af4f60; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
+EVENT 872.482: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=0x00000005; 
+EVENT 872.486: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0x00000000; largeSurfacesInUseAllocated=0x00000000; largeSurfacesInUseActual=0x00000000; largeSurfacesPeakInUseActual=0x00000000; largeSurfacesAllowed=0x00000000; poolsTotalAllocated=0x00000000; poolsInUseAllocated=0x00000000; poolsInUseActual=0x00000000; poolsPeakInUseActual=0x00000000; poolsAllowed=0x00000000; largeSurfacesPendingRelease=0x00000000; poolsPendingRelease=0x00000000; largeSurfacesMaxStructuralWaste=0x00000000; poolsMaxStructuralWaste=0x00000000; 
+EVENT 872.487: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=0x00000005; 
+EVENT 872.489: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=20; DeviceId=0x1bbe2af4f60; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
+EVENT 917.401: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Start PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=0x00000005; 
+EVENT 917.405: Microsoft-Windows-DirectComposition/CAP_ALLOCATION_STATS PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=120; ChannelHandle=5; LastCommittedBatchId=1,161; largeSurfacesTotalAllocated=0x00000000; largeSurfacesInUseAllocated=0x00000000; largeSurfacesInUseActual=0x00000000; largeSurfacesPeakInUseActual=0x00000000; largeSurfacesAllowed=0x00000000; poolsTotalAllocated=0x00000000; poolsInUseAllocated=0x00000000; poolsInUseActual=0x00000000; poolsPeakInUseActual=0x00000000; poolsAllowed=0x00000000; largeSurfacesPendingRelease=0x00000000; poolsPendingRelease=0x00000000; largeSurfacesMaxStructuralWaste=0x00000000; poolsMaxStructuralWaste=0x00000000; 
+EVENT 917.406: Microsoft-Windows-DirectComposition/CAP_MAXIMUM/Stop PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=8; Id=0x00000005; 
+EVENT 917.408: Microsoft-Windows-DirectComposition/DEVICE_COMMIT PID=2028; TID=3472; PName=dwm; ProceNum=0; DataLen=20; DeviceId=0x1bbe2af4f60; ChannelHandle=5; LastCommittedBatchId=1,161; LastConfirmedBatchId=1,161; 
+EVENT 974.670: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=0x000002ee; ClrInstanceID=9; 
+EVENT 979.789: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=10; BytesAllocated=0x000002ee; ClrInstanceID=9; 
+EVENT 981.798: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=0x000002ee; ClrInstanceID=9; 
 EVENT 982.185: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=136; AllocationAmount=106,916; AllocationKind=Small; ClrInstanceID=9; AllocationAmount64=106,916; TypeID=0x6dcfc3e0; TypeName=System.Windows.Threa...; HeapIndex=0; Address=0x045bbfe0; ObjectSize=0; 
-EVENT 982.293: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=750; ClrInstanceID=9; 
-EVENT 982.642: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=750; ClrInstanceID=9; 
+EVENT 982.293: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=0x000002ee; ClrInstanceID=9; 
+EVENT 982.642: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=10; BytesAllocated=0x000002ee; ClrInstanceID=9; 
 EVENT 990.016: System.Threading.Tasks.TplEventSource/TraceOperation/Stop PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=8; TaskID=130; Status=Canceled; 
 EVENT 991.039: System.Threading.Tasks.TplEventSource/TraceOperation/Stop PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=8; TaskID=132; Status=Canceled; 
 EVENT 1,092.640: System.Threading.Tasks.TplEventSource/TraceOperation/Stop PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=8; TaskID=138; Status=Canceled; 
@@ -258,7 +258,7 @@ EVENT 1,912.410: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPC
 EVENT 1,912.432: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=8584; TID=2724; PName=cscript; ProceNum=0; DataLen=16; ProviderName=305fc87b-002a-5e26-d...; 
 EVENT 1,912.454: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=8584; TID=2724; PName=cscript; ProceNum=0; DataLen=16; ProviderName=901d2afa-4ff6-46d7-8...; 
 EVENT 1,914.322: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=98; AllocationAmount=106,800; AllocationKind=Small; ClrInstanceID=9; AllocationAmount64=106,800; TypeID=0x6fd25460; TypeName=System.Threading.Exe...; HeapIndex=0; Address=0x045efff4; ObjectSize=0; 
-EVENT 1,915.901: Microsoft-Windows-Kernel-Process/ProcessStart/Start PID=8584; TID=2724; PName=cscript; ProceNum=0; DataLen=142; ProcessID=9,956; CreateTime=20/09/02 18:52:53.00...; ParentProcessID=8,584; SessionID=0; Flags=0; ImageName=\Device\HarddiskVolu...; ImageChecksum=885,928; TimeDateStamp=-1,400,355,427; PackageFullName=; PackageRelativeAppId=; 
+EVENT 1,915.901: Microsoft-Windows-Kernel-Process/ProcessStart/Start PID=8584; TID=2724; PName=cscript; ProceNum=0; DataLen=142; ProcessID=9,956; CreateTime=20/09/02 18:52:53.00...; ParentProcessID=8,584; SessionID=0; Flags=0; ImageName=\Device\HarddiskVolu...; ImageChecksum=885,928; TimeDateStamp=2,894,611,869; PackageFullName=; PackageRelativeAppId=; 
 EVENT 1,915.902: Windows Kernel/Process/Start PID=9956; TID=-1; PName=conhost; ProceNum=0; DataLen=192; ProcessID=9,956; ParentID=8,584; ImageFileName=conhost.exe; PageDirectoryBase=0x1700b5000; Flags=None; SessionID=0; ExitStatus=259; UniqueProcessKey=0xffffb2038f0bf080; CommandLine=\??\C:\windows\syste...; PackageFullName=; ApplicationID=; 
 EVENT 1,918.800: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=9956; TID=680; PName=conhost; ProceNum=0; DataLen=16; ProviderName=3595ab5c-042a-4c8e-b...; 
 EVENT 1,918.830: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=9956; TID=680; PName=conhost; ProceNum=0; DataLen=16; ProviderName=305fc87b-002a-5e26-d...; 
@@ -281,10 +281,10 @@ EVENT 2,059.285: Windows Kernel/Image/Unload PID=8584; TID=-1; PName=cscript; Pr
 EVENT 2,060.430: Windows Kernel/TcpIp/Recv PID=1136; TID=-1; PName=svchost; ProceNum=0; DataLen=28; daddr=167.220.2.117; saddr=10.0.0.4; dport=22,251; sport=3,389; size=38; connid=0x5c00000000; seqnum=92; 
 EVENT 2,064.691: Windows Kernel/Thread/Stop PID=8584; TID=2724; PName=cscript; ProceNum=1; DataLen=74; StackBase=0xffffd78f0caf0000; StackLimit=0xffffd78f0cae9000; UserStackBase=0x8e6f1a0000; UserStackLimit=0x8e6f18d000; StartAddr=0x00000003; Win32StartAddr=0x7ff74e9625c0; TebBase=0x8e6f391000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=-1; ParentProcessID=-1; 
 EVENT 2,066.462: Windows Kernel/Process/PerfCtr PID=8584; TID=-1; PName=cscript; ProceNum=1; DataLen=104; ProcessID=8,584; MemoryCount=0; HandleCount=0; PeakVirtualSize=2,203,446,091,776; PeakWorkingSetSize=14,319,616; PeakPagefileUsage=3,313,664; QuotaPeakPagedPoolUsage=199,664; QuotaPeakNonPagedPoolUsage=16,248; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 2,066.476: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=8584; TID=8176; PName=cscript; ProceNum=1; DataLen=88; ProcessID=8,584; CreateTime=20/09/02 18:52:52.99...; ExitTime=20/09/02 18:52:53.15...; ExitCode=0; TokenElevationType=1; HandleCount=197; CommitCharge=2,555,904; CommitPeak=3,313,664; CPUCycleCount=214,369,214; ReadOperationCount=98; WriteOperationCount=3; ReadTransferKiloBytes=11; WriteTransferKiloBytes=0; HardFaultCount=5; ImageName=cscript.exe; 
+EVENT 2,066.476: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=8584; TID=8176; PName=cscript; ProceNum=1; DataLen=88; ProcessID=8,584; CreateTime=20/09/02 18:52:52.99...; ExitTime=20/09/02 18:52:53.15...; ExitCode=0; TokenElevationType=1; HandleCount=197; CommitCharge=0x00270000; CommitPeak=0x00329000; CPUCycleCount=0x0cc703be; ReadOperationCount=98; WriteOperationCount=3; ReadTransferKiloBytes=11; WriteTransferKiloBytes=0; HardFaultCount=5; ImageName=cscript.exe; 
 EVENT 2,066.477: Windows Kernel/Process/Stop PID=8584; TID=-1; PName=cscript; ProceNum=1; DataLen=228; ProcessID=8,584; ParentID=4,864; ImageFileName=cscript.exe; PageDirectoryBase=0x1448cd000; Flags=None; SessionID=0; ExitStatus=0; UniqueProcessKey=0xffffb2038f0c1080; CommandLine="C:\windows\system32...; PackageFullName=; ApplicationID=; 
 EVENT 2,068.834: Windows Kernel/Process/PerfCtr PID=9956; TID=-1; PName=conhost; ProceNum=0; DataLen=104; ProcessID=9,956; MemoryCount=0; HandleCount=0; PeakVirtualSize=2,203,432,169,472; PeakWorkingSetSize=13,737,984; PeakPagefileUsage=6,815,744; QuotaPeakPagedPoolUsage=141,856; QuotaPeakNonPagedPoolUsage=9,504; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 2,068.847: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=9956; TID=8532; PName=conhost; ProceNum=0; DataLen=88; ProcessID=9,956; CreateTime=20/09/02 18:52:53.00...; ExitTime=20/09/02 18:52:53.16...; ExitCode=0; TokenElevationType=1; HandleCount=142; CommitCharge=6,807,552; CommitPeak=6,815,744; CPUCycleCount=97,608,782; ReadOperationCount=0; WriteOperationCount=0; ReadTransferKiloBytes=0; WriteTransferKiloBytes=0; HardFaultCount=0; ImageName=conhost.exe; 
+EVENT 2,068.847: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=9956; TID=8532; PName=conhost; ProceNum=0; DataLen=88; ProcessID=9,956; CreateTime=20/09/02 18:52:53.00...; ExitTime=20/09/02 18:52:53.16...; ExitCode=0; TokenElevationType=1; HandleCount=142; CommitCharge=0x0067e000; CommitPeak=0x00680000; CPUCycleCount=0x05d1644e; ReadOperationCount=0; WriteOperationCount=0; ReadTransferKiloBytes=0; WriteTransferKiloBytes=0; HardFaultCount=0; ImageName=conhost.exe; 
 EVENT 2,068.848: Windows Kernel/Process/Stop PID=9956; TID=-1; PName=conhost; ProceNum=0; DataLen=160; ProcessID=9,956; ParentID=8,584; ImageFileName=conhost.exe; PageDirectoryBase=0x1700b5000; Flags=None; SessionID=0; ExitStatus=0; UniqueProcessKey=0xffffb2038f0bf080; CommandLine=\??\C:\windows\syste...; PackageFullName=; ApplicationID=; 
 EVENT 2,075.711: Windows Kernel/DiskIO/FlushInit PID=3008; TID=9644; PName=HealthService; ProceNum=1; DataLen=12; Irp=0xffffb2037805c010; 
 EVENT 2,088.733: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=130220; PName=; ProceNum=1; DataLen=28; DiskNumber=0; IrpFlags=SynchronousApi; Irp=0xffffb2037805c010; ElapsedTimeMSec=13.022; 
@@ -294,22 +294,22 @@ EVENT 2,334.776: Windows Kernel/DiskIO/FlushInit PID=4; TID=9920; PName=System;
 EVENT 2,337.779: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=26345; PName=; ProceNum=0; DataLen=28; DiskNumber=0; IrpFlags=Nocache, Write; Irp=0xffffb203632975c0; ElapsedTimeMSec=2.635; 
 EVENT 2,498.320: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=56; AllocationAmount=107,012; AllocationKind=Small; ClrInstanceID=9; AllocationAmount64=107,012; TypeID=0x6fd63e40; TypeName=System.Int64; HeapIndex=0; Address=0x04609fdc; ObjectSize=0; 
 EVENT 2,533.332: Windows Kernel/TcpIp/Recv PID=1136; TID=-1; PName=svchost; ProceNum=0; DataLen=28; daddr=167.220.2.117; saddr=10.0.0.4; dport=22,251; sport=3,389; size=38; connid=0x2000000000; seqnum=32; 
-EVENT 2,553.391: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=226,890,576; 
-EVENT 2,553.394: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=102,432,544; Width=704; Height=576; BitDepth=32; PercentUsed=16.16852; 
-EVENT 2,553.395: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=12; Y=0; Width=3; Height=3; EntryId=226,890,576; 
-EVENT 2,553.397: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=226,888,272; 
-EVENT 2,553.398: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=102,432,544; Width=704; Height=576; BitDepth=32; PercentUsed=16.1663; 
-EVENT 2,553.399: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=9; Y=0; Width=3; Height=3; EntryId=226,888,272; 
-EVENT 2,553.401: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=288,036,176; 
-EVENT 2,553.402: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=102,432,544; Width=704; Height=576; BitDepth=32; PercentUsed=13.22971; 
-EVENT 2,553.402: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=189; Y=55; Width=458; Height=26; EntryId=288,036,176; 
-EVENT 2,553.404: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=226,888,144; 
-EVENT 2,553.405: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=102,432,544; Width=704; Height=576; BitDepth=32; PercentUsed=11.319; 
-EVENT 2,553.406: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=360; Y=107; Width=298; Height=26; EntryId=226,888,144; 
-EVENT 2,553.407: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=226,889,424; 
-EVENT 2,553.407: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=102,432,544; Width=704; Height=576; BitDepth=32; PercentUsed=10.16488; 
-EVENT 2,553.408: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=180; Y=107; Width=180; Height=26; EntryId=226,889,424; 
-EVENT 2,553.491: Microsoft-Windows-DirectComposition/ATLAS_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=102,435,264; 
+EVENT 2,553.391: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x0d861350; 
+EVENT 2,553.394: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=0x061aff20; Width=704; Height=576; BitDepth=32; PercentUsed=16.16852; 
+EVENT 2,553.395: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=12; Y=0; Width=3; Height=3; EntryId=0x0d861350; 
+EVENT 2,553.397: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x0d860a50; 
+EVENT 2,553.398: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=0x061aff20; Width=704; Height=576; BitDepth=32; PercentUsed=16.1663; 
+EVENT 2,553.399: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=9; Y=0; Width=3; Height=3; EntryId=0x0d860a50; 
+EVENT 2,553.401: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x112b1550; 
+EVENT 2,553.402: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=0x061aff20; Width=704; Height=576; BitDepth=32; PercentUsed=13.22971; 
+EVENT 2,553.402: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=189; Y=55; Width=458; Height=26; EntryId=0x112b1550; 
+EVENT 2,553.404: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x0d8609d0; 
+EVENT 2,553.405: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=0x061aff20; Width=704; Height=576; BitDepth=32; PercentUsed=11.319; 
+EVENT 2,553.406: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=360; Y=107; Width=298; Height=26; EntryId=0x0d8609d0; 
+EVENT 2,553.407: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_AVAILABLE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x0d860ed0; 
+EVENT 2,553.407: Microsoft-Windows-DirectComposition/ATLAS_UTILIZATION PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=24; Id=0x061aff20; Width=704; Height=576; BitDepth=32; PercentUsed=10.16488; 
+EVENT 2,553.408: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=180; Y=107; Width=180; Height=26; EntryId=0x0d860ed0; 
+EVENT 2,553.491: Microsoft-Windows-DirectComposition/ATLAS_FREE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x061b09c0; 
 EVENT 2,553.528: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStart PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=10; Reason=SuspendForGC; Count=1; ClrInstanceID=9; 
 EVENT 2,553.540: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStop PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=9; 
 EVENT 2,553.545: Microsoft-Windows-DotNETRuntime/GC/Triggered PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=6; Reason=AllocSmall; ClrInstanceID=9; 
@@ -327,25 +327,25 @@ EVENT 2,561.527: Microsoft-Windows-DotNETRuntime/GC/PinObjectAtGCTime PID=9728;
 EVENT 2,561.530: Microsoft-Windows-DotNETRuntime/GC/PinObjectAtGCTime PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=134; HandleID=0x0246130c; ObjectID=0x03f28218; ObjectSize=12; TypeName=<CppImplementationDe...; ClrInstanceID=9; 
 EVENT 2,562.179: Microsoft-Windows-DotNETRuntime/GC/MarkWithType PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=18; HeapNum=0; ClrInstanceID=9; Type=2; Promoted=18,458; 
 EVENT 2,563.762: Microsoft-Windows-DotNETRuntime/GC/MarkWithType PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=18; HeapNum=0; ClrInstanceID=9; Type=3; Promoted=814,642; 
-EVENT 2,573.835: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=0; Y=0; Width=3; Height=3; EntryId=288,033,488; 
-EVENT 2,573.839: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=28; Id=288,033,488; Owner=290,402,640; UseType=3; XData=0; YData=0; 
-EVENT 2,573.842: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=290,402,640; left=0; top=0; right=1; bottom=1; 
+EVENT 2,573.835: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=0; Y=0; Width=3; Height=3; EntryId=0x112b0ad0; 
+EVENT 2,573.839: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=28; Id=0x112b0ad0; Owner=0x114f3150; UseType=3; XData=0; YData=0; 
+EVENT 2,573.842: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=0x114f3150; left=0; top=0; right=1; bottom=1; 
 EVENT 2,573.873: Microsoft-Windows-DotNETRuntime/GC/BulkMovedObjectRanges PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=65290; Index=0; Count=4,080; ClrInstanceID=9; 
 EVENT 2,574.294: Microsoft-Windows-DotNETRuntime/GC/BulkMovedObjectRanges PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=65290; Index=1; Count=4,080; ClrInstanceID=9; 
 EVENT 2,574.770: Microsoft-Windows-DotNETRuntime/GC/BulkMovedObjectRanges PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=65290; Index=2; Count=4,080; ClrInstanceID=9; 
 EVENT 2,574.810: Microsoft-Windows-DotNETRuntime/GC/BulkMovedObjectRanges PID=9728; TID=9584; PName=PerfView; ProceNum=0; DataLen=3706; Index=3; Count=231; ClrInstanceID=9; 
-EVENT 2,576.343: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; AtlasId=102,432,544; X=0; Y=3; Width=26; Height=26; EntryId=226,885,840; 
-EVENT 2,576.344: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=28; Id=226,885,840; Owner=289,543,648; UseType=3; XData=0; YData=0; 
-EVENT 2,576.440: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; AtlasId=102,432,544; X=26; Y=3; Width=354; Height=26; EntryId=226,886,864; 
-EVENT 2,576.441: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=28; Id=226,886,864; Owner=289,543,168; UseType=3; XData=0; YData=0; 
-EVENT 2,576.545: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=289,543,168; left=0; top=0; right=352; bottom=24; 
-EVENT 2,578.843: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=380; Y=3; Width=26; Height=26; EntryId=288,045,136; 
-EVENT 2,578.844: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=28; Id=288,045,136; Owner=290,399,184; UseType=3; XData=0; YData=0; 
-EVENT 2,578.898: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=102,432,544; X=406; Y=3; Width=236; Height=26; EntryId=288,037,456; 
-EVENT 2,578.899: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=28; Id=288,037,456; Owner=290,404,464; UseType=3; XData=0; YData=0; 
-EVENT 2,578.929: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=290,404,464; left=0; top=0; right=234; bottom=24; 
-EVENT 2,581.182: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=290,404,560; left=0; top=0; right=245; bottom=24; 
-EVENT 2,583.180: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=290,405,136; left=0; top=0; right=210; bottom=24; 
+EVENT 2,576.343: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; AtlasId=0x061aff20; X=0; Y=3; Width=26; Height=26; EntryId=0x0d8600d0; 
+EVENT 2,576.344: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=28; Id=0x0d8600d0; Owner=0x114215e0; UseType=3; XData=0; YData=0; 
+EVENT 2,576.440: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; AtlasId=0x061aff20; X=26; Y=3; Width=354; Height=26; EntryId=0x0d8604d0; 
+EVENT 2,576.441: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=28; Id=0x0d8604d0; Owner=0x11421400; UseType=3; XData=0; YData=0; 
+EVENT 2,576.545: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=0x11421400; left=0; top=0; right=352; bottom=24; 
+EVENT 2,578.843: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=380; Y=3; Width=26; Height=26; EntryId=0x112b3850; 
+EVENT 2,578.844: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=28; Id=0x112b3850; Owner=0x114f23d0; UseType=3; XData=0; YData=0; 
+EVENT 2,578.898: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; AtlasId=0x061aff20; X=406; Y=3; Width=236; Height=26; EntryId=0x112b1a50; 
+EVENT 2,578.899: Microsoft-Windows-DirectComposition/ATLAS_USE_INFO PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=28; Id=0x112b1a50; Owner=0x114f3870; UseType=3; XData=0; YData=0; 
+EVENT 2,578.929: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=0x114f3870; left=0; top=0; right=234; bottom=24; 
+EVENT 2,581.182: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=0x114f38d0; left=0; top=0; right=245; bottom=24; 
+EVENT 2,583.180: Microsoft-Windows-DirectComposition/BEGIN_DRAW/Start PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; channelHandle=19; resourceType=37; resourcePointer=0x114f3b10; left=0; top=0; right=210; bottom=24; 
 EVENT 2,601.320: Microsoft-Windows-DotNETRuntime/GC/GlobalHeapHistory PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=38; FinalYoungestDesired=6,291,456; NumHeaps=1; CondemnedGeneration=1; Gen0ReductionCount=0; Reason=AllocSmall; GlobalMechanisms=Compaction, Promotio...; ClrInstanceID=9; PauseMode=Interactive; MemoryPressure=8; CondemnReasons0=; CondemnReasons1=; Count=; 
 EVENT 2,601.325: Microsoft-Windows-DotNETRuntime/GC/PerHeapHistory PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=218; ClrInstanceID=9; FreeListAllocated=0; FreeListRejected=0; EndOfSegAllocated=0; CondemnedAllocated=1,875,604; PinnedAllocated=4,640; PinnedAllocatedAdvance=0; RunningFreeListEfficiency=0; CondemnReasons0=20; CondemnReasons1=16; CompactMechanisms=compact_low_ephemera...; ExpandMechanisms=not_specified; ConcurrentCompactMechanisms=; HeapIndex=0; ExtraGen0Commit=3,121,172; Count=4; MemoryPressure=; 
 EVENT 2,601.328: Microsoft-Windows-DotNETRuntime/GC/GenerationRange PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=23; Generation=3; RangeStart=0x04f11000; RangeUsedLength=0x0004af70; RangeReservedLength=0x00fff000; ClrInstanceID=9; 
@@ -353,13 +353,13 @@ EVENT 2,601.332: Microsoft-Windows-DotNETRuntime/GC/Stop PID=9728; TID=9584; PNa
 EVENT 2,601.342: Microsoft-Windows-DotNETRuntime/GC/HeapStats PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=94; TotalHeapSize=4,530,012; TotalPromoted=3,112,716; Depth=1; GenerationSize0=1,066,288; TotalPromotedSize0=1,235,044; GenerationSize1=1,246,460; TotalPromotedSize1=1,877,672; GenerationSize2=1,910,208; TotalPromotedSize2=0; GenerationSize3=307,056; TotalPromotedSize3=0; FinalizationPromotedSize=24,988; FinalizationPromotedCount=1,221; PinnedObjectCount=116; SinkBlockCount=928; GCHandleCount=8,269; ClrInstanceID=9; GenerationSize4=0; TotalPromotedSize4=0; 
 EVENT 2,601.345: Microsoft-Windows-DotNETRuntime/GC/RestartEEStart PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=2; ClrInstanceID=9; 
 EVENT 2,601.382: Microsoft-Windows-DotNETRuntime/GC/RestartEEStop PID=9728; TID=9584; PName=PerfView; ProceNum=1; DataLen=2; ClrInstanceID=9; 
-EVENT 2,601.892: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=750; ClrInstanceID=9; 
-EVENT 2,601.896: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=750; ClrInstanceID=9; 
-EVENT 2,601.899: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=750; ClrInstanceID=9; 
-EVENT 2,601.902: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=750; ClrInstanceID=9; 
-EVENT 2,601.905: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=750; ClrInstanceID=9; 
-EVENT 2,603.592: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=226,892,880; 
-EVENT 2,603.597: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=226,888,528; 
+EVENT 2,601.892: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=0x000002ee; ClrInstanceID=9; 
+EVENT 2,601.896: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=0x000002ee; ClrInstanceID=9; 
+EVENT 2,601.899: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=0x000002ee; ClrInstanceID=9; 
+EVENT 2,601.902: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=0x000002ee; ClrInstanceID=9; 
+EVENT 2,601.905: Microsoft-Windows-DotNETRuntime/GarbageCollection/DecreaseMemoryPressure PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=10; BytesFreed=0x000002ee; ClrInstanceID=9; 
+EVENT 2,603.592: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x0d861c50; 
+EVENT 2,603.597: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x0d860b50; 
 EVENT 2,604.310: System.Diagnostics.Eventing.FrameworkEventSource/ThreadTransfer/Receive PID=2112; TID=5132; PName=WindowsAzureGuestAgent; ProceNum=0; DataLen=14; id=2,848,228,556,912; kind=1; info=; 
 EVENT 2,607.379: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=2112; TID=5132; PName=WindowsAzureGuestAgent; ProceNum=0; DataLen=66; AllocationAmount=104,696; AllocationKind=Small; ClrInstanceID=6; AllocationAmount64=104,696; TypeID=0x7ffbdb424e60; TypeName=System.String; HeapIndex=0; Address=0x29727d4b838; ObjectSize=0; 
 EVENT 2,624.752: Windows Kernel/TcpIp/Recv PID=1136; TID=-1; PName=svchost; ProceNum=0; DataLen=28; daddr=167.220.2.117; saddr=10.0.0.4; dport=22,251; sport=3,389; size=38; connid=0x26c00000000; seqnum=620; 
@@ -376,9 +376,9 @@ EVENT 2,633.262: Microsoft-Windows-DotNETRuntime/GC/FinalizeObject PID=9728; TID
 EVENT 2,633.582: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Start PID=5532; TID=1628; PName=explorer; ProceNum=1; DataLen=0; 
 EVENT 2,633.596: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Stop PID=5532; TID=1628; PName=explorer; ProceNum=1; DataLen=0; 
 EVENT 2,634.392: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=9728; TID=8628; PName=PerfView; ProceNum=1; DataLen=333; Count=3; ClrInstanceID=9; TypeID_0=0x6fd5f5e0; TypeName_0=System.Runtime.Compi...; 
-EVENT 2,634.956: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=8; Id=226,891,856; 
-EVENT 2,636.287: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=8; Id=288,042,320; 
-EVENT 2,638.167: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=226,891,600; 
+EVENT 2,634.956: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=8; Id=0x0d861850; 
+EVENT 2,636.287: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=8; Id=0x112b2d50; 
+EVENT 2,638.167: Microsoft-Windows-DirectComposition/ATLAS_ENTRY_MARK_FOR_DISPOSE PID=5532; TID=4548; PName=explorer; ProceNum=1; DataLen=8; Id=0x0d861750; 
 EVENT 2,649.731: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=9728; TID=8628; PName=PerfView; ProceNum=0; DataLen=6; Count=1,221; ClrInstanceID=9; 
 EVENT 2,649.739: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=9728; TID=8628; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=9; 
 EVENT 2,649.739: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=9728; TID=8628; PName=PerfView; ProceNum=0; DataLen=6; Count=0; ClrInstanceID=9; 
@@ -582,7 +582,7 @@ EVENT 6,347.169: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=1676; T
 EVENT 6,347.183: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=1676; TID=7828; PName=dotnet; ProceNum=1; DataLen=216; AssemblyID=3,009,291,168,416; AppDomainID=3,009,291,046,192; AssemblyFlags=ReadyToRun; FullyQualifiedAssemblyName=System.Runtime.Exten...; BindingID=0; ClrInstanceID=5; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
 EVENT 6,347.839: Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload PID=1676; TID=7828; PName=dotnet; ProceNum=1; DataLen=34; AppDomainID=3,009,291,046,192; AppDomainFlags=Default, Executable; AppDomainName=clrhost; AppDomainIndex=1; ClrInstanceID=5; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
 EVENT 6,355.408: Windows Kernel/Process/PerfCtr PID=1676; TID=-1; PName=dotnet; ProceNum=1; DataLen=104; ProcessID=1,676; MemoryCount=0; HandleCount=0; PeakVirtualSize=2,203,837,140,992; PeakWorkingSetSize=22,388,736; PeakPagefileUsage=10,514,432; QuotaPeakPagedPoolUsage=125,712; QuotaPeakNonPagedPoolUsage=20,360; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 6,355.424: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=1676; TID=7084; PName=dotnet; ProceNum=1; DataLen=87; ProcessID=1,676; CreateTime=20/09/02 18:52:57.15...; ExitTime=20/09/02 18:52:57.44...; ExitCode=0; TokenElevationType=1; HandleCount=150; CommitCharge=9,625,600; CommitPeak=10,514,432; CPUCycleCount=545,987,528; ReadOperationCount=80; WriteOperationCount=165; ReadTransferKiloBytes=317; WriteTransferKiloBytes=5; HardFaultCount=330; ImageName=dotnet.exe; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
+EVENT 6,355.424: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=1676; TID=7084; PName=dotnet; ProceNum=1; DataLen=87; ProcessID=1,676; CreateTime=20/09/02 18:52:57.15...; ExitTime=20/09/02 18:52:57.44...; ExitCode=0; TokenElevationType=1; HandleCount=150; CommitCharge=0x0092e000; CommitPeak=0x00a07000; CPUCycleCount=0x208b1bc8; ReadOperationCount=80; WriteOperationCount=165; ReadTransferKiloBytes=317; WriteTransferKiloBytes=5; HardFaultCount=330; ImageName=dotnet.exe; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
 EVENT 6,355.425: Windows Kernel/Process/Stop PID=1676; TID=-1; PName=dotnet; ProceNum=1; DataLen=195; ProcessID=1,676; ParentID=10,072; ImageFileName=dotnet.exe; PageDirectoryBase=0x140458000; Flags=None; SessionID=5; ExitStatus=0; UniqueProcessKey=0xffffb2038f0c0080; CommandLine="C:\sdk\dotnet-sdk-3...; PackageFullName=; ApplicationID=; 
 EVENT 6,368.629: System.Diagnostics.Eventing.FrameworkEventSource/ThreadPoolEnqueueWork PID=10072; TID=2516; PName=powershell; ProceNum=0; DataLen=8; workID=2,051,328,295,888; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
 EVENT 6,368.711: System.Diagnostics.Eventing.FrameworkEventSource/ThreadPoolDequeueWork PID=10072; TID=10136; PName=powershell; ProceNum=1; DataLen=8; workID=2,051,328,295,888; ContainerID=6D9F6D0C-57F8-5F0C-898D-2DC82CC922E0; 
@@ -590,17 +590,17 @@ EVENT 6,665.981: Microsoft-Windows-Kernel-Power/IdleCheck PID=0; TID=0; PName=Id
 EVENT 6,666.087: Microsoft-Windows-Kernel-Power/SystemIdle PID=4; TID=5660; PName=System; ProceNum=0; DataLen=8; Reason=The system detected ...; S0LowPowerDozeTimerCancelled=False; 
 EVENT 6,666.380: Microsoft-Windows-Kernel-Power/SystemIdle PID=4; TID=5660; PName=System; ProceNum=0; DataLen=32; AccumulatedIdleTime=0; SystemIdle=False; Flags=0; Action=0; MinState=System Power State S...; DozeS4Timeout=0; PredictedUserReturnTime=01/01/01 00:00:00.00...; 
 EVENT 6,666.407: Microsoft-Windows-Kernel-Power/DeviceIdle/Start PID=4; TID=5660; PName=System; ProceNum=0; DataLen=0; 
-EVENT 6,666.409: Microsoft-Windows-Kernel-Power/DeviceIdleCheck PID=4; TID=5660; PName=System; ProceNum=0; DataLen=190; Device=0xffffb2035e1bb060; Pdo=0xffffb2035e1bb060; InstancePath=IDE\DiskVirtual_HD__...; ConservativeTimeout=-1; PerformanceTimeout=-1; IdleTime=0; BusyCount=25; TotalBusyCount=50,519; IdlePowerState=3; CurrentPowerState=0; 
+EVENT 6,666.409: Microsoft-Windows-Kernel-Power/DeviceIdleCheck PID=4; TID=5660; PName=System; ProceNum=0; DataLen=190; Device=0xffffb2035e1bb060; Pdo=0xffffb2035e1bb060; InstancePath=IDE\DiskVirtual_HD__...; ConservativeTimeout=4,294,967,295; PerformanceTimeout=4,294,967,295; IdleTime=0; BusyCount=25; TotalBusyCount=50,519; IdlePowerState=3; CurrentPowerState=0; 
 EVENT 6,666.410: Microsoft-Windows-Kernel-Power/DiskIdleCheck PID=4; TID=5660; PName=System; ProceNum=0; DataLen=24; Device=0xffffb2035e1bb060; Timeout=0; IgnoreThreshold=0; IdleTime=0; NonIdleTime=0; 
-EVENT 6,666.411: Microsoft-Windows-Kernel-Power/DeviceIdleCheck PID=4; TID=5660; PName=System; ProceNum=0; DataLen=190; Device=0xffffb2035e1bf060; Pdo=0xffffb2035e1bf060; InstancePath=IDE\DiskVirtual_HD__...; ConservativeTimeout=-1; PerformanceTimeout=-1; IdleTime=39,750; BusyCount=0; TotalBusyCount=75; IdlePowerState=3; CurrentPowerState=0; 
+EVENT 6,666.411: Microsoft-Windows-Kernel-Power/DeviceIdleCheck PID=4; TID=5660; PName=System; ProceNum=0; DataLen=190; Device=0xffffb2035e1bf060; Pdo=0xffffb2035e1bf060; InstancePath=IDE\DiskVirtual_HD__...; ConservativeTimeout=4,294,967,295; PerformanceTimeout=4,294,967,295; IdleTime=39,750; BusyCount=0; TotalBusyCount=75; IdlePowerState=3; CurrentPowerState=0; 
 EVENT 6,666.413: Microsoft-Windows-Kernel-Power/DiskIdleCheck PID=4; TID=5660; PName=System; ProceNum=0; DataLen=24; Device=0xffffb2035e1bf060; Timeout=0; IgnoreThreshold=0; IdleTime=39,750; NonIdleTime=0; 
 EVENT 6,666.413: Microsoft-Windows-Kernel-Power/DeviceIdle/Stop PID=4; TID=5660; PName=System; ProceNum=0; DataLen=0; 
 EVENT 6,666.466: Microsoft-Windows-Kernel-Power/PowerSettingChange PID=4; TID=5660; PName=System; ProceNum=0; DataLen=28; SettingGuid=515c31d8-f734-163d-a...; Data=F0050000; Override=False; 
-EVENT 6,779.698: Microsoft-Windows-DirectComposition/CAP_RELEASE_SURFACE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=16; Id=102,432,544; Width=704; Height=576; 
-EVENT 6,779.786: Microsoft-Windows-DirectComposition/ATLAS_FREE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=8; Id=102,432,544; 
-EVENT 6,791.767: Microsoft-Windows-DirectComposition/ATLAS_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; Id=102,437,712; Width=32; Height=32; BitDepth=32; IsTexturingAtlas=True; ChannelHandle=19; PixelFormat=87; 
+EVENT 6,779.698: Microsoft-Windows-DirectComposition/CAP_RELEASE_SURFACE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=16; Id=0x061aff20; Width=704; Height=576; 
+EVENT 6,779.786: Microsoft-Windows-DirectComposition/ATLAS_FREE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=8; Id=0x061aff20; 
+EVENT 6,791.767: Microsoft-Windows-DirectComposition/ATLAS_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; Id=0x061b1350; Width=32; Height=32; BitDepth=32; IsTexturingAtlas=True; ChannelHandle=19; PixelFormat=87; 
 EVENT 6,795.006: Microsoft-Windows-DirectComposition/ATLAS_RESIZE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=56; TargetX=1,024; TargetY=832; MinX=704; MinY=576; MaxX=1,922; MaxY=1,120; RequestX=203; RequestY=26; ShrinkX=704; ShrinkY=576; GrowX=256; GrowY=64; AtlasX=704; AtlasY=576; 
-EVENT 6,795.210: Microsoft-Windows-DirectComposition/ATLAS_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; Id=102,432,544; Width=704; Height=576; BitDepth=32; IsTexturingAtlas=True; ChannelHandle=19; PixelFormat=87; 
+EVENT 6,795.210: Microsoft-Windows-DirectComposition/ATLAS_ALLOCATE PID=5532; TID=4548; PName=explorer; ProceNum=0; DataLen=32; Id=0x061aff20; Width=704; Height=576; BitDepth=32; IsTexturingAtlas=True; ChannelHandle=19; PixelFormat=87; 
 EVENT 6,859.034: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Start PID=5532; TID=1628; PName=explorer; ProceNum=1; DataLen=0; 
 EVENT 6,859.305: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Stop PID=5532; TID=1628; PName=explorer; ProceNum=0; DataLen=0; 
 EVENT 6,870.899: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerZbandNotification/Start PID=5532; TID=9556; PName=explorer; ProceNum=0; DataLen=8; ZbandFrom=1; ZbandTo=16; 
@@ -635,7 +635,7 @@ EVENT 9,836.780: Microsoft-Windows-DotNETRuntime/ThreadPoolWorkerThreadAdjustmen
 EVENT 9,836.802: Microsoft-Windows-DotNETRuntime/ThreadPoolWorkerThreadAdjustment/Stats PID=3476; TID=9076; PName=dotnet; ProceNum=0; DataLen=76; Duration=91,215.672; Throughput=0.000; ThreadWave=0.000; ThroughputWave=0.000; ThroughputErrorEstimate=0.000; AverageThroughputErrorEstimate=0.000; ThroughputRatio=0.000; Confidence=0.000; NewControlSetting=2.000; NewThreadWaveMagnitude=1; ClrInstanceID=5; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
 EVENT 9,907.434: Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload PID=3476; TID=5652; PName=dotnet; ProceNum=1; DataLen=34; AppDomainID=1,891,178,979,312; AppDomainFlags=Default, Executable; AppDomainName=clrhost; AppDomainIndex=1; ClrInstanceID=5; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
 EVENT 9,916.997: Windows Kernel/Process/PerfCtr PID=3476; TID=-1; PName=dotnet; ProceNum=1; DataLen=104; ProcessID=3,476; MemoryCount=0; HandleCount=0; PeakVirtualSize=2,203,837,112,320; PeakWorkingSetSize=22,446,080; PeakPagefileUsage=10,571,776; QuotaPeakPagedPoolUsage=125,712; QuotaPeakNonPagedPoolUsage=20,360; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
-EVENT 9,917.014: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3476; TID=6828; PName=dotnet; ProceNum=1; DataLen=87; ProcessID=3,476; CreateTime=20/09/02 18:53:00.70...; ExitTime=20/09/02 18:53:01.00...; ExitCode=0; TokenElevationType=1; HandleCount=150; CommitCharge=9,621,504; CommitPeak=10,571,776; CPUCycleCount=604,930,242; ReadOperationCount=80; WriteOperationCount=165; ReadTransferKiloBytes=317; WriteTransferKiloBytes=5; HardFaultCount=327; ImageName=dotnet.exe; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
+EVENT 9,917.014: Microsoft-Windows-Kernel-Process/ProcessStop/Stop PID=3476; TID=6828; PName=dotnet; ProceNum=1; DataLen=87; ProcessID=3,476; CreateTime=20/09/02 18:53:00.70...; ExitTime=20/09/02 18:53:01.00...; ExitCode=0; TokenElevationType=1; HandleCount=150; CommitCharge=0x0092d000; CommitPeak=0x00a15000; CPUCycleCount=0x240e80c2; ReadOperationCount=80; WriteOperationCount=165; ReadTransferKiloBytes=317; WriteTransferKiloBytes=5; HardFaultCount=327; ImageName=dotnet.exe; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
 EVENT 9,917.016: Windows Kernel/Process/Stop PID=3476; TID=-1; PName=dotnet; ProceNum=1; DataLen=195; ProcessID=3,476; ParentID=10,224; ImageFileName=dotnet.exe; PageDirectoryBase=0x26a8da000; Flags=None; SessionID=4; ExitStatus=0; UniqueProcessKey=0xffffb2038f0c0080; CommandLine="C:\sdk\dotnet-sdk-3...; PackageFullName=; ApplicationID=; 
 EVENT 9,930.004: System.Diagnostics.Eventing.FrameworkEventSource/ThreadPoolEnqueueWork PID=10224; TID=8468; PName=powershell; ProceNum=0; DataLen=8; workID=2,443,897,187,096; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
 EVENT 9,930.593: System.Diagnostics.Eventing.FrameworkEventSource/ThreadPoolDequeueWork PID=10224; TID=10112; PName=powershell; ProceNum=1; DataLen=8; workID=2,443,897,187,096; ContainerID=9F880481-6385-5528-93E5-5B918386652D; 
@@ -740,7 +740,7 @@ EVENT 13,539.422: Windows Kernel/Process/Defunct PID=2856; TID=-1; PName=Process
 EVENT 13,546.746: Windows Kernel/Process/Defunct PID=2364; TID=-1; PName=Process(2364); ProceNum=1; DataLen=107; ProcessID=2,364; ParentID=5,184; ImageFileName=userinit.exe; PageDirectoryBase=0x251832000; Flags=None; SessionID=2; ExitStatus=0; UniqueProcessKey=0xffffb20366b22080; CommandLine=; PackageFullName=; ApplicationID=; 
 EVENT 13,560.909: KernelTraceControl/ImageID/Opcode(34) PID=7088; TID=-1; PName=com.docker.backend; ProceNum=1; DataLen=70; 
 EVENT 13,561.435: KernelTraceControl/ImageID/Opcode(34) PID=6240; TID=-1; PName=docker-mutagen; ProceNum=1; DataLen=62; 
-EVENT 13,859.825: PerfView/ClrEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=16; keywords=70,867,353,912; level=Verbose; 
+EVENT 13,859.825: PerfView/ClrEnableParameters PID=9728; TID=9088; PName=PerfView; ProceNum=1; DataLen=16; keywords=0x1080060138; level=Verbose; 
 EVENT 13,862.592: PerfView/WaitForIdle PID=9728; TID=9088; PName=PerfView; ProceNum=0; DataLen=0; 
 EVENT 13,888.615: Windows Kernel/PerfInfo/CollectionEnd PID=9728; TID=4904; PName=PerfView; ProceNum=0; DataLen=24; SampleSource=0; NewInterval=10,000; OldInterval=10,000; 
 EVENT 14,041.862: Windows Kernel/EventTrace/Extension PID=-1; TID=-1; PName=; ProceNum=1; DataLen=36; GroupMask1=0; GroupMask2=0; GroupMask3=0; GroupMask4=0; GroupMask5=0; GroupMask6=0; GroupMask7=0; GroupMask8=0; KernelEventVersion=70; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x64.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x64.baseline.txt
index 4e4155ab5..cb6f5090d 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x64.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x64.baseline.txt
@@ -324,7 +324,7 @@ EVENT 1,080.620: Microsoft-Windows-DotNETRuntime/GC/BulkSurvivingObjectRanges PI
 EVENT 1,080.746: Microsoft-Windows-DotNETRuntime/GC/BulkSurvivingObjectRanges PID=22316; TID=11268; PName=test; ProceNum=2; DataLen=218; Index=0; Count=13; ClrInstanceID=8; 
 EVENT 1,109.460: Windows Kernel/UdpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=2; DataLen=56; size=496; dport=62,087; sport=3,389; seqnum=0; connid=0x00000000; 
 EVENT 1,114.346: Windows Kernel/UdpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=75; dport=3,389; sport=62,087; seqnum=0; connid=0x00000000; 
-EVENT 1,143.158: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=22316; TID=11268; PName=test; ProceNum=2; DataLen=10; BytesAllocated=1,984; ClrInstanceID=8; 
+EVENT 1,143.158: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=22316; TID=11268; PName=test; ProceNum=2; DataLen=10; BytesAllocated=0x000007c0; ClrInstanceID=8; 
 EVENT 1,195.900: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=22316; TID=18836; PName=test; ProceNum=1; DataLen=2; ClrInstanceID=8; 
 EVENT 1,195.949: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=22316; TID=18836; PName=test; ProceNum=1; DataLen=6; Count=0; ClrInstanceID=8; 
 EVENT 1,205.631: Windows Kernel/UdpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=3; DataLen=56; size=83; dport=62,087; sport=3,389; seqnum=0; connid=0x00000000; 
@@ -435,7 +435,7 @@ EVENT 3,562.709: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=718
 EVENT 3,562.719: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
 EVENT 3,563.066: Windows Kernel/DiskIO/Opcode(16) PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=16; 
 EVENT 3,568.353: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=420; ModuleID=1,854,541,824; AssemblyID=27,051,176; AppDomainID=26,854,400; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
-EVENT 3,589.675: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 3,589.675: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 3,601.773: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 3,602.718: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 3,602.721: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=7184; TID=19132; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x86.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x86.baseline.txt
index 890b8972a..fef2b6592 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x86.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/netfx.4.6.1080.0.netfxrel3stage.x86.baseline.txt
@@ -309,7 +309,7 @@ EVENT 389.005: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=8400; TID=
 EVENT 389.007: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=8400; TID=10272; PName=test; ProceNum=1; DataLen=6; Count=0; ClrInstanceID=10; 
 EVENT 389.119: Microsoft-Windows-DotNETRuntime/GC/BulkSurvivingObjectRanges PID=8400; TID=8896; PName=test; ProceNum=0; DataLen=58; Index=0; Count=4; ClrInstanceID=10; 
 EVENT 389.131: Microsoft-Windows-DotNETRuntime/GC/BulkSurvivingObjectRanges PID=8400; TID=8896; PName=test; ProceNum=0; DataLen=166; Index=0; Count=13; ClrInstanceID=10; 
-EVENT 390.018: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=8400; TID=8896; PName=test; ProceNum=0; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 390.018: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=8400; TID=8896; PName=test; ProceNum=0; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 409.661: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=8400; TID=10272; PName=test; ProceNum=2; DataLen=2; ClrInstanceID=10; 
 EVENT 409.663: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=8400; TID=10272; PName=test; ProceNum=2; DataLen=6; Count=0; ClrInstanceID=10; 
 EVENT 436.991: Windows Kernel/UdpIp/RecvIPV6 PID=1148; TID=-1; PName=svchost; ProceNum=1; DataLen=56; size=492; dport=1,900; sport=1,900; seqnum=0; connid=0x00000000; 
@@ -412,7 +412,7 @@ EVENT 1,123.853: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=18716; TI
 EVENT 1,123.892: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=18716; TID=23384; PName=PerfView; ProceNum=1; DataLen=460; ModuleID=1,859,129,344; AssemblyID=25,178,088; AppDomainID=24,953,856; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
 EVENT 1,123.899: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=18716; TID=23384; PName=PerfView; ProceNum=1; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
 EVENT 1,124.043: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=18716; TID=23384; PName=PerfView; ProceNum=1; DataLen=420; ModuleID=1,919,225,856; AssemblyID=25,184,168; AppDomainID=24,953,856; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
-EVENT 1,134.554: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=18716; TID=23384; PName=PerfView; ProceNum=3; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 1,134.554: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=18716; TID=23384; PName=PerfView; ProceNum=3; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 1,140.174: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=18716; TID=23384; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 1,140.769: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=18716; TID=23384; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 1,140.770: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=18716; TID=23384; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/primitive-types.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/primitive-types.baseline.txt
index 2a346ccdd..586753abe 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/primitive-types.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/primitive-types.baseline.txt
@@ -1,8 +1,8 @@
 EVENT 0.000: Windows Kernel/EventTrace PID=39096; TID=29376; PName=Process(39096); ProceNum=0; DataLen=366; BufferSize=8,192; Version=83,951,626; ProviderVersion=19,043; NumberOfProcessors=8; EndTime=21/09/09 14:59:42.05...; TimerResolution=156,250; MaxFileSize=0; LogFileMode=0; BuffersWritten=2; StartBuffers=1; PointerSize=8; EventsLost=0; CPUSpeed=2,304; BootTime=21/09/06 14:40:14.50...; PerfFreq=10,000,000; StartTime=21/09/09 14:59:32.85...; ReservedFlags=1; BuffersLost=0; SessionName=solar_system; LogFileName=C:\primitive-types_0...; UtcOffsetMinutes=-120; 
-EVENT 2,942.306: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=78; string_type=Mercury; boolean_type=False; char_type=77; int16_type=-51; int32_type=-102; uint16_type=51; uint32_type=102; int64_type=-204; uint64_type=204; guid_type=0ad614c4-0ef4-4225-8...; file_time_type=21/09/09 14:59:35.79...; system_time_type=21/09/09 14:59:35.03...; 
-EVENT 3,381.259: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=76; string_type=Venus; boolean_type=True; char_type=86; int16_type=-95; int32_type=-190; uint16_type=95; uint32_type=190; int64_type=-380; uint64_type=380; guid_type=e04ff801-9ea3-494f-a...; file_time_type=21/09/09 14:59:36.23...; system_time_type=21/09/09 14:59:36.03...; 
-EVENT 3,814.002: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=76; string_type=Earth; boolean_type=False; char_type=69; int16_type=-65; int32_type=-130; uint16_type=65; uint32_type=130; int64_type=-260; uint64_type=260; guid_type=c7a6c80e-f2a6-4220-a...; file_time_type=21/09/09 14:59:36.67...; system_time_type=21/09/09 14:59:36.03...; 
-EVENT 4,190.408: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=75; string_type=Mars; boolean_type=False; char_type=77; int16_type=-29; int32_type=-58; uint16_type=29; uint32_type=58; int64_type=-116; uint64_type=116; guid_type=0a922cee-67c1-4108-b...; file_time_type=21/09/09 14:59:37.04...; system_time_type=21/09/09 14:59:37.03...; 
-EVENT 4,626.652: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=78; string_type=Jupiter; boolean_type=True; char_type=74; int16_type=-69; int32_type=-138; uint16_type=69; uint32_type=138; int64_type=-276; uint64_type=276; guid_type=bb11b97b-1110-4eb6-b...; file_time_type=21/09/09 14:59:37.48...; system_time_type=21/09/09 14:59:37.03...; 
+EVENT 2,942.306: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=78; string_type=Mercury; boolean_type=False; char_type=77; int16_type=-51; int32_type=-102; uint16_type=51; uint32_type=102; int64_type=0xffffffffffffff34; uint64_type=0x000000cc; guid_type=0ad614c4-0ef4-4225-8...; file_time_type=21/09/09 14:59:35.79...; system_time_type=21/09/09 14:59:35.03...; 
+EVENT 3,381.259: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=76; string_type=Venus; boolean_type=True; char_type=86; int16_type=-95; int32_type=-190; uint16_type=95; uint32_type=190; int64_type=0xfffffffffffffe84; uint64_type=0x0000017c; guid_type=e04ff801-9ea3-494f-a...; file_time_type=21/09/09 14:59:36.23...; system_time_type=21/09/09 14:59:36.03...; 
+EVENT 3,814.002: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=76; string_type=Earth; boolean_type=False; char_type=69; int16_type=-65; int32_type=-130; uint16_type=65; uint32_type=130; int64_type=0xfffffffffffffefc; uint64_type=0x00000104; guid_type=c7a6c80e-f2a6-4220-a...; file_time_type=21/09/09 14:59:36.67...; system_time_type=21/09/09 14:59:36.03...; 
+EVENT 4,190.408: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=75; string_type=Mars; boolean_type=False; char_type=77; int16_type=-29; int32_type=-58; uint16_type=29; uint32_type=58; int64_type=0xffffffffffffff8c; uint64_type=0x00000074; guid_type=0a922cee-67c1-4108-b...; file_time_type=21/09/09 14:59:37.04...; system_time_type=21/09/09 14:59:37.03...; 
+EVENT 4,626.652: solar_system/PrimitiveTypesTest PID=33984; TID=21768; PName=Process(33984); ProceNum=2; DataLen=78; string_type=Jupiter; boolean_type=True; char_type=74; int16_type=-69; int32_type=-138; uint16_type=69; uint32_type=138; int64_type=0xfffffffffffffeec; uint64_type=0x00000114; guid_type=bb11b97b-1110-4eb6-b...; file_time_type=21/09/09 14:59:37.48...; system_time_type=21/09/09 14:59:37.03...; 
 COUNT Windows Kernel/EventTrace:1
 COUNT solar_system/PrimitiveTypesTest:5
diff --git a/src/TraceEvent/TraceEvent.Tests/inputs/sl.5.x86.baseline.txt b/src/TraceEvent/TraceEvent.Tests/inputs/sl.5.x86.baseline.txt
index d1a059d5e..5bf8c0d24 100644
--- a/src/TraceEvent/TraceEvent.Tests/inputs/sl.5.x86.baseline.txt
+++ b/src/TraceEvent/TraceEvent.Tests/inputs/sl.5.x86.baseline.txt
@@ -96,8 +96,8 @@ EVENT 170.726: KernelTraceControl/MetaData/EventInfo PID=6416; TID=18968; PName=
 EVENT 170.726: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=4; ScriptContextID=0x0f54b438; 
 EVENT 170.733: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=4; ScriptContextID=0x0f709980; 
 EVENT 170.735: KernelTraceControl/MetaData/EventInfo PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=1004; 
-EVENT 170.735: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=84; SourceID=37; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/S...; 
-EVENT 170.736: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=76; SourceID=38; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/i...; 
+EVENT 170.735: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=84; SourceID=0x00000025; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/S...; 
+EVENT 170.736: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=76; SourceID=0x00000026; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/i...; 
 EVENT 170.779: Windows Kernel/DiskIO/ReadInit PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=12; Irp=0xffffe000ce16bb40; 
 EVENT 170.869: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=11636; TID=17332; PName=PerfView; ProceNum=1; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=10; 
 EVENT 170.881: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=22; SegmentSize=268,435,456; LargeObjectSegmentSize=134,217,728; ServerGC=False; ClrInstanceID=8; 
@@ -116,17 +116,17 @@ EVENT 176.056: Microsoft-Windows-DotNETRuntime/Method/JittingStarted PID=11636;
 EVENT 178.460: Windows Kernel/DiskIO/Read PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, MountComple...; Priority=Normal; TransferSize=28,672; ByteOffset=49,797,137,408; Irp=0xffffe000ce16bb40; ElapsedTimeMSec=7.679; DiskServiceTimeMSec=7.679; FileKey=0xffffc00199c3c9d0; FileName=C:\Windows\SysWOW64\...; 
 EVENT 178.510: Windows Kernel/Memory/HardFault PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=40; ElapsedTimeMSec=7.758; ReadOffset=2,229,248; VirtualAddress=0x6ef639b8; FileKey=0xffffc00199c3c9d0; ByteCount=28,672; FileName=C:\Windows\SysWOW64\...; 
 EVENT 178.541: KernelTraceControl/MetaData/EventMapInfo PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=408; 
-EVENT 178.541: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=94; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fc7; MethodSize=8; MethodID=9,100; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=276; Column=30; MethodName=Silverlight.createOb...; 
-EVENT 178.548: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=64; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fe7; MethodSize=8; MethodID=9,092; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=1; Column=1; MethodName=Global code; 
-EVENT 178.551: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=88; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fb7; MethodSize=8; MethodID=9,094; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=15; Column=27; MethodName=Silverlight.isInstal...; 
-EVENT 178.553: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=104; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fa7; MethodSize=8; MethodID=9,104; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=368; Column=35; MethodName=Silverlight.HtmlAttr...; 
-EVENT 178.556: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=84; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0f9f; MethodSize=8; MethodID=9,096; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=119; Column=25; MethodName=Silverlight.__startu...; 
+EVENT 178.541: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=94; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fc7; MethodSize=0x00000008; MethodID=9,100; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000025; Line=276; Column=30; MethodName=Silverlight.createOb...; 
+EVENT 178.548: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=64; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fe7; MethodSize=0x00000008; MethodID=9,092; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000025; Line=1; Column=1; MethodName=Global code; 
+EVENT 178.551: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=88; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fb7; MethodSize=0x00000008; MethodID=9,094; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000025; Line=15; Column=27; MethodName=Silverlight.isInstal...; 
+EVENT 178.553: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=104; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fa7; MethodSize=0x00000008; MethodID=9,104; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000025; Line=368; Column=35; MethodName=Silverlight.HtmlAttr...; 
+EVENT 178.556: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=84; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0f9f; MethodSize=0x00000008; MethodID=9,096; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=0x00000025; Line=119; Column=25; MethodName=Silverlight.__startu...; 
 EVENT 178.567: Microsoft-JScript/MethodRundown/DCStartComplete PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=0; 
 EVENT 178.568: Microsoft-JScript/MethodRundown/DCEndInit PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=0; 
 EVENT 178.569: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=4; ScriptContextID=0x0f54b438; 
 EVENT 178.571: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=4; ScriptContextID=0x0f709980; 
-EVENT 178.572: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=84; SourceID=37; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/S...; 
-EVENT 178.573: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=76; SourceID=38; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/i...; 
+EVENT 178.572: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=84; SourceID=0x00000025; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/S...; 
+EVENT 178.573: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=76; SourceID=0x00000026; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/i...; 
 EVENT 178.581: KernelTraceControl/MetaData/EventMapInfo PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=198; 
 EVENT 178.581: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=276; MethodID=16,612,424; ModuleID=16,596,924; MethodStartAddress=0x05a22370; MethodSize=2,520; MethodToken=100,665,128; MethodFlags=Jitted; MethodNamespace=PerfView.CommandProc...; MethodName=ParsedArgsAsString; MethodSignature=class System.String ...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
 EVENT 178.581: Microsoft-JScript/MethodRundown/DCEndComplete PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=0; 
@@ -318,23 +318,23 @@ EVENT 6,181.644: Windows Kernel/Thread/Start PID=2232; TID=13856; PName=OneDrive
 EVENT 6,186.089: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=2232; TID=10160; PName=OneDrive; ProceNum=0; DataLen=16; ProviderName=08f93b14-1608-4a72-9...; 
 EVENT 6,186.126: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=2232; TID=10160; PName=OneDrive; ProceNum=0; DataLen=16; ProviderName=50b3e73c-9370-461d-b...; 
 EVENT 6,186.139: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=2232; TID=10160; PName=OneDrive; ProceNum=0; DataLen=16; ProviderName=83ed54f0-4d48-4e45-b...; 
-EVENT 6,188.790: Microsoft-Windows-DNS-Client/EventID(3006) PID=2232; TID=20932; PName=OneDrive; ProceNum=2; DataLen=56; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; ServerList=; IsNetworkQuery=0; NetworkQueryIndex=0; InterfaceIndex=0; IsAsyncQuery=0; 
+EVENT 6,188.790: Microsoft-Windows-DNS-Client/EventID(3006) PID=2232; TID=20932; PName=OneDrive; ProceNum=2; DataLen=56; QueryName=ssw.live.com; QueryType=28; QueryOptions=0x40026000; ServerList=; IsNetworkQuery=0; NetworkQueryIndex=0; InterfaceIndex=0; IsAsyncQuery=0; 
 EVENT 6,188.902: Microsoft-Windows-DNS-Client/EventID(3009) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=372; QueryName=ssw.live.com; IsParallelNetworkQuery=1; NetworkIndex=0; InterfaceCount=1; AdapterName=Ethernet; LocalAddress=2001:4898:29:1010:40...; DNSServerAddress=10.221.226.12;10.222...; 
-EVENT 6,189.110: Microsoft-Windows-DNS-Client/EventID(3006) PID=2232; TID=3700; PName=OneDrive; ProceNum=3; DataLen=56; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,766,400; ServerList=; IsNetworkQuery=0; NetworkQueryIndex=0; InterfaceIndex=0; IsAsyncQuery=0; 
-EVENT 6,195.910: Microsoft-Windows-DNS-Client/EventID(3008) PID=2232; TID=3700; PName=OneDrive; ProceNum=1; DataLen=44; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,766,400; QueryStatus=87; QueryResults=; 
-EVENT 6,220.877: Microsoft-Windows-DNS-Client/EventID(3016) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=42; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,897,472; InterfaceIndex=0; 
-EVENT 6,220.911: Microsoft-Windows-DNS-Client/EventID(3018) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=44; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,897,472; Status=9,701; QueryResults=; 
+EVENT 6,189.110: Microsoft-Windows-DNS-Client/EventID(3006) PID=2232; TID=3700; PName=OneDrive; ProceNum=3; DataLen=56; QueryName=ssw.live.com; QueryType=1; QueryOptions=0x40006000; ServerList=; IsNetworkQuery=0; NetworkQueryIndex=0; InterfaceIndex=0; IsAsyncQuery=0; 
+EVENT 6,195.910: Microsoft-Windows-DNS-Client/EventID(3008) PID=2232; TID=3700; PName=OneDrive; ProceNum=1; DataLen=44; QueryName=ssw.live.com; QueryType=1; QueryOptions=0x40006000; QueryStatus=87; QueryResults=; 
+EVENT 6,220.877: Microsoft-Windows-DNS-Client/EventID(3016) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=42; QueryName=ssw.live.com; QueryType=1; QueryOptions=0x40026000; InterfaceIndex=0; 
+EVENT 6,220.911: Microsoft-Windows-DNS-Client/EventID(3018) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=44; QueryName=ssw.live.com; QueryType=1; QueryOptions=0x40026000; Status=9,701; QueryResults=; 
 EVENT 6,220.946: Microsoft-Windows-DNS-Client/EventID(3019) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=38; QueryName=ssw.live.com; QueryType=1; InterfaceIndex=0; NetworkIndex=0; 
 EVENT 6,220.973: Microsoft-Windows-DNS-Client/EventID(3010) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=58; QueryName=ssw.live.com; QueryType=1; DnsServerIpAddress=10.221.226.12; 
-EVENT 6,222.853: Microsoft-Windows-DNS-Client/EventID(3016) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=42; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; InterfaceIndex=0; 
-EVENT 6,222.862: Microsoft-Windows-DNS-Client/EventID(3018) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=44; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; Status=9,701; QueryResults=; 
+EVENT 6,222.853: Microsoft-Windows-DNS-Client/EventID(3016) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=42; QueryName=ssw.live.com; QueryType=28; QueryOptions=0x40026000; InterfaceIndex=0; 
+EVENT 6,222.862: Microsoft-Windows-DNS-Client/EventID(3018) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=44; QueryName=ssw.live.com; QueryType=28; QueryOptions=0x40026000; Status=9,701; QueryResults=; 
 EVENT 6,222.882: Microsoft-Windows-DNS-Client/EventID(3019) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=38; QueryName=ssw.live.com; QueryType=28; InterfaceIndex=0; NetworkIndex=0; 
 EVENT 6,222.891: Microsoft-Windows-DNS-Client/EventID(3010) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=58; QueryName=ssw.live.com; QueryType=28; DnsServerIpAddress=10.221.226.12; 
 EVENT 6,248.497: Microsoft-Windows-DNS-Client/EventID(3011) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=62; QueryName=ssw.live.com; QueryType=1; DnsServerIpAddress=10.221.226.12; ResponseStatus=0; 
 EVENT 6,248.572: Microsoft-Windows-DNS-Client/EventID(3020) PID=356; TID=20352; PName=svchost; ProceNum=3; DataLen=134; QueryName=ssw.live.com; QueryType=1; NetworkIndex=0; InterfaceIndex=0; Status=0; QueryResults=type:  5 ssw.live.co...; 
 EVENT 6,249.175: Microsoft-Windows-DNS-Client/EventID(3011) PID=356; TID=20352; PName=svchost; ProceNum=1; DataLen=62; QueryName=ssw.live.com; QueryType=28; DnsServerIpAddress=10.221.226.12; ResponseStatus=0; 
 EVENT 6,249.224: Microsoft-Windows-DNS-Client/EventID(3020) PID=356; TID=20352; PName=svchost; ProceNum=1; DataLen=128; QueryName=ssw.live.com; QueryType=28; NetworkIndex=0; InterfaceIndex=0; Status=0; QueryResults=type:  5 ssw.live.co...; 
-EVENT 6,249.372: Microsoft-Windows-DNS-Client/EventID(3008) PID=2232; TID=20932; PName=OneDrive; ProceNum=0; DataLen=148; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; QueryStatus=0; QueryResults=type:  5 ssw.live.co...; 
+EVENT 6,249.372: Microsoft-Windows-DNS-Client/EventID(3008) PID=2232; TID=20932; PName=OneDrive; ProceNum=0; DataLen=148; QueryName=ssw.live.com; QueryType=28; QueryOptions=0x40026000; QueryStatus=0; QueryResults=type:  5 ssw.live.co...; 
 EVENT 6,308.060: Windows Kernel/TcpIp/Connect PID=2232; TID=-1; PName=OneDrive; ProceNum=0; DataLen=48; size=0; daddr=207.46.7.252; saddr=10.199.101.136; dport=80; sport=1,109; mss=1,460; sackopt=1; tsopt=0; wsopt=1; rcvwin=131,400; rcvwinscale=8; sndwinscale=8; seqnum=0; connid=0x00000000; 
 EVENT 6,360.229: Windows Kernel/TcpIp/Send PID=2232; TID=-1; PName=OneDrive; ProceNum=0; DataLen=40; size=118; daddr=207.46.7.252; saddr=10.199.101.136; dport=80; sport=1,109; startime=82,130,323; endtime=82,130,329; seqnum=0; connid=0x00000000; 
 EVENT 6,360.229: Windows Kernel/TcpIp/Send PID=2232; TID=-1; PName=OneDrive; ProceNum=0; DataLen=40; size=1,888; daddr=207.46.7.252; saddr=10.199.101.136; dport=80; sport=1,109; startime=82,130,323; endtime=82,130,329; seqnum=0; connid=0x00000000; 
@@ -442,7 +442,7 @@ EVENT 8,911.547: Microsoft-Windows-DotNETRuntime/Loader/AssemblyLoad PID=24000;
 EVENT 8,911.558: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=502; ModuleID=1,751,584,768; AssemblyID=19,990,088; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ManagedPdbSignature=323a39dc-d55e-4a32-9...; ManagedPdbAge=2; ManagedPdbBuildPath=System.pdb; NativePdbSignature=3a4f0a84-904c-4b56-8...; NativePdbAge=1; NativePdbBuildPath=System.ni.pdb; ModuleILFileName=System.dll; 
 EVENT 8,911.564: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=420; ModuleID=1,751,584,768; AssemblyID=19,990,088; AppDomainID=19,775,488; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
 EVENT 8,911.567: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
-EVENT 8,921.078: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
+EVENT 8,921.078: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=10; BytesAllocated=0x00000540; ClrInstanceID=10; 
 EVENT 8,933.563: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 8,934.301: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
 EVENT 8,934.302: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
diff --git a/src/TraceEvent/TraceEvent.cs b/src/TraceEvent/TraceEvent.cs
index e6045231b..734ce41f0 100644
--- a/src/TraceEvent/TraceEvent.cs
+++ b/src/TraceEvent/TraceEvent.cs
@@ -1124,6 +1124,42 @@ public virtual string PayloadString(int index, IFormatProvider formatProvider =
                     }
                 }
 
+                if (value is uint)
+                {
+                    if (formatProvider != null)
+                    {
+                        return ((uint)value).ToString(formatProvider);
+                    }
+                    else
+                    {
+                        return ((uint)value).ToString("n0");
+                    }
+                }
+
+                if (value is short)
+                {
+                    if (formatProvider != null)
+                    {
+                        return ((short)value).ToString(formatProvider);
+                    }
+                    else
+                    {
+                        return ((short)value).ToString("n0");
+                    }
+                }
+
+                if (value is ushort)
+                {
+                    if (formatProvider != null)
+                    {
+                        return ((ushort)value).ToString(formatProvider);
+                    }
+                    else
+                    {
+                        return ((ushort)value).ToString("n0");
+                    }
+                }
+
                 if (value is long)
                 {
                     if (PayloadNames[index] == "objectId")      // TODO this is a hack.  
@@ -1141,6 +1177,18 @@ public virtual string PayloadString(int index, IFormatProvider formatProvider =
                     }
                 }
 
+                if (value is ulong)
+                {
+                    if (formatProvider != null)
+                    {
+                        return ((ulong)value).ToString(formatProvider);
+                    }
+                    else
+                    {
+                        return ((ulong)value).ToString("n0");
+                    }
+                }
+
                 if (value is double)
                 {
                     if (formatProvider != null)