EVENT 0.000: Windows Kernel/EventTrace PID=11636; TID=19564; PName=PerfView; ProceNum=0; DataLen=332; BufferSize=65,536; Version=83,951,626; ProviderVersion=10,586; NumberOfProcessors=4; EndTime=16/05/26 20:10:31.29...; TimerResolution=156,250; MaxFileSize=0; LogFileMode=65,537; BuffersWritten=631; StartBuffers=1; PointerSize=8; EventsLost=0; CPUSpeed=2,993; BootTime=16/05/14 10:08:46.49...; PerfFreq=10,000,000; StartTime=16/05/26 20:10:21.97...; ReservedFlags=1; BuffersLost=0; SessionName=Relogger; LogFileName=[multiple files]; UtcOffsetMinutes=480; 
EVENT 0.000: Windows Kernel/EventTrace/Extension PID=11636; TID=19564; PName=PerfView; ProceNum=0; DataLen=36; GroupMask1=0; GroupMask2=0; GroupMask3=0; GroupMask4=0; GroupMask5=0; GroupMask6=0; GroupMask7=0; GroupMask8=0; KernelEventVersion=60; 
EVENT 0.000: Windows Kernel/SysConfig/SystemPaths PID=0; TID=0; PName=Idle; ProceNum=0; DataLen=64; SystemDirectory=C:\Windows\system32; SystemWindowsDirectory=C:\Windows\; 
EVENT 0.000: Windows Kernel/SysConfig/VolumeMapping PID=0; TID=0; PName=Idle; ProceNum=0; DataLen=12; NtPath=\??\; DosPath=; 
EVENT 0.000: Windows Kernel/SysConfig/VolumeMapping PID=0; TID=0; PName=Idle; ProceNum=0; DataLen=50; NtPath=\SystemRoot\; DosPath=C:\Windows\; 
EVENT 0.000: Windows Kernel/SysConfig/VolumeMapping PID=0; TID=0; PName=Idle; ProceNum=0; DataLen=58; NtPath=\Device\HarddiskVolu...; DosPath=C:\; 
EVENT 0.000: Windows Kernel/SysConfig/VolumeMapping PID=0; TID=0; PName=Idle; ProceNum=0; DataLen=42; NtPath=\Device\Floppy0\; DosPath=A:\; 
EVENT 0.000: Windows Kernel/SysConfig/VolumeMapping PID=0; TID=0; PName=Idle; ProceNum=0; DataLen=40; NtPath=\Device\CdRom0\; DosPath=D:\; 
EVENT 5.381: Windows Kernel/EventTrace/EndExtension PID=-1; TID=-1; PName=; ProceNum=0; DataLen=36; GroupMask1=0; GroupMask2=0; GroupMask3=0; GroupMask4=0; GroupMask5=0; GroupMask6=0; GroupMask7=0; GroupMask8=0; KernelEventVersion=60; 
EVENT 5.432: Windows Kernel/SystemConfig/Network PID=-1; TID=-1; PName=; ProceNum=0; DataLen=16; TcbTablePartitions=32; MaxHashTableSize=-1; MaxUserPort=65,536; TcpTimedWaitDelay=30; 
EVENT 5.477: Windows Kernel/EventTrace/Extension PID=-1; TID=-1; PName=; ProceNum=3; DataLen=36; GroupMask1=75,535; GroupMask2=2; GroupMask3=0; GroupMask4=0; GroupMask5=0; GroupMask6=0; GroupMask7=0; GroupMask8=0; KernelEventVersion=60; 
EVENT 5.483: Windows Kernel/Process/DCStart PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=75; ProcessID=0; ParentID=0; ImageFileName=Idle; PageDirectoryBase=0x001aa000; Flags=None; SessionID=-1; ExitStatus=0; UniqueProcessKey=0xfffff803c1196a40; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 5.492: Windows Kernel/Process/DCStart PID=4; TID=-1; PName=System; ProceNum=3; DataLen=77; ProcessID=4; ParentID=0; ImageFileName=System; PageDirectoryBase=0x001aa000; Flags=Protected; SessionID=-1; ExitStatus=259; UniqueProcessKey=0xffffe000cd898700; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 6.023: KernelTraceControl/ImageID/FileVersion PID=4; TID=-1; PName=System; ProceNum=3; DataLen=336; ImageSize=1,552,384; TimeDateStamp=1,461,386,111; BuildTime=16/04/23 04:35:11.00...; OrigFileName=ntdll.dll; FileDescription=NT Layer DLL; FileVersion=10.0.10586.306 (th2_...; BinFileVersion=10.0.10586.306; VerLanguage=1033; ProductName=Microsoft® Windows® ...; CompanyName=Microsoft Corporatio...; ProductVersion=10.0.10586.306; FileId=; ProgramId=; 
EVENT 6.023: KernelTraceControl/ImageID PID=4; TID=-1; PName=System; ProceNum=3; DataLen=44; ImageBase=0x77740000; ImageSize=1,552,384; ProcessID=0; TimeDateStamp=1,461,386,111; BuildTime=16/04/23 04:35:11.00...; OriginalFileName=ntdll.dll; 
EVENT 6.023: KernelTraceControl/ImageID/DbgID_RSDS PID=4; TID=-1; PName=System; ProceNum=3; DataLen=43; ImageBase=0x77740000; GuidSig=94fd57a2-0b2b-4917-a...; Age=1; PDBFileName=wntdll.pdb; 
EVENT 6.023: Windows Kernel/Image/DCStart PID=4; TID=-1; PName=System; ProceNum=3; DataLen=158; ImageBase=0x77740000; ImageSize=1,552,384; ImageChecksum=1,590,868; TimeDateStamp=0; DefaultBase=0x77740000; BuildTime=70/01/01 00:00:00.00...; FileName=C:\Windows\SysWOW64\...; 
EVENT 6.029: KernelTraceControl/ImageID/FileVersion PID=4; TID=-1; PName=System; ProceNum=3; DataLen=336; ImageSize=1,839,104; TimeDateStamp=1,461,383,915; BuildTime=16/04/23 03:58:35.00...; OrigFileName=ntdll.dll; FileDescription=NT Layer DLL; FileVersion=10.0.10586.306 (th2_...; BinFileVersion=10.0.10586.306; VerLanguage=1033; ProductName=Microsoft® Windows® ...; CompanyName=Microsoft Corporatio...; ProductVersion=10.0.10586.306; FileId=; ProgramId=; 
EVENT 6.029: KernelTraceControl/ImageID PID=4; TID=-1; PName=System; ProceNum=3; DataLen=44; ImageBase=0x7fff7f790000; ImageSize=1,839,104; ProcessID=0; TimeDateStamp=1,461,383,915; BuildTime=16/04/23 03:58:35.00...; OriginalFileName=ntdll.dll; 
EVENT 6.029: KernelTraceControl/ImageID/DbgID_RSDS PID=4; TID=-1; PName=System; ProceNum=3; DataLen=42; ImageBase=0x7fff7f790000; GuidSig=bdab1670-3fb6-4772-a...; Age=1; PDBFileName=ntdll.pdb; 
EVENT 6.029: Windows Kernel/Image/DCStart PID=4; TID=-1; PName=System; ProceNum=3; DataLen=158; ImageBase=0x7fff7f790000; ImageSize=1,839,104; ImageChecksum=1,829,657; TimeDateStamp=0; DefaultBase=0x7fff7f790000; BuildTime=70/01/01 00:00:00.00...; FileName=C:\Windows\System32\...; 
EVENT 6.036: KernelTraceControl/ImageID/FileVersion PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=354; ImageSize=8,175,616; TimeDateStamp=1,461,384,261; BuildTime=16/04/23 04:04:21.00...; OrigFileName=ntkrnlmp.exe; FileDescription=NT Kernel & System; FileVersion=10.0.10586.306 (th2_...; BinFileVersion=10.0.10586.306; VerLanguage=1033; ProductName=Microsoft® Windows® ...; CompanyName=Microsoft Corporatio...; ProductVersion=10.0.10586.306; FileId=; ProgramId=; 
EVENT 6.036: KernelTraceControl/ImageID PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=50; ImageBase=0xfffff803c0e04000; ImageSize=8,175,616; ProcessID=0; TimeDateStamp=1,461,384,261; BuildTime=16/04/23 04:04:21.00...; OriginalFileName=ntkrnlmp.exe; 
EVENT 6.036: KernelTraceControl/ImageID/DbgID_RSDS PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=45; ImageBase=0xfffff803c0e04000; GuidSig=1ac738fb-cdc0-4306-8...; Age=1; PDBFileName=ntkrnlmp.pdb; 
EVENT 6.036: Windows Kernel/Image/DCStart PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=124; ImageBase=0xfffff803c0e04000; ImageSize=8,175,616; ImageChecksum=7,527,605; TimeDateStamp=1,461,384,261; DefaultBase=0x00000000; BuildTime=16/04/23 04:04:21.00...; FileName=C:\Windows\system32\...; 
EVENT 6.037: KernelTraceControl/ImageID/FileVersion PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=348; ImageSize=471,040; TimeDateStamp=1,446,171,002; BuildTime=15/10/30 02:10:02.00...; OrigFileName=hal.dll; FileDescription=Hardware Abstraction...; FileVersion=10.0.10586.0 (th2_re...; BinFileVersion=10.0.10586.0; VerLanguage=1033; ProductName=Microsoft® Windows® ...; CompanyName=Microsoft Corporatio...; ProductVersion=10.0.10586.0; FileId=; ProgramId=; 
EVENT 6.037: KernelTraceControl/ImageID PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=40; ImageBase=0xfffff803c15d0000; ImageSize=471,040; ProcessID=0; TimeDateStamp=1,446,171,002; BuildTime=15/10/30 02:10:02.00...; OriginalFileName=hal.dll; 
EVENT 6.037: KernelTraceControl/ImageID/DbgID_RSDS PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=40; ImageBase=0xfffff803c15d0000; GuidSig=81c1af69-0083-498b-a...; Age=1; PDBFileName=hal.pdb; 
EVENT 6.037: Windows Kernel/Image/DCStart PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=114; ImageBase=0xfffff803c15d0000; ImageSize=471,040; ImageChecksum=480,341; TimeDateStamp=1,446,171,002; DefaultBase=0x00000000; BuildTime=15/10/30 02:10:02.00...; FileName=C:\Windows\system32\...; 
EVENT 6.037: KernelTraceControl/ImageID/FileVersion PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=328; ImageSize=45,056; TimeDateStamp=1,446,172,984; BuildTime=15/10/30 02:43:04.00...; OrigFileName=kd.dll; FileDescription=Local Kernel Debugge...; FileVersion=10.0.10586.0 (th2_re...; BinFileVersion=10.0.10586.0; VerLanguage=1033; ProductName=Microsoft® Windows® ...; CompanyName=Microsoft Corporatio...; ProductVersion=10.0.10586.0; FileId=; ProgramId=; 
EVENT 6.037: KernelTraceControl/ImageID PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=38; ImageBase=0xfffff803bff99000; ImageSize=45,056; ProcessID=0; TimeDateStamp=1,446,172,984; BuildTime=15/10/30 02:43:04.00...; OriginalFileName=kd.dll; 
EVENT 6.037: KernelTraceControl/ImageID/DbgID_RSDS PID=0; TID=19564; PName=Idle; ProceNum=3; DataLen=39; ImageBase=0xfffff803bff99000; GuidSig=80eb7103-3959-40e7-8...; Age=1; PDBFileName=kd.pdb; 
EVENT 6.037: Windows Kernel/Image/DCStart PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=112; ImageBase=0xfffff803bff99000; ImageSize=45,056; ImageChecksum=28,350; TimeDateStamp=1,446,172,984; DefaultBase=0x00000000; BuildTime=15/10/30 02:43:04.00...; FileName=C:\Windows\system32\...; 
EVENT 6.135: Windows Kernel/Process/DCStart PID=368; TID=-1; PName=smss; ProceNum=2; DataLen=137; ProcessID=368; ParentID=4; ImageFileName=smss.exe; PageDirectoryBase=0x97280000; Flags=Protected; SessionID=-1; ExitStatus=259; UniqueProcessKey=0xffffe000cf8ff840; CommandLine=\SystemRoot\System32...; PackageFullName=; ApplicationID=; 
EVENT 6.171: Windows Kernel/Process/DCStart PID=468; TID=-1; PName=csrss; ProceNum=2; DataLen=568; ProcessID=468; ParentID=460; ImageFileName=csrss.exe; PageDirectoryBase=0x09256000; Flags=Protected; SessionID=0; ExitStatus=259; UniqueProcessKey=0xffffe000cff78600; CommandLine=%SystemRoot%\system3...; PackageFullName=; ApplicationID=; 
EVENT 6.377: Windows Kernel/Process/DCStart PID=532; TID=-1; PName=csrss; ProceNum=2; DataLen=568; ProcessID=532; ParentID=524; ImageFileName=csrss.exe; PageDirectoryBase=0x216bc000; Flags=Protected; SessionID=1; ExitStatus=259; UniqueProcessKey=0xffffe000d056b6c0; CommandLine=%SystemRoot%\system3...; PackageFullName=; ApplicationID=; 
EVENT 6.476: Windows Kernel/PerfInfo/Sample PID=6416; TID=21828; PName=iexplore; ProceNum=3; DataLen=16; InstructionPointer=0x6bbce766; ProcessorNumber=3; Priority=8; ExecutingDPC=False; ExecutingISR=False; Rank=0; Count=1; 
EVENT 6.476: Windows Kernel/PerfInfo/Sample PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=16; InstructionPointer=0x1069054a; ProcessorNumber=0; Priority=8; ExecutingDPC=False; ExecutingISR=False; Rank=0; Count=1; 
EVENT 6.476: Windows Kernel/PerfInfo/Sample PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=16; InstructionPointer=0xfffff803c121ac9e; ProcessorNumber=2; Priority=9; ExecutingDPC=False; ExecutingISR=False; Rank=0; Count=1; 
EVENT 6.477: Windows Kernel/PerfInfo/Sample PID=6416; TID=22524; PName=iexplore; ProceNum=1; DataLen=16; InstructionPointer=0x6bf8265a; ProcessorNumber=1; Priority=10; ExecutingDPC=False; ExecutingISR=False; Rank=0; Count=1; 
EVENT 7.033: KernelTraceControl/ImageID/None PID=680; TID=-1; PName=lsass; ProceNum=2; DataLen=12; 
EVENT 7.474: Windows Kernel/PerfInfo/Sample PID=6416; TID=11624; PName=iexplore; ProceNum=3; DataLen=16; InstructionPointer=0x6bd6ccfc; ProcessorNumber=3; Priority=8; ExecutingDPC=False; ExecutingISR=False; Rank=0; Count=1; 
EVENT 8.226: Windows Kernel/DiskIO/WriteInit PID=4; TID=23944; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000d5451420; 
EVENT 8.671: Windows Kernel/DiskIO/Write PID=4; TID=23944; PName=System; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, Write, Defe...; Priority=Normal; TransferSize=65,536; ByteOffset=9,557,975,040; Irp=0xffffe000d5451420; ElapsedTimeMSec=0.446; DiskServiceTimeMSec=0.446; FileKey=0xffffc0019a3dc150; FileName=C:\temp\PerfViewData...; 
EVENT 10.192: Windows Kernel/DiskIO/WriteInit PID=4; TID=23944; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000d5451420; 
EVENT 10.924: Windows Kernel/DiskIO/Write PID=4; TID=23944; PName=System; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, Write, Defe...; Priority=Normal; TransferSize=65,536; ByteOffset=9,558,040,576; Irp=0xffffe000d5451420; ElapsedTimeMSec=0.732; DiskServiceTimeMSec=0.732; FileKey=0xffffc0019a3dc150; FileName=C:\temp\PerfViewData...; 
EVENT 11.953: Windows Kernel/DiskIO/WriteInit PID=4; TID=23944; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000d6d6b010; 
EVENT 11.967: Windows Kernel/DiskIO/WriteInit PID=4; TID=23944; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000ceebeb40; 
EVENT 12.349: Windows Kernel/DiskIO/Write PID=4; TID=23944; PName=System; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=AssociatedIrp; Priority=Normal; TransferSize=4,096; ByteOffset=9,558,106,112; Irp=0xffffe000d6d6b010; ElapsedTimeMSec=0.396; DiskServiceTimeMSec=0.396; FileKey=0xffffc0019a3dc150; FileName=C:\temp\PerfViewData...; 
EVENT 12.351: Windows Kernel/DiskIO/Write PID=4; TID=23944; PName=System; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=AssociatedIrp; Priority=Normal; TransferSize=61,440; ByteOffset=3,043,532,800; Irp=0xffffe000ceebeb40; ElapsedTimeMSec=0.384; DiskServiceTimeMSec=0.384; FileKey=0xffffc0019a3dc150; FileName=C:\temp\PerfViewData...; 
EVENT 13.664: Windows Kernel/DiskIO/WriteInit PID=4; TID=23944; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000d5451420; 
EVENT 14.139: Windows Kernel/DiskIO/Write PID=4; TID=23944; PName=System; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, Write, Defe...; Priority=Normal; TransferSize=65,536; ByteOffset=3,043,594,240; Irp=0xffffe000d5451420; ElapsedTimeMSec=0.475; DiskServiceTimeMSec=0.475; FileKey=0xffffc0019a3dc150; FileName=C:\temp\PerfViewData...; 
EVENT 14.694: KernelTraceControl/ImageID/None PID=1820; TID=-1; PName=spoolsv; ProceNum=2; DataLen=12; 
EVENT 15.620: KernelTraceControl/ImageID/DbgID_ILRSDS PID=1712; TID=-1; PName=Aegis.WindowsService; ProceNum=2; DataLen=168; ImageBase=0x00c50000; GuidSig=9557c59f-ba57-4511-b...; Age=1; PDBFileName=f:\binaries\Intermed...; 
EVENT 15.626: KernelTraceControl/ImageID/DbgID_ILRSDS PID=1712; TID=-1; PName=Aegis.WindowsService; ProceNum=2; DataLen=58; ImageBase=0x00c60000; GuidSig=ea17b53c-1b4c-49a4-9...; Age=1; PDBFileName=System.ServiceProces...; 
EVENT 15.632: KernelTraceControl/ImageID/DbgID_ILRSDS PID=1712; TID=-1; PName=Aegis.WindowsService; ProceNum=2; DataLen=50; ImageBase=0x198a0000; GuidSig=5274cf64-bdc5-4eae-a...; Age=1; PDBFileName=SMDiagnostics.pdb; 
EVENT 15.642: KernelTraceControl/ImageID/DbgID_ILRSDS PID=1712; TID=-1; PName=Aegis.WindowsService; ProceNum=2; DataLen=66; ImageBase=0x19900000; GuidSig=5dda8dd7-f6d0-4d59-a...; Age=1; PDBFileName=System.ServiceModel....; 
EVENT 15.659: KernelTraceControl/ImageID/DbgID_ILRSDS PID=1712; TID=-1; PName=Aegis.WindowsService; ProceNum=2; DataLen=57; ImageBase=0x199d0000; GuidSig=870cb491-dac3-444a-a...; Age=1; PDBFileName=System.Configuration...; 
EVENT 24.270: KernelTraceControl/ImageID/None PID=3516; TID=-1; PName=explorer; ProceNum=2; DataLen=12; 
EVENT 24.569: KernelTraceControl/ImageID/None PID=3516; TID=-1; PName=explorer; ProceNum=2; DataLen=12; 
EVENT 25.745: KernelTraceControl/ImageID/None PID=4424; TID=-1; PName=TabTip; ProceNum=2; DataLen=12; 
EVENT 36.569: Windows Kernel/PerfInfo/CollectionStart PID=11636; TID=19564; PName=PerfView; ProceNum=1; DataLen=24; SampleSource=0; NewInterval=10,000; OldInterval=10,000; 
EVENT 36.570: Windows Kernel/EventTrace/RundownComplete PID=-1; TID=-1; PName=; ProceNum=1; DataLen=0; 
EVENT 48.816: Windows Kernel/Thread/Start PID=4; TID=16788; PName=System; ProceNum=0; DataLen=72; StackBase=0xffffd0002c107000; StackLimit=0xffffd0002c101000; UserStackBase=0x00000000; UserStackLimit=0x00000000; StartAddr=0x0000000f; Win32StartAddr=0xfffff803c11c8528; TebBase=0x00000000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=19,564; ParentProcessID=11,636; 
EVENT 56.449: Windows Kernel/Thread/Start PID=11636; TID=17332; PName=PerfView; ProceNum=0; DataLen=72; StackBase=0xffffd0002c100000; StackLimit=0xffffd0002c0fa000; UserStackBase=0x05abfd20; UserStackLimit=0x05ab8000; StartAddr=0x0000000f; Win32StartAddr=0x7776c6d0; TebBase=0x01085000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=36; ParentProcessID=4; 
EVENT 57.681: Windows Kernel/TcpIp/SendIPV6 PID=4; TID=-1; PName=System; ProceNum=1; DataLen=64; size=128; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=30,922; sport=445; startime=82,129,693; endtime=82,129,698; seqnum=0; connid=0x00000000; 
EVENT 60.905: Windows Kernel/UdpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=1,218; dport=62,087; sport=3,389; seqnum=0; connid=0x00000000; 
EVENT 60.996: Windows Kernel/UdpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=1,218; dport=62,087; sport=3,389; seqnum=0; connid=0x00000000; 
EVENT 61.019: Windows Kernel/UdpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=189; dport=62,087; sport=3,389; seqnum=0; connid=0x00000000; 
EVENT 62.366: Windows Kernel/UdpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=59; dport=62,087; sport=3,389; seqnum=0; connid=0x00000000; 
EVENT 62.398: Windows Kernel/UdpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=1,218; dport=62,087; sport=3,389; seqnum=0; connid=0x00000000; 
EVENT 64.703: Windows Kernel/UdpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=12; dport=3,389; sport=62,087; seqnum=0; connid=0x00000000; 
EVENT 64.727: Windows Kernel/UdpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=12; dport=3,389; sport=62,087; seqnum=0; connid=0x00000000; 
EVENT 64.738: Windows Kernel/UdpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=12; dport=3,389; sport=62,087; seqnum=0; connid=0x00000000; 
EVENT 68.314: Windows Kernel/UdpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=12; dport=3,389; sport=62,087; seqnum=0; connid=0x00000000; 
EVENT 68.329: Windows Kernel/UdpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=12; dport=3,389; sport=62,087; seqnum=0; connid=0x00000000; 
EVENT 90.713: PerfView/ManifestData PID=11636; TID=17332; PName=PerfView; ProceNum=2; DataLen=16163; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=16163; 
EVENT 159.406: PerfView/Tracing/Start PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=0; 
EVENT 166.246: PerfView/SessionParameters PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=90; sessionName=NT Kernel Logger; sessionFileName=PerfViewData.kernel....; bufferSizeMB=64; circularBuffSizeMB=0; 
EVENT 166.651: PerfView/KernelEnableParameters PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=8; keywords=Process|Thread|Image...; stacks=Process|Thread|Image...; 
EVENT 166.656: PerfView/SessionParameters PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=74; sessionName=PerfViewSession; sessionFileName=PerfViewData.etl; bufferSizeMB=64; circularBuffSizeMB=0; 
EVENT 166.724: PerfView/ProviderEnableParameters PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=48; providerName=DotNet; providerGuid=319dc449-ada5-50f7-4...; level=Verbose; keywords=0xffffffffffffffff; stacks=1; values=; 
EVENT 166.978: PerfView/ProviderEnableParameters PID=11636; TID=19564; PName=PerfView; ProceNum=0; DataLen=110; providerName=Microsoft-Windows-Ke...; providerGuid=b675ec37-bdb6-4648-b...; level=Verbose; keywords=0x00000070; stacks=1; values=; 
EVENT 167.114: KernelTraceControl/MetaData/EventInfo PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=976; 
EVENT 167.114: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=48; ProviderName=b675ec37-bdb6-4648-b...; SessionName=PerfViewSession; 
EVENT 167.125: PerfView/ProviderEnableParameters PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=50; providerName=ASP.NET; providerGuid=aff081fe-0247-4275-9...; level=Verbose; keywords=0xfffffffffffffffd; stacks=0; values=; 
EVENT 168.925: PerfView/ProviderEnableParameters PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=86; providerName=*Microsoft-Windows-A...; providerGuid=ee799f41-cfa5-550b-b...; level=Informational; keywords=0xffffffffffffffff; stacks=1; values=; 
EVENT 169.065: PerfView/ProviderEnableParameters PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=78; providerName=Microsoft-Windows-II...; providerGuid=de4649c9-15e8-4fea-9...; level=Critical; keywords=0x00000000; stacks=0; values=; 
EVENT 169.318: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=48; ProviderName=b2a40f1f-a05a-4dfd-8...; SessionName=PerfViewSession; 
EVENT 169.433: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=11636; TID=19564; PName=PerfView; ProceNum=1; DataLen=48; ProviderName=ffdb9886-80f3-4540-a...; SessionName=PerfViewSession; 
EVENT 169.589: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=11636; TID=19564; PName=PerfView; ProceNum=0; DataLen=48; ProviderName=43d1a55c-76d6-4f7e-9...; SessionName=PerfViewSession; 
EVENT 169.695: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE PID=11636; TID=19564; PName=PerfView; ProceNum=1; DataLen=48; ProviderName=c651f5f6-1c0d-492e-8...; SessionName=PerfViewSession; 
EVENT 170.723: KernelTraceControl/MetaData/EventInfo PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=316; 
EVENT 170.723: Microsoft-JScript/MethodRundown/DCStartInit PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=0; 
EVENT 170.726: KernelTraceControl/MetaData/EventInfo PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=580; 
EVENT 170.726: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=4; ScriptContextID=0x0f54b438; 
EVENT 170.733: Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=4; ScriptContextID=0x0f709980; 
EVENT 170.735: KernelTraceControl/MetaData/EventInfo PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=1004; 
EVENT 170.735: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=84; SourceID=37; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/S...; 
EVENT 170.736: Microsoft-JScript/ScriptContextRundown/SourceDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=76; SourceID=38; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/i...; 
EVENT 170.779: Windows Kernel/DiskIO/ReadInit PID=6416; TID=18968; PName=iexplore; ProceNum=2; DataLen=12; Irp=0xffffe000ce16bb40; 
EVENT 170.869: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=11636; TID=17332; PName=PerfView; ProceNum=1; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=10; 
EVENT 170.881: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=22; SegmentSize=268,435,456; LargeObjectSegmentSize=134,217,728; ServerGC=False; ClrInstanceID=8; 
EVENT 170.894: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=10; 
EVENT 171.831: System.Diagnostics.Eventing.FrameworkEventSource/ManifestData PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=2; DataLen=23708; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=23708; 
EVENT 171.889: System.Diagnostics.Eventing.FrameworkEventSource/ManifestData PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=1; DataLen=23708; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=23708; 
EVENT 172.143: KernelTraceControl/MetaData/EventInfo PID=356; TID=5532; PName=svchost; ProceNum=2; DataLen=1628; 
EVENT 172.143: KernelTraceControl/MetaData/EventMapInfo PID=356; TID=5532; PName=svchost; ProceNum=2; DataLen=116; 
EVENT 172.143: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=356; TID=5532; PName=svchost; ProceNum=2; DataLen=47; Interface=Ethernet; TotalServerCount=3; Index=1; DynamicAddress=dynamic; Address=10.221.226.12:0; 
EVENT 172.144: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=356; TID=5532; PName=svchost; ProceNum=2; DataLen=47; Interface=Ethernet; TotalServerCount=3; Index=2; DynamicAddress=dynamic; Address=10.222.118.22:0; 
EVENT 172.145: Microsoft-Windows-DNS-Client/DnsServerForInterface PID=356; TID=5532; PName=svchost; ProceNum=2; DataLen=47; Interface=Ethernet; TotalServerCount=3; Index=3; DynamicAddress=dynamic; Address=10.221.228.12:0; 
EVENT 172.146: Microsoft-Windows-DNS-Client/DnsNoServerConfigV6 PID=356; TID=5532; PName=svchost; ProceNum=2; DataLen=8; Location=0; Context=0; 
EVENT 174.340: System.Diagnostics.Eventing.FrameworkEventSource/ManifestData PID=11636; TID=17332; PName=PerfView; ProceNum=0; DataLen=23708; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=23708; 
EVENT 175.924: PerfView/ClrEnableParameters PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=16; keywords=0x4c14fccbd; level=Verbose; 
EVENT 176.056: Microsoft-Windows-DotNETRuntime/Method/JittingStarted PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=264; MethodID=16,612,424; ModuleID=16,596,924; MethodToken=100,665,128; MethodILSize=1,986; MethodNamespace=PerfView.CommandProc...; MethodName=ParsedArgsAsString; MethodSignature=class System.String ...; ClrInstanceID=10; 
EVENT 178.460: Windows Kernel/DiskIO/Read PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, MountComple...; Priority=Normal; TransferSize=28,672; ByteOffset=49,797,137,408; Irp=0xffffe000ce16bb40; ElapsedTimeMSec=7.679; DiskServiceTimeMSec=7.679; FileKey=0xffffc00199c3c9d0; FileName=C:\Windows\SysWOW64\...; 
EVENT 178.510: Windows Kernel/Memory/HardFault PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=40; ElapsedTimeMSec=7.758; ReadOffset=2,229,248; VirtualAddress=0x6ef639b8; FileKey=0xffffc00199c3c9d0; ByteCount=28,672; FileName=C:\Windows\SysWOW64\...; 
EVENT 178.541: KernelTraceControl/MetaData/EventMapInfo PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=408; 
EVENT 178.541: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=94; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fc7; MethodSize=8; MethodID=9,100; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=276; Column=30; MethodName=Silverlight.createOb...; 
EVENT 178.548: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=64; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fe7; MethodSize=8; MethodID=9,092; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=1; Column=1; MethodName=Global code; 
EVENT 178.551: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=88; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fb7; MethodSize=8; MethodID=9,094; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=15; Column=27; MethodName=Silverlight.isInstal...; 
EVENT 178.553: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=104; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0fa7; MethodSize=8; MethodID=9,104; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=368; Column=35; MethodName=Silverlight.HtmlAttr...; 
EVENT 178.556: Microsoft-JScript/MethodRundown/MethodDCStart PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=84; ScriptContextID=0x0f709980; MethodStartAddress=0x0c8a0f9f; MethodSize=8; MethodID=9,096; MethodFlags=0; MethodAddressRangeID=Interpreted; SourceID=37; Line=119; Column=25; MethodName=Silverlight.__startu...; 
EVENT 178.567: Microsoft-JScript/MethodRundown/DCStartComplete PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=0; 
EVENT 178.568: Microsoft-JScript/MethodRundown/DCEndInit PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=0; 
EVENT 178.569: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=4; ScriptContextID=0x0f54b438; 
EVENT 178.571: Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=4; ScriptContextID=0x0f709980; 
EVENT 178.572: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=84; SourceID=37; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/S...; 
EVENT 178.573: Microsoft-JScript/ScriptContextRundown/SourceDCEnd PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=76; SourceID=38; ScriptContextID=0x0f709980; SourceFlags=0; Url=file:///C:/temp/sl/i...; 
EVENT 178.581: KernelTraceControl/MetaData/EventMapInfo PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=198; 
EVENT 178.581: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=276; MethodID=16,612,424; ModuleID=16,596,924; MethodStartAddress=0x05a22370; MethodSize=2,520; MethodToken=100,665,128; MethodFlags=Jitted; MethodNamespace=PerfView.CommandProc...; MethodName=ParsedArgsAsString; MethodSignature=class System.String ...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 178.581: Microsoft-JScript/MethodRundown/DCEndComplete PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=0; 
EVENT 178.594: Microsoft-Windows-DotNETRuntimePrivate/GC/Settings PID=6416; TID=18968; PName=iexplore; ProceNum=0; DataLen=22; SegmentSize=16,777,216; LargeObjectSegmentSize=16,777,216; ServerGC=False; ClrInstanceID=101; 
EVENT 178.663: Microsoft-Windows-DotNETRuntime/Method/JittingStarted PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=160; MethodID=89,894,928; ModuleID=16,615,016; MethodToken=100,663,481; MethodILSize=46; MethodNamespace=Utilities.Command; MethodName=Quote; MethodSignature=class System.String ...; ClrInstanceID=10; 
EVENT 178.760: KernelTraceControl/MetaData/EventMapInfo PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=124; 
EVENT 178.760: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=10; AllocationAmount=106,496; AllocationKind=Small; ClrInstanceID=101; AllocationAmount64=0; TypeID=0x00000000; TypeName=; HeapIndex=0; Address=0x00000000; ObjectSize=0; 
EVENT 178.812: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=172; MethodID=89,894,928; ModuleID=16,615,016; MethodStartAddress=0x05a22d58; MethodSize=67; MethodToken=100,663,481; MethodFlags=Jitted; MethodNamespace=Utilities.Command; MethodName=Quote; MethodSignature=class System.String ...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 179.437: Microsoft-Windows-DotNETRuntime/Method/JittingStarted PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=142; MethodID=89,877,400; ModuleID=16,596,924; MethodToken=100,666,501; MethodILSize=34; MethodNamespace=PerfView.AppLog; MethodName=get_VersionNumber; MethodSignature=class System.String ...; ClrInstanceID=10; 
EVENT 179.632: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=154; MethodID=89,877,400; ModuleID=16,596,924; MethodStartAddress=0x05a22db0; MethodSize=84; MethodToken=100,666,501; MethodFlags=Jitted; MethodNamespace=PerfView.AppLog; MethodName=get_VersionNumber; MethodSignature=class System.String ...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 179.727: Microsoft-Windows-DotNETRuntime/Method/JittingStarted PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=254; MethodID=89,887,924; ModuleID=16,596,924; MethodToken=100,663,513; MethodILSize=12; MethodNamespace=PerfViewLogger; MethodName=CommandLineParameter...; MethodSignature=instance void  (clas...; ClrInstanceID=10; 
EVENT 179.824: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=266; MethodID=89,887,924; ModuleID=16,596,924; MethodStartAddress=0x05a22e18; MethodSize=23; MethodToken=100,663,513; MethodFlags=Jitted; MethodNamespace=PerfViewLogger; MethodName=CommandLineParameter...; MethodSignature=instance void  (clas...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 179.857: Microsoft-Windows-DotNETRuntime/Method/JittingStarted PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=298; MethodID=89,886,128; ModuleID=89,881,896; MethodToken=100,663,472; MethodILSize=241; MethodNamespace=Microsoft.Diagnostic...; MethodName=WriteEvent; MethodSignature=instance void  (int3...; ClrInstanceID=10; 
EVENT 179.929: Windows Kernel/UdpIp/Recv PID=4; TID=-1; PName=System; ProceNum=0; DataLen=32; context=0x3200000004; saddr=10.199.101.124; sport=137; size=50; daddr=10.199.101.255; dport=137; dsize=0; 
EVENT 180.048: KernelTraceControl/MetaData/EventMapInfo PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=474; 
EVENT 180.048: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStart PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=10; Reason=SuspendForGC; Count=258; ClrInstanceID=101; 
EVENT 180.069: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStop PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=2; ClrInstanceID=101; 
EVENT 180.088: Microsoft-Windows-DotNETRuntime/GC/Start PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=18; Count=259; Reason=AllocSmall; Depth=1; Type=NonConcurrentGC; ClrInstanceID=101; ClientSequenceNumber=0; 
EVENT 180.185: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkStackRoots PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 180.186: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkFinalizeQueueRoots PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 180.192: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkHandles PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 180.206: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkCards PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 180.275: Microsoft-Windows-DotNETRuntimePrivate/GC/GlobalHeapHistory PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=30; FinalYoungestDesired=5,242,880; NumHeaps=1; CondemnedGeneration=1; Gen0ReductionCount=0; Reason=AllocSmall; GlobalMechanisms=Compaction, Promotio...; ClrInstanceID=101; PauseMode=; MemoryPressure=; CondemnReasons0=; CondemnReasons1=; Count=; 
EVENT 180.276: Microsoft-Windows-DotNETRuntimePrivate/GC/PerHeapHistory PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=221; ClrInstanceID=101; FreeListAllocated=; FreeListRejected=; EndOfSegAllocated=; CondemnedAllocated=; PinnedAllocated=; PinnedAllocatedAdvance=; RunningFreeListEfficiency=; CondemnReasons0=1,048,580; CondemnReasons1=; CompactMechanisms=compact_low_ephemera...; ExpandMechanisms=not_specified; ConcurrentCompactMechanisms=; HeapIndex=0; ExtraGen0Commit=; Count=; MemoryPressure=88; 
EVENT 180.277: Microsoft-Windows-DotNETRuntime/GC/Stop PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=10; Count=259; Depth=1; ClrInstanceID=101; 
EVENT 180.279: Microsoft-Windows-DotNETRuntime/GC/HeapStats PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=94; TotalHeapSize=4,137,452; TotalPromoted=18,152; Depth=1; GenerationSize0=12; TotalPromotedSize0=10,688; GenerationSize1=10,700; TotalPromotedSize1=7,464; GenerationSize2=3,179,564; TotalPromotedSize2=0; GenerationSize3=947,176; TotalPromotedSize3=0; FinalizationPromotedSize=0; FinalizationPromotedCount=0; PinnedObjectCount=0; SinkBlockCount=0; GCHandleCount=0; ClrInstanceID=101; GenerationSize4=0; TotalPromotedSize4=0; 
EVENT 180.280: Microsoft-Windows-DotNETRuntime/GC/RestartEEStart PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=2; ClrInstanceID=101; 
EVENT 180.288: Microsoft-Windows-DotNETRuntime/GC/RestartEEStop PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=2; ClrInstanceID=101; 
EVENT 180.679: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=10; AllocationAmount=106,496; AllocationKind=Small; ClrInstanceID=101; AllocationAmount64=0; TypeID=0x00000000; TypeName=; HeapIndex=0; Address=0x00000000; ObjectSize=0; 
EVENT 180.688: Microsoft-Windows-DotNETRuntime/Method/LoadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=310; MethodID=89,886,128; ModuleID=89,881,896; MethodStartAddress=0x05a22e40; MethodSize=317; MethodToken=100,663,472; MethodFlags=Jitted; MethodNamespace=Microsoft.Diagnostic...; MethodName=WriteEvent; MethodSignature=instance void  (int3...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 180.716: PerfView/CommandLineParameters PID=11636; TID=19564; PName=PerfView; ProceNum=3; DataLen=190; commandLine= "/DataFile:PerfView...; currentDirectory=C:\temp; version=1.9.0.0; 
EVENT 181.301: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=10; AllocationAmount=106,496; AllocationKind=Small; ClrInstanceID=101; AllocationAmount64=0; TypeID=0x00000000; TypeName=; HeapIndex=0; Address=0x00000000; ObjectSize=0; 
EVENT 181.948: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=6416; TID=11624; PName=iexplore; ProceNum=3; DataLen=10; AllocationAmount=106,496; AllocationKind=Small; ClrInstanceID=101; AllocationAmount64=0; TypeID=0x00000000; TypeName=; HeapIndex=0; Address=0x00000000; ObjectSize=0; 
EVENT 182.075: Windows Kernel/DiskIO/ReadInit PID=2192; TID=3140; PName=MsMpEng; ProceNum=0; DataLen=12; Irp=0xffffe000d6d6b010; 
EVENT 182.268: Windows Kernel/DiskIO/ReadInit PID=1556; TID=12364; PName=SettingSyncHost; ProceNum=1; DataLen=12; Irp=0xffffe000d3fc4010; 
EVENT 182.473: Microsoft-Windows-DotNETRuntime/GC/AllocationTick PID=6416; TID=19976; PName=iexplore; ProceNum=0; DataLen=10; AllocationAmount=106,496; AllocationKind=Small; ClrInstanceID=101; AllocationAmount64=0; TypeID=0x00000000; TypeName=; HeapIndex=0; Address=0x00000000; ObjectSize=0; 
EVENT 182.739: Windows Kernel/DiskIO/Read PID=1556; TID=12364; PName=SettingSyncHost; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, MountComple...; Priority=Normal; TransferSize=65,536; ByteOffset=8,622,645,248; Irp=0xffffe000d3fc4010; ElapsedTimeMSec=0.471; DiskServiceTimeMSec=0.471; FileKey=0xffffe000d0280970; FileName=C:\pagefile.sys; 
EVENT 182.993: Windows Kernel/Memory/HardFault PID=1556; TID=12364; PName=SettingSyncHost; ProceNum=1; DataLen=40; ElapsedTimeMSec=0.741; ReadOffset=206,282,752; VirtualAddress=0x1fb89f0dd70; FileKey=0xffffe000d0280970; ByteCount=65,536; FileName=C:\pagefile.sys; 
EVENT 183.293: Windows Kernel/DiskIO/ReadInit PID=1556; TID=12364; PName=SettingSyncHost; ProceNum=3; DataLen=12; Irp=0xffffe000d1bb5180; 
EVENT 183.468: Windows Kernel/DiskIO/Read PID=1556; TID=12364; PName=SettingSyncHost; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, MountComple...; Priority=Normal; TransferSize=65,536; ByteOffset=8,865,628,160; Irp=0xffffe000d1bb5180; ElapsedTimeMSec=0.176; DiskServiceTimeMSec=0.176; FileKey=0xffffe000d0280970; FileName=C:\pagefile.sys; 
EVENT 183.999: Windows Kernel/Memory/HardFault PID=1556; TID=12364; PName=SettingSyncHost; ProceNum=2; DataLen=40; ElapsedTimeMSec=0.714; ReadOffset=449,265,664; VirtualAddress=0x1fb85111a20; FileKey=0xffffe000d0280970; ByteCount=65,536; FileName=C:\pagefile.sys; 
EVENT 188.458: Windows Kernel/DiskIO/Read PID=2192; TID=3140; PName=MsMpEng; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, MountComple...; Priority=Normal; TransferSize=16,384; ByteOffset=4,633,165,824; Irp=0xffffe000d6d6b010; ElapsedTimeMSec=6.383; DiskServiceTimeMSec=6.383; FileKey=0xffffc0019a8de150; FileName=C:\temp\start.txt; 
EVENT 188.514: Windows Kernel/Memory/HardFault PID=2192; TID=3140; PName=MsMpEng; ProceNum=1; DataLen=40; ElapsedTimeMSec=6.466; ReadOffset=0; VirtualAddress=0x20a32d30ff0; FileKey=0xffffc0019a8de150; ByteCount=16,384; FileName=C:\temp\start.txt; 
EVENT 188.593: Windows Kernel/DiskIO/ReadInit PID=2192; TID=3140; PName=MsMpEng; ProceNum=1; DataLen=12; Irp=0xffffe000d3fc4010; 
EVENT 197.670: Windows Kernel/DiskIO/Read PID=2192; TID=3140; PName=MsMpEng; ProceNum=0; DataLen=52; DiskNumber=0; IrpFlags=Nocache, MountComple...; Priority=Normal; TransferSize=16,384; ByteOffset=62,111,541,248; Irp=0xffffe000d3fc4010; ElapsedTimeMSec=9.076; DiskServiceTimeMSec=9.076; FileKey=0xffffc00197ea2c00; FileName=C:\ProgramData\Micro...; 
EVENT 197.698: Windows Kernel/Memory/HardFault PID=2192; TID=3140; PName=MsMpEng; ProceNum=1; DataLen=40; ElapsedTimeMSec=9.127; ReadOffset=9,938,944; VirtualAddress=0x7fff4dbace20; FileKey=0xffffc00197ea2c00; ByteCount=16,384; FileName=C:\ProgramData\Micro...; 
EVENT 216.929: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStart PID=6416; TID=19976; PName=iexplore; ProceNum=1; DataLen=10; Reason=SuspendForGC; Count=259; ClrInstanceID=101; 
EVENT 217.255: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStop PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=2; ClrInstanceID=101; 
EVENT 217.273: Microsoft-Windows-DotNETRuntime/GC/Start PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=18; Count=260; Reason=AllocSmall; Depth=1; Type=NonConcurrentGC; ClrInstanceID=101; ClientSequenceNumber=0; 
EVENT 217.354: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkStackRoots PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 217.355: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkFinalizeQueueRoots PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 217.361: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkHandles PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 217.374: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkCards PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 217.426: Microsoft-Windows-DotNETRuntimePrivate/GC/GlobalHeapHistory PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=30; FinalYoungestDesired=5,242,880; NumHeaps=1; CondemnedGeneration=1; Gen0ReductionCount=0; Reason=AllocSmall; GlobalMechanisms=Compaction, Promotio...; ClrInstanceID=101; PauseMode=; MemoryPressure=; CondemnReasons0=; CondemnReasons1=; Count=; 
EVENT 217.427: Microsoft-Windows-DotNETRuntimePrivate/GC/PerHeapHistory PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=221; ClrInstanceID=101; FreeListAllocated=; FreeListRejected=; EndOfSegAllocated=; CondemnedAllocated=; PinnedAllocated=; PinnedAllocatedAdvance=; RunningFreeListEfficiency=; CondemnReasons0=1,048,580; CondemnReasons1=; CompactMechanisms=compact_low_ephemera...; ExpandMechanisms=not_specified; ConcurrentCompactMechanisms=; HeapIndex=0; ExtraGen0Commit=; Count=; MemoryPressure=88; 
EVENT 217.443: Microsoft-Windows-DotNETRuntime/GC/Stop PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=10; Count=260; Depth=1; ClrInstanceID=101; 
EVENT 217.444: Microsoft-Windows-DotNETRuntime/GC/HeapStats PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=94; TotalHeapSize=4,130,560; TotalPromoted=3,796; Depth=0; GenerationSize0=12; TotalPromotedSize0=3,796; GenerationSize1=3,808; TotalPromotedSize1=0; GenerationSize2=3,179,564; TotalPromotedSize2=0; GenerationSize3=947,176; TotalPromotedSize3=0; FinalizationPromotedSize=0; FinalizationPromotedCount=0; PinnedObjectCount=0; SinkBlockCount=0; GCHandleCount=0; ClrInstanceID=101; GenerationSize4=0; TotalPromotedSize4=0; 
EVENT 217.446: Microsoft-Windows-DotNETRuntime/GC/RestartEEStart PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=2; ClrInstanceID=101; 
EVENT 217.454: Microsoft-Windows-DotNETRuntime/GC/RestartEEStop PID=6416; TID=19976; PName=iexplore; ProceNum=2; DataLen=2; ClrInstanceID=101; 
EVENT 250.241: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStart PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=10; Reason=SuspendForGC; Count=260; ClrInstanceID=101; 
EVENT 250.265: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStop PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=2; ClrInstanceID=101; 
EVENT 250.284: Microsoft-Windows-DotNETRuntime/GC/Start PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=18; Count=261; Reason=AllocSmall; Depth=1; Type=NonConcurrentGC; ClrInstanceID=101; ClientSequenceNumber=0; 
EVENT 250.383: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkStackRoots PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 250.385: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkFinalizeQueueRoots PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 250.390: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkHandles PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 250.403: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkCards PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 250.479: Microsoft-Windows-DotNETRuntimePrivate/GC/GlobalHeapHistory PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=30; FinalYoungestDesired=5,242,880; NumHeaps=1; CondemnedGeneration=1; Gen0ReductionCount=0; Reason=AllocSmall; GlobalMechanisms=Compaction, Promotio...; ClrInstanceID=101; PauseMode=; MemoryPressure=; CondemnReasons0=; CondemnReasons1=; Count=; 
EVENT 250.480: Microsoft-Windows-DotNETRuntimePrivate/GC/PerHeapHistory PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=221; ClrInstanceID=101; FreeListAllocated=; FreeListRejected=; EndOfSegAllocated=; CondemnedAllocated=; PinnedAllocated=; PinnedAllocatedAdvance=; RunningFreeListEfficiency=; CondemnReasons0=1,048,580; CondemnReasons1=; CompactMechanisms=compact_low_ephemera...; ExpandMechanisms=not_specified; ConcurrentCompactMechanisms=; HeapIndex=0; ExtraGen0Commit=; Count=; MemoryPressure=88; 
EVENT 250.481: Microsoft-Windows-DotNETRuntime/GC/Stop PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=10; Count=261; Depth=1; ClrInstanceID=101; 
EVENT 250.482: Microsoft-Windows-DotNETRuntime/GC/HeapStats PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=94; TotalHeapSize=4,141,580; TotalPromoted=14,816; Depth=1; GenerationSize0=12; TotalPromotedSize0=11,088; GenerationSize1=11,100; TotalPromotedSize1=3,728; GenerationSize2=3,183,292; TotalPromotedSize2=0; GenerationSize3=947,176; TotalPromotedSize3=0; FinalizationPromotedSize=0; FinalizationPromotedCount=0; PinnedObjectCount=0; SinkBlockCount=0; GCHandleCount=0; ClrInstanceID=101; GenerationSize4=0; TotalPromotedSize4=0; 
EVENT 250.484: Microsoft-Windows-DotNETRuntime/GC/RestartEEStart PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=2; ClrInstanceID=101; 
EVENT 250.493: Microsoft-Windows-DotNETRuntime/GC/RestartEEStop PID=6416; TID=11624; PName=iexplore; ProceNum=2; DataLen=2; ClrInstanceID=101; 
EVENT 262.472: Windows Kernel/Thread/Stop PID=4272; TID=21648; PName=iexplore; ProceNum=1; DataLen=72; StackBase=0xffffd00086a4e000; StackLimit=0xffffd00086a48000; UserStackBase=0x358c100000; UserStackLimit=0x358c0fb000; StartAddr=0x0000000f; Win32StartAddr=0x7fff7c9664d0; TebBase=0x358acb4000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=-1; ParentProcessID=-1; 
EVENT 264.759: Windows Kernel/Thread/Start PID=11636; TID=400; PName=PerfView; ProceNum=3; DataLen=72; StackBase=0xffffd00086a4e000; StackLimit=0xffffd00086a48000; UserStackBase=0x05c1fd20; UserStackLimit=0x05c18000; StartAddr=0x0000000f; Win32StartAddr=0x73dbfdc2; TebBase=0x01088000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=19,564; ParentProcessID=11,636; 
EVENT 265.453: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=10; 
EVENT 265.456: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=6; Count=0; ClrInstanceID=10; 
EVENT 266.268: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_UNREGISTER PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=16; ProviderName=a8a71ac1-040f-54a2-0...; 
EVENT 266.311: System.Diagnostics.Eventing.FrameworkEventSource/ManifestData PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=23708; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=23708; 
EVENT 266.336: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_UNREGISTER PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=16; ProviderName=8e9f5090-2d75-4d03-8...; 
EVENT 266.353: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStart PID=11636; TID=400; PName=PerfView; ProceNum=2; DataLen=10; Reason=SuspendForShutdown; Count=-1; ClrInstanceID=10; 
EVENT 266.359: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStop PID=11636; TID=400; PName=PerfView; ProceNum=2; DataLen=2; ClrInstanceID=10; 
EVENT 266.361: Microsoft-Windows-DotNETRuntime/GC/RestartEEStart PID=11636; TID=400; PName=PerfView; ProceNum=2; DataLen=2; ClrInstanceID=10; 
EVENT 266.367: Microsoft-Windows-DotNETRuntime/GC/RestartEEStop PID=11636; TID=400; PName=PerfView; ProceNum=2; DataLen=2; ClrInstanceID=10; 
EVENT 266.381: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=10; 
EVENT 266.384: Microsoft-Windows-DotNETRuntime/GC/FinalizeObject PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=10; TypeName=System.WeakReference; ObjectID=0x02f15564; TypeID=0x6943b9a8; ClrInstanceID=10; 
EVENT 266.417: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=77; Count=1; ClrInstanceID=10; TypeID_0=0x6943b9a8; TypeName_0=System.WeakReference; 
EVENT 266.427: Microsoft-Windows-DotNETRuntime/GC/FinalizeObject PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=10; TypeName=System.WeakReference...; ObjectID=0x02ef974c; TypeID=0x69d862b4; ClrInstanceID=10; 
EVENT 266.457: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=272; Count=2; ClrInstanceID=10; TypeID_0=0x69d862b4; TypeName_0=System.WeakReference...; 
EVENT 266.465: Microsoft-Windows-DotNETRuntime/GC/FinalizeObject PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=10; TypeName=System.Diagnostics.P...; ObjectID=0x02e55554; TypeID=0x688b52b8; ClrInstanceID=10; 
EVENT 266.470: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=89; Count=1; ClrInstanceID=10; TypeID_0=0x688b52b8; TypeName_0=System.Diagnostics.P...; 
EVENT 266.477: Microsoft-Windows-DotNETRuntime/GC/FinalizeObject PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=10; TypeName=System.Diagnostics.P...; ObjectID=0x02e53540; TypeID=0x688b52b8; ClrInstanceID=10; 
EVENT 266.480: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=89; Count=1; ClrInstanceID=10; TypeID_0=0x688b52b8; TypeName_0=System.Diagnostics.P...; 
EVENT 266.482: Microsoft-Windows-DotNETRuntime/GC/FinalizeObject PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=10; TypeName=System.WeakReference; ObjectID=0x02e5016c; TypeID=0x6943b9a8; ClrInstanceID=10; 
EVENT 266.484: Microsoft-Windows-DotNETRuntime/Type/BulkType PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=77; Count=1; ClrInstanceID=10; TypeID_0=0x6943b9a8; TypeName_0=System.WeakReference; 
EVENT 266.924: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=11636; TID=24044; PName=PerfView; ProceNum=0; DataLen=6; Count=22; ClrInstanceID=10; 
EVENT 266.996: Microsoft-Windows-DotNETRuntime/AppDomainResourceManagement/ThreadCreated PID=11636; TID=400; PName=PerfView; ProceNum=2; DataLen=30; ManagedThreadID=19,629,416; AppDomainID=19,120,904; Flags=0; ManagedThreadIndex=4; OSThreadID=400; ClrInstanceID=10; 
EVENT 267.038: Windows Kernel/Thread/Stop PID=11636; TID=24044; PName=PerfView; ProceNum=2; DataLen=72; StackBase=0xffffd0002bf28000; StackLimit=0xffffd0002bf22000; UserStackBase=0x04fd0000; UserStackLimit=0x04fc1000; StartAddr=0x0000000f; Win32StartAddr=0x73d25fd4; TebBase=0x01079000; SubProcessTag=0; BasePriority=10; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=-1; ParentProcessID=-1; 
EVENT 267.042: Windows Kernel/Thread/Stop PID=11636; TID=400; PName=PerfView; ProceNum=1; DataLen=72; StackBase=0xffffd00086a4e000; StackLimit=0xffffd00086a48000; UserStackBase=0x05d20000; UserStackLimit=0x05d1e000; StartAddr=0x0000000f; Win32StartAddr=0x73dbfdc2; TebBase=0x01088000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=-1; ParentProcessID=-1; 
EVENT 267.130: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_UNREGISTER PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=16; ProviderName=152fdb2b-6e9d-4b60-b...; 
EVENT 267.146: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_UNREGISTER PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=16; ProviderName=a74efe00-14be-4ef9-9...; 
EVENT 267.153: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_UNREGISTER PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=16; ProviderName=a74efe00-14be-4ef9-9...; 
EVENT 267.266: Windows Kernel/Thread/Stop PID=11636; TID=17332; PName=PerfView; ProceNum=3; DataLen=72; StackBase=0xffffd0002c100000; StackLimit=0xffffd0002c0fa000; UserStackBase=0x05bc0000; UserStackLimit=0x05bbc000; StartAddr=0x0000000f; Win32StartAddr=0x7776c6d0; TebBase=0x01085000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=-1; ParentProcessID=-1; 
EVENT 267.281: Windows Kernel/Thread/Stop PID=11636; TID=20816; PName=PerfView; ProceNum=1; DataLen=72; StackBase=0xffffd0002c01d000; StackLimit=0xffffd0002c017000; UserStackBase=0x059c0000; UserStackLimit=0x059be000; StartAddr=0x0000000f; Win32StartAddr=0x75f475f0; TebBase=0x01082000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=-1; ParentProcessID=-1; 
EVENT 267.792: Microsoft-Windows-DotNETRuntime/Method/UnloadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=214; MethodID=89,886,608; ModuleID=89,881,896; MethodStartAddress=0x05a20048; MethodSize=646; MethodToken=100,663,513; MethodFlags=Jitted; MethodNamespace=Microsoft.Diagnostic...; MethodName=SendManifest; MethodSignature=instance bool  (unsi...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 267.806: Microsoft-Windows-DotNETRuntime/Method/UnloadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=492; MethodID=89,891,548; ModuleID=89,881,896; MethodStartAddress=0x05a202e0; MethodSize=129; MethodToken=100,664,031; MethodFlags=Jitted; MethodNamespace=Microsoft.Win32.Unsa...; MethodName=EventWriteTransferWr...; MethodSignature=int32  (int64,value ...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 267.812: Microsoft-Windows-DotNETRuntime/Method/UnloadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=402; MethodID=94,409,080; ModuleID=89,881,896; MethodStartAddress=0x05a20378; MethodSize=154; MethodToken=0; MethodFlags=Dynamic, Jitted; MethodNamespace=dynamicClass; MethodName=IL_STUB_PInvoke; MethodSignature=int32  (int64,value ...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 267.820: Microsoft-Windows-DotNETRuntime/Method/UnloadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=302; MethodID=89,886,012; ModuleID=89,881,896; MethodStartAddress=0x05a20430; MethodSize=1; MethodToken=100,663,462; MethodFlags=Jitted; MethodNamespace=Microsoft.Diagnostic...; MethodName=OnEventCommand; MethodSignature=instance void  (clas...; ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 267.825: Microsoft-Windows-DotNETRuntime/Method/UnloadVerbose PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=130; MethodID=89,887,864; ModuleID=16,596,924; MethodStartAddress=0x05a20448; MethodSize=18; MethodToken=100,663,508; MethodFlags=Jitted; MethodNamespace=PerfViewLogger; MethodName=StartTracing; MethodSignature=instance void  (); ClrInstanceID=10; ReJITID=0; OptimizationTier=Unknown; 
EVENT 269.103: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=272; ModuleID=16,596,924; AssemblyID=19,320,856; ModuleFlags=Manifest; ModuleILPath=C:\temp\PerfView.exe; ModuleNativePath=; ManagedPdbSignature=8f193340-8e5e-4da2-8...; ManagedPdbAge=1; ManagedPdbBuildPath=C:\Users\vancem\Sour...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=PerfView.exe; 
EVENT 269.206: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=158; AssemblyID=19,320,856; AppDomainID=19,120,904; AssemblyFlags=None; FullyQualifiedAssemblyName=PerfView, Version=1....; BindingID=0; ClrInstanceID=10; 
EVENT 269.223: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=562; ModuleID=1,744,048,128; AssemblyID=19,324,336; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ManagedPdbSignature=5005a16d-6f1d-4f57-8...; ManagedPdbAge=2; ManagedPdbBuildPath=System.Core.pdb; NativePdbSignature=ea350a39-df13-34a4-9...; NativePdbAge=1; NativePdbBuildPath=System.Core.ni.pdb; ModuleILFileName=System.Core.dll; 
EVENT 269.298: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=188; AssemblyID=19,324,336; AppDomainID=19,120,904; AssemblyFlags=Native; FullyQualifiedAssemblyName=System.Core, Version...; BindingID=0; ClrInstanceID=10; 
EVENT 269.310: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=502; ModuleID=1,751,584,768; AssemblyID=19,325,144; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ManagedPdbSignature=323a39dc-d55e-4a32-9...; ManagedPdbAge=2; ManagedPdbBuildPath=System.pdb; NativePdbSignature=3a4f0a84-904c-4b56-8...; NativePdbAge=1; NativePdbBuildPath=System.ni.pdb; ModuleILFileName=System.dll; 
EVENT 269.381: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=178; AssemblyID=19,325,144; AppDomainID=19,120,904; AssemblyFlags=Native; FullyQualifiedAssemblyName=System, Version=4.0....; BindingID=0; ClrInstanceID=10; 
EVENT 269.385: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=522; ModuleID=16,615,016; AssemblyID=19,441,096; ModuleFlags=Manifest; ModuleILPath=C:\Users\jeffschw\Ap...; ModuleNativePath=; ManagedPdbSignature=ea5b71d9-238b-460b-b...; ManagedPdbAge=1; ManagedPdbBuildPath=C:\Users\vancem\Sour...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=Microsoft.Diagnostic...; 
EVENT 269.461: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=222; AssemblyID=19,441,096; AppDomainID=19,120,904; AssemblyFlags=None; FullyQualifiedAssemblyName=Microsoft.Diagnostic...; BindingID=0; ClrInstanceID=10; 
EVENT 269.466: Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=532; ModuleID=89,854,440; AssemblyID=19,500,824; ModuleFlags=Manifest; ModuleILPath=C:\Users\jeffschw\Ap...; ModuleNativePath=; ManagedPdbSignature=b3af247c-db0d-49ff-a...; ManagedPdbAge=1; ManagedPdbBuildPath=C:\Users\vancem\Sour...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=Microsoft.Diagnostic...; 
EVENT 269.548: Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=220; AssemblyID=19,500,824; AppDomainID=19,120,904; AssemblyFlags=None; FullyQualifiedAssemblyName=Microsoft.Diagnostic...; BindingID=0; ClrInstanceID=10; 
EVENT 270.115: Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=44; AppDomainID=19,120,904; AppDomainFlags=268435459; AppDomainName=PerfView.exe; AppDomainIndex=1; ClrInstanceID=10; 
EVENT 270.223: Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload PID=11636; TID=19564; PName=PerfView; ProceNum=2; DataLen=44; AppDomainID=1,948,739,184; AppDomainFlags=Shared; AppDomainName=SharedDomain; AppDomainIndex=0; ClrInstanceID=10; 
EVENT 272.199: Windows Kernel/Image/Unload PID=11636; TID=-1; PName=PerfView; ProceNum=1; DataLen=140; ImageBase=0x00330000; ImageSize=12,910,592; ImageChecksum=12,929,589; TimeDateStamp=1,455,304,780; DefaultBase=0x40000000c4c000; BuildTime=16/02/12 19:19:40.00...; FileName=C:\temp\PerfView.exe; 
EVENT 272.218: Windows Kernel/Image/Unload PID=11636; TID=-1; PName=PerfView; ProceNum=1; DataLen=330; ImageBase=0x055c0000; ImageSize=2,088,960; ImageChecksum=0; TimeDateStamp=1,455,304,771; DefaultBase=0x10000000001fa000; BuildTime=16/02/12 19:19:31.00...; FileName=C:\Users\jeffschw\Ap...; 
EVENT 272.226: Windows Kernel/Image/Unload PID=11636; TID=-1; PName=PerfView; ProceNum=1; DataLen=328; ImageBase=0x059f0000; ImageSize=57,344; ImageChecksum=0; TimeDateStamp=1,454,794,256; DefaultBase=0x100000000000a000; BuildTime=16/02/06 21:30:56.00...; FileName=C:\Users\jeffschw\Ap...; 
EVENT 272.234: Windows Kernel/Image/Unload PID=11636; TID=-1; PName=PerfView; ProceNum=1; DataLen=332; ImageBase=0x05a30000; ImageSize=163,840; ImageChecksum=196,842; TimeDateStamp=1,421,638,328; DefaultBase=0x1000000000024000; BuildTime=15/01/19 03:32:08.00...; FileName=C:\Users\jeffschw\Ap...; 
EVENT 272.241: Windows Kernel/Image/Unload PID=11636; TID=-1; PName=PerfView; ProceNum=1; DataLen=164; ImageBase=0x65c70000; ImageSize=499,712; ImageChecksum=510,442; TimeDateStamp=1,446,172,525; DefaultBase=0x65c70000; BuildTime=15/10/30 02:35:25.00...; FileName=C:\Windows\System32\...; 
EVENT 272.532: Windows Kernel/Process/PerfCtr PID=11636; TID=-1; PName=PerfView; ProceNum=1; DataLen=104; ProcessID=11,636; MemoryCount=0; HandleCount=0; PeakVirtualSize=203,132,928; PeakWorkingSetSize=21,602,304; PeakPagefileUsage=12,886,016; QuotaPeakPagedPoolUsage=304,896; QuotaPeakNonPagedPoolUsage=18,904; VirtualSize=0; WorkingSetSize=0; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
EVENT 272.538: Windows Kernel/Process/Stop PID=11636; TID=-1; PName=PerfView; ProceNum=1; DataLen=199; ProcessID=11,636; ParentID=18,704; ImageFileName=PerfView.exe; PageDirectoryBase=0x15e22d000; Flags=Wow64; SessionID=2; ExitStatus=0; UniqueProcessKey=0xffffe000d418e840; CommandLine=PerfView.exe  start ...; PackageFullName=; ApplicationID=; 
EVENT 275.883: Windows Kernel/TcpIp/SendIPV6 PID=4; TID=-1; PName=System; ProceNum=1; DataLen=64; size=112; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=30,922; sport=445; startime=82,129,720; endtime=82,129,720; seqnum=0; connid=0x00000000; 
EVENT 275.898: Windows Kernel/TcpIp/RecvIPV6 PID=4; TID=-1; PName=System; ProceNum=1; DataLen=56; size=92; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=30,922; sport=445; connid=0x00000000; seqnum=0; 
EVENT 279.165: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStart PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=10; Reason=SuspendForGC; Count=261; ClrInstanceID=101; 
EVENT 279.182: Microsoft-Windows-DotNETRuntime/GC/SuspendEEStop PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=2; ClrInstanceID=101; 
EVENT 279.198: Microsoft-Windows-DotNETRuntime/GC/Start PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=18; Count=262; Reason=AllocSmall; Depth=1; Type=NonConcurrentGC; ClrInstanceID=101; ClientSequenceNumber=0; 
EVENT 279.292: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkStackRoots PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 279.293: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkFinalizeQueueRoots PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 279.300: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkHandles PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 279.314: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkCards PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 279.387: Microsoft-Windows-DotNETRuntimePrivate/GC/GlobalHeapHistory PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=30; FinalYoungestDesired=5,242,880; NumHeaps=1; CondemnedGeneration=1; Gen0ReductionCount=0; Reason=AllocSmall; GlobalMechanisms=Compaction, Promotio...; ClrInstanceID=101; PauseMode=; MemoryPressure=; CondemnReasons0=; CondemnReasons1=; Count=; 
EVENT 279.388: Microsoft-Windows-DotNETRuntimePrivate/GC/PerHeapHistory PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=221; ClrInstanceID=101; FreeListAllocated=; FreeListRejected=; EndOfSegAllocated=; CondemnedAllocated=; PinnedAllocated=; PinnedAllocatedAdvance=; RunningFreeListEfficiency=; CondemnReasons0=1,048,580; CondemnReasons1=; CompactMechanisms=compact_low_ephemera...; ExpandMechanisms=not_specified; ConcurrentCompactMechanisms=; HeapIndex=0; ExtraGen0Commit=; Count=; MemoryPressure=88; 
EVENT 279.393: Microsoft-Windows-DotNETRuntime/GC/Stop PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=10; Count=262; Depth=1; ClrInstanceID=101; 
EVENT 279.394: Microsoft-Windows-DotNETRuntime/GC/HeapStats PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=94; TotalHeapSize=4,151,864; TotalPromoted=21,372; Depth=1; GenerationSize0=12; TotalPromotedSize0=11,160; GenerationSize1=11,172; TotalPromotedSize1=10,212; GenerationSize2=3,193,504; TotalPromotedSize2=0; GenerationSize3=947,176; TotalPromotedSize3=0; FinalizationPromotedSize=0; FinalizationPromotedCount=0; PinnedObjectCount=0; SinkBlockCount=0; GCHandleCount=0; ClrInstanceID=101; GenerationSize4=0; TotalPromotedSize4=0; 
EVENT 279.395: Microsoft-Windows-DotNETRuntime/GC/RestartEEStart PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=2; ClrInstanceID=101; 
EVENT 279.405: Microsoft-Windows-DotNETRuntime/GC/RestartEEStop PID=6416; TID=11624; PName=iexplore; ProceNum=0; DataLen=2; ClrInstanceID=101; 
EVENT 319.219: Microsoft-Windows-DotNETRuntime/GC/Start PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=18; Count=263; Reason=AllocSmall; Depth=1; Type=NonConcurrentGC; ClrInstanceID=101; ClientSequenceNumber=0; 
EVENT 319.316: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkStackRoots PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 319.317: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkFinalizeQueueRoots PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 319.323: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkHandles PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 319.334: Microsoft-Windows-DotNETRuntimePrivate/GC/MarkCards PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=6; HeapNum=0; ClrInstanceID=101; 
EVENT 319.395: Microsoft-Windows-DotNETRuntimePrivate/GC/GlobalHeapHistory PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=30; FinalYoungestDesired=5,242,880; NumHeaps=1; CondemnedGeneration=1; Gen0ReductionCount=0; Reason=AllocSmall; GlobalMechanisms=Compaction, Promotio...; ClrInstanceID=101; PauseMode=; MemoryPressure=; CondemnReasons0=; CondemnReasons1=; Count=; 
EVENT 319.396: Microsoft-Windows-DotNETRuntimePrivate/GC/PerHeapHistory PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=221; ClrInstanceID=101; FreeListAllocated=; FreeListRejected=; EndOfSegAllocated=; CondemnedAllocated=; PinnedAllocated=; PinnedAllocatedAdvance=; RunningFreeListEfficiency=; CondemnReasons0=1,048,580; CondemnReasons1=; CompactMechanisms=compact_low_ephemera...; ExpandMechanisms=not_specified; ConcurrentCompactMechanisms=; HeapIndex=0; ExtraGen0Commit=; Count=; MemoryPressure=88; 
EVENT 319.410: Microsoft-Windows-DotNETRuntime/GC/Stop PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=10; Count=263; Depth=1; ClrInstanceID=101; 
EVENT 319.412: Microsoft-Windows-DotNETRuntime/GC/HeapStats PID=6416; TID=21828; PName=iexplore; ProceNum=0; DataLen=94; TotalHeapSize=4,143,800; TotalPromoted=3,096; Depth=0; GenerationSize0=12; TotalPromotedSize0=3,096; GenerationSize1=3,108; TotalPromotedSize1=0; GenerationSize2=3,193,504; TotalPromotedSize2=0; GenerationSize3=947,176; TotalPromotedSize3=0; FinalizationPromotedSize=0; FinalizationPromotedCount=0; PinnedObjectCount=0; SinkBlockCount=0; GCHandleCount=0; ClrInstanceID=101; GenerationSize4=0; TotalPromotedSize4=0; 
EVENT 328.548: Windows Kernel/TcpIp/SendIPV6 PID=4; TID=-1; PName=System; ProceNum=1; DataLen=64; size=128; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=30,922; sport=445; startime=82,129,720; endtime=82,129,725; seqnum=0; connid=0x00000000; 
EVENT 418.374: Windows Kernel/UdpIp/Recv PID=4; TID=-1; PName=System; ProceNum=1; DataLen=32; context=0x3200000004; saddr=10.199.100.138; sport=137; size=50; daddr=10.199.101.255; dport=137; dsize=0; 
EVENT 450.753: Windows Kernel/TcpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=43; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=9,075; sport=3,389; connid=0x00000000; seqnum=0; 
EVENT 461.202: Windows Kernel/TcpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=43; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=9,075; sport=3,389; connid=0x00000000; seqnum=0; 
EVENT 483.218: Windows Kernel/TcpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=57; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=9,075; sport=3,389; connid=0x00000000; seqnum=0; 
EVENT 493.655: Windows Kernel/TcpIp/RecvIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=56; size=43; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=9,075; sport=3,389; connid=0x00000000; seqnum=0; 
EVENT 541.677: Windows Kernel/UdpIp/Recv PID=4; TID=-1; PName=System; ProceNum=2; DataLen=32; context=0x3200000004; saddr=10.199.101.13; sport=137; size=50; daddr=10.199.101.255; dport=137; dsize=0; 
EVENT 666.864: Windows Kernel/TcpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=64; size=37; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=9,075; sport=3,389; startime=82,129,758; endtime=82,129,759; seqnum=0; connid=0x00000000; 
EVENT 684.126: Windows Kernel/TcpIp/SendIPV6 PID=356; TID=-1; PName=svchost; ProceNum=0; DataLen=64; size=37; daddr=2001:4898:e0:2018:91...; saddr=2001:4898:29:1010:40...; dport=9,075; sport=3,389; startime=82,129,759; endtime=82,129,761; seqnum=0; connid=0x00000000; 
EVENT 930.347: Windows Kernel/UdpIp/Recv PID=4; TID=-1; PName=System; ProceNum=0; DataLen=32; context=0x3200000004; saddr=10.199.101.124; sport=137; size=50; daddr=10.199.101.255; dport=137; dsize=0; 
EVENT 951.307: Windows Kernel/DiskIO/FlushInit PID=4; TID=14544; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000ceebeb40; 
EVENT 954.193: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=28861; PName=; ProceNum=3; DataLen=28; DiskNumber=0; IrpFlags=None; Irp=0xffffe000ceebeb40; ElapsedTimeMSec=2.886; 
EVENT 1,164.625: Windows Kernel/UdpIp/Recv PID=4; TID=-1; PName=System; ProceNum=1; DataLen=32; context=0x3200000004; saddr=10.199.100.138; sport=137; size=50; daddr=10.199.101.255; dport=137; dsize=0; 
EVENT 1,223.987: Windows Kernel/DiskIO/FlushInit PID=4; TID=14544; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000d6d6b010; 
EVENT 1,225.164: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=11773; PName=; ProceNum=0; DataLen=28; DiskNumber=0; IrpFlags=None; Irp=0xffffe000d6d6b010; ElapsedTimeMSec=1.177; 
EVENT 1,227.841: Windows Kernel/DiskIO/FlushInit PID=4; TID=14544; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000d6d6b010; 
EVENT 1,228.863: Windows Kernel/DiskIO/FlushBuffers PID=8300; TID=10220; PName=SearchUI; ProceNum=0; DataLen=28; DiskNumber=0; IrpFlags=None; Irp=0xffffe000d6d6b010; ElapsedTimeMSec=1.022; 
EVENT 1,279.691: Windows Kernel/UdpIp/Send PID=1160; TID=-1; PName=svchost; ProceNum=3; DataLen=32; context=0x18400000488; saddr=10.199.101.136; sport=500; size=388; daddr=10.221.226.12; dport=500; dsize=0; 
EVENT 1,325.419: Windows Kernel/UdpIp/Send PID=1160; TID=-1; PName=svchost; ProceNum=1; DataLen=32; context=0x18400000488; saddr=10.199.101.136; sport=500; size=388; daddr=10.222.118.22; dport=500; dsize=0; 
EVENT 1,325.471: Windows Kernel/UdpIp/Send PID=1160; TID=-1; PName=svchost; ProceNum=2; DataLen=32; context=0x19c00000488; saddr=10.199.101.136; sport=500; size=412; daddr=10.221.226.12; dport=500; dsize=0; 
EVENT 1,325.507: Windows Kernel/UdpIp/Send PID=1160; TID=-1; PName=svchost; ProceNum=3; DataLen=32; context=0x19c00000488; saddr=10.199.101.136; sport=500; size=412; daddr=10.222.118.22; dport=500; dsize=0; 
EVENT 1,868.245: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerOnShellHookMessage/Start PID=3516; TID=5368; PName=explorer; ProceNum=2; DataLen=12; Message=19; HWND=0x001b07fa; 
EVENT 1,868.279: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Start PID=3516; TID=5368; PName=explorer; ProceNum=3; DataLen=0; 
EVENT 1,868.294: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Stop PID=3516; TID=5368; PName=explorer; ProceNum=3; DataLen=0; 
EVENT 1,868.373: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerOnShellHookMessage/Stop PID=3516; TID=5368; PName=explorer; ProceNum=3; DataLen=12; Message=19; HWND=0x001b07fa; 
EVENT 1,871.352: Windows Kernel/DiskIO/FlushInit PID=4; TID=14544; PName=System; ProceNum=2; DataLen=12; Irp=0xffffe000d6d6b010; 
EVENT 1,875.132: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=37806; PName=; ProceNum=2; DataLen=28; DiskNumber=0; IrpFlags=None; Irp=0xffffe000d6d6b010; ElapsedTimeMSec=3.781; 
EVENT 3,567.098: Windows Kernel/DiskIO/FlushInit PID=4; TID=11144; PName=System; ProceNum=0; DataLen=12; Irp=0xffffe000ceebeb40; 
EVENT 3,568.380: Windows Kernel/DiskIO/FlushBuffers PID=-1; TID=12824; PName=; ProceNum=0; DataLen=28; DiskNumber=0; IrpFlags=None; Irp=0xffffe000ceebeb40; ElapsedTimeMSec=1.282; 
EVENT 4,286.428: Windows Kernel/UdpIp/Send PID=1160; TID=-1; PName=svchost; ProceNum=2; DataLen=32; context=0x18400000488; saddr=10.199.101.136; sport=500; size=388; daddr=10.221.226.12; dport=500; dsize=0; 
EVENT 4,292.543: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerOnShellHookMessage/Start PID=3516; TID=5368; PName=explorer; ProceNum=1; DataLen=12; Message=19; HWND=0x001408c0; 
EVENT 4,292.549: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Start PID=3516; TID=5368; PName=explorer; ProceNum=1; DataLen=0; 
EVENT 4,292.563: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Stop PID=3516; TID=5368; PName=explorer; ProceNum=1; DataLen=0; 
EVENT 4,292.621: Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerOnShellHookMessage/Stop PID=3516; TID=5368; PName=explorer; ProceNum=1; DataLen=12; Message=19; HWND=0x001408c0; 
EVENT 6,180.742: Windows Kernel/Image/Load PID=2232; TID=19116; PName=OneDrive; ProceNum=3; DataLen=116; ImageBase=0x6a550000; ImageSize=32,768; ImageChecksum=61,542; TimeDateStamp=1,446,172,812; DefaultBase=0x6a55000000003000; BuildTime=15/10/30 02:40:12.00...; FileName=C:\Windows\SysWOW64\...; 
EVENT 6,181.589: Windows Kernel/Thread/Start PID=2232; TID=10160; PName=OneDrive; ProceNum=0; DataLen=72; StackBase=0xffffd0002c074000; StackLimit=0xffffd0002c06e000; UserStackBase=0x004ffd20; UserStackLimit=0x004f8000; StartAddr=0x0000000f; Win32StartAddr=0x718d7d3d; TebBase=0x002c9000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=19,116; ParentProcessID=2,232; 
EVENT 6,181.644: Windows Kernel/Thread/Start PID=2232; TID=13856; PName=OneDrive; ProceNum=0; DataLen=72; StackBase=0xffffd00050924000; StackLimit=0xffffd0005091e000; UserStackBase=0x007bfd20; UserStackLimit=0x007b8000; StartAddr=0x0000000f; Win32StartAddr=0x718f0a0e; TebBase=0x002cc000; SubProcessTag=0; BasePriority=8; PagePriority=5; IoPriority=2; ThreadFlags=0; ThreadName=; ParentThreadID=19,116; ParentProcessID=2,232; 
EVENT 6,186.089: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=2232; TID=10160; PName=OneDrive; ProceNum=0; DataLen=16; ProviderName=08f93b14-1608-4a72-9...; 
EVENT 6,186.126: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=2232; TID=10160; PName=OneDrive; ProceNum=0; DataLen=16; ProviderName=50b3e73c-9370-461d-b...; 
EVENT 6,186.139: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=2232; TID=10160; PName=OneDrive; ProceNum=0; DataLen=16; ProviderName=83ed54f0-4d48-4e45-b...; 
EVENT 6,188.790: Microsoft-Windows-DNS-Client/EventID(3006) PID=2232; TID=20932; PName=OneDrive; ProceNum=2; DataLen=56; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; ServerList=; IsNetworkQuery=0; NetworkQueryIndex=0; InterfaceIndex=0; IsAsyncQuery=0; 
EVENT 6,188.902: Microsoft-Windows-DNS-Client/EventID(3009) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=372; QueryName=ssw.live.com; IsParallelNetworkQuery=1; NetworkIndex=0; InterfaceCount=1; AdapterName=Ethernet; LocalAddress=2001:4898:29:1010:40...; DNSServerAddress=10.221.226.12;10.222...; 
EVENT 6,189.110: Microsoft-Windows-DNS-Client/EventID(3006) PID=2232; TID=3700; PName=OneDrive; ProceNum=3; DataLen=56; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,766,400; ServerList=; IsNetworkQuery=0; NetworkQueryIndex=0; InterfaceIndex=0; IsAsyncQuery=0; 
EVENT 6,195.910: Microsoft-Windows-DNS-Client/EventID(3008) PID=2232; TID=3700; PName=OneDrive; ProceNum=1; DataLen=44; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,766,400; QueryStatus=87; QueryResults=; 
EVENT 6,220.877: Microsoft-Windows-DNS-Client/EventID(3016) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=42; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,897,472; InterfaceIndex=0; 
EVENT 6,220.911: Microsoft-Windows-DNS-Client/EventID(3018) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=44; QueryName=ssw.live.com; QueryType=1; QueryOptions=1,073,897,472; Status=9,701; QueryResults=; 
EVENT 6,220.946: Microsoft-Windows-DNS-Client/EventID(3019) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=38; QueryName=ssw.live.com; QueryType=1; InterfaceIndex=0; NetworkIndex=0; 
EVENT 6,220.973: Microsoft-Windows-DNS-Client/EventID(3010) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=58; QueryName=ssw.live.com; QueryType=1; DnsServerIpAddress=10.221.226.12; 
EVENT 6,222.853: Microsoft-Windows-DNS-Client/EventID(3016) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=42; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; InterfaceIndex=0; 
EVENT 6,222.862: Microsoft-Windows-DNS-Client/EventID(3018) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=44; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; Status=9,701; QueryResults=; 
EVENT 6,222.882: Microsoft-Windows-DNS-Client/EventID(3019) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=38; QueryName=ssw.live.com; QueryType=28; InterfaceIndex=0; NetworkIndex=0; 
EVENT 6,222.891: Microsoft-Windows-DNS-Client/EventID(3010) PID=356; TID=20352; PName=svchost; ProceNum=2; DataLen=58; QueryName=ssw.live.com; QueryType=28; DnsServerIpAddress=10.221.226.12; 
EVENT 6,248.497: Microsoft-Windows-DNS-Client/EventID(3011) PID=356; TID=20352; PName=svchost; ProceNum=0; DataLen=62; QueryName=ssw.live.com; QueryType=1; DnsServerIpAddress=10.221.226.12; ResponseStatus=0; 
EVENT 6,248.572: Microsoft-Windows-DNS-Client/EventID(3020) PID=356; TID=20352; PName=svchost; ProceNum=3; DataLen=134; QueryName=ssw.live.com; QueryType=1; NetworkIndex=0; InterfaceIndex=0; Status=0; QueryResults=type:  5 ssw.live.co...; 
EVENT 6,249.175: Microsoft-Windows-DNS-Client/EventID(3011) PID=356; TID=20352; PName=svchost; ProceNum=1; DataLen=62; QueryName=ssw.live.com; QueryType=28; DnsServerIpAddress=10.221.226.12; ResponseStatus=0; 
EVENT 6,249.224: Microsoft-Windows-DNS-Client/EventID(3020) PID=356; TID=20352; PName=svchost; ProceNum=1; DataLen=128; QueryName=ssw.live.com; QueryType=28; NetworkIndex=0; InterfaceIndex=0; Status=0; QueryResults=type:  5 ssw.live.co...; 
EVENT 6,249.372: Microsoft-Windows-DNS-Client/EventID(3008) PID=2232; TID=20932; PName=OneDrive; ProceNum=0; DataLen=148; QueryName=ssw.live.com; QueryType=28; QueryOptions=1,073,897,472; QueryStatus=0; QueryResults=type:  5 ssw.live.co...; 
EVENT 6,308.060: Windows Kernel/TcpIp/Connect PID=2232; TID=-1; PName=OneDrive; ProceNum=0; DataLen=48; size=0; daddr=207.46.7.252; saddr=10.199.101.136; dport=80; sport=1,109; mss=1,460; sackopt=1; tsopt=0; wsopt=1; rcvwin=131,400; rcvwinscale=8; sndwinscale=8; seqnum=0; connid=0x00000000; 
EVENT 6,360.229: Windows Kernel/TcpIp/Send PID=2232; TID=-1; PName=OneDrive; ProceNum=0; DataLen=40; size=118; daddr=207.46.7.252; saddr=10.199.101.136; dport=80; sport=1,109; startime=82,130,323; endtime=82,130,329; seqnum=0; connid=0x00000000; 
EVENT 6,360.229: Windows Kernel/TcpIp/Send PID=2232; TID=-1; PName=OneDrive; ProceNum=0; DataLen=40; size=1,888; daddr=207.46.7.252; saddr=10.199.101.136; dport=80; sport=1,109; startime=82,130,323; endtime=82,130,329; seqnum=0; connid=0x00000000; 
EVENT 7,017.718: Windows Kernel/TcpIp/Recv PID=2232; TID=-1; PName=OneDrive; ProceNum=0; DataLen=32; daddr=207.46.7.252; saddr=10.199.101.136; dport=80; sport=1,109; size=178; connid=0x00000000; seqnum=0; 
EVENT 8,871.741: Windows Kernel/Process/Start PID=24000; TID=-1; PName=PerfView; ProceNum=0; DataLen=195; ProcessID=24,000; ParentID=18,704; ImageFileName=PerfView.exe; PageDirectoryBase=0x127f39000; Flags=Wow64; SessionID=2; ExitStatus=259; UniqueProcessKey=0xffffe000d418e840; CommandLine=PerfView.exe  stop /...; PackageFullName=; ApplicationID=; 
EVENT 8,873.240: Windows Kernel/Image/Load PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=140; ImageBase=0x00500000; ImageSize=12,910,592; ImageChecksum=12,929,589; TimeDateStamp=1,455,304,780; DefaultBase=0x40000000c4c000; BuildTime=16/02/12 19:19:40.00...; FileName=C:\temp\PerfView.exe; 
EVENT 8,873.305: Windows Kernel/Image/Load PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=118; ImageBase=0x7fff7f790000; ImageSize=1,839,104; ImageChecksum=1,829,657; TimeDateStamp=1,461,383,915; DefaultBase=0x7fff7f790000; BuildTime=16/04/23 03:58:35.00...; FileName=C:\Windows\System32\...; 
EVENT 8,873.328: Windows Kernel/Image/Load PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=118; ImageBase=0x77740000; ImageSize=1,552,384; ImageChecksum=1,590,868; TimeDateStamp=1,461,386,111; DefaultBase=0x7774000000108000; BuildTime=16/04/23 04:35:11.00...; FileName=C:\Windows\SysWOW64\...; 
EVENT 8,873.817: Windows Kernel/Image/Load PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=112; ImageBase=0x65d00000; ImageSize=327,680; ImageChecksum=356,926; TimeDateStamp=1,446,172,506; DefaultBase=0x65d00000; BuildTime=15/10/30 02:35:06.00...; FileName=C:\Windows\System32\...; 
EVENT 8,876.219: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=24000; TID=8440; PName=PerfView; ProceNum=0; DataLen=16; ProviderName=05f95efe-7f75-49c7-a...; 
EVENT 8,878.969: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=16; ProviderName=a74efe00-14be-4ef9-9...; 
EVENT 8,889.073: Microsoft-Windows-DotNETRuntime/Runtime/Start PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=247; ClrInstanceID=10; Sku=DesktopClr; BclMajorVersion=4; BclMinorVersion=0; BclBuildNumber=0; BclQfeNumber=0; VMMajorVersion=4; VMMinorVersion=0; VMBuildNumber=30,319; VMQfeNumber=0; StartupFlags=CONCURRENT_GC; StartupMode=ManagedExe; CommandLine=PerfView.exe  stop /...; ComObjectGuid=00000000-0000-0000-0...; RuntimeDllPath=C:\Windows\Microsoft...; 
EVENT 8,889.535: Microsoft-Windows-DotNETRuntime/Loader/AppDomainLoad PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=44; AppDomainID=1,948,739,184; AppDomainFlags=Shared; AppDomainName=SharedDomain; AppDomainIndex=0; ClrInstanceID=10; 
EVENT 8,889.784: Microsoft-Windows-DotNETRuntime/AppDomainResourceManagement/ThreadCreated PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=30; ManagedThreadID=19,799,368; AppDomainID=19,775,488; Flags=0; ManagedThreadIndex=1; OSThreadID=8,440; ClrInstanceID=10; 
EVENT 8,890.078: Microsoft-Windows-DotNETRuntime/GC/CreateSegment PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=22; Address=0x03011000; Size=0x00fff000; Type=SmallObjectHeap; ClrInstanceID=10; 
EVENT 8,890.084: Microsoft-Windows-DotNETRuntime/GC/CreateSegment PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=22; Address=0x04011000; Size=0x00fff000; Type=LargeObjectHeap; ClrInstanceID=10; 
EVENT 8,890.299: Microsoft-Windows-DotNETRuntime/AppDomainResourceManagement/ThreadCreated PID=24000; TID=7192; PName=PerfView; ProceNum=3; DataLen=30; ManagedThreadID=19,867,608; AppDomainID=19,775,488; Flags=2; ManagedThreadIndex=2; OSThreadID=7,192; ClrInstanceID=10; 
EVENT 8,892.468: Microsoft-Windows-DotNETRuntimePrivate/Binding/FusionMessage PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=52; ClrInstanceID=10; Prepend=False; Message=BEGIN : IL image bin...; 
EVENT 8,892.570: Microsoft-Windows-DotNETRuntimePrivate/Binding/FusionMessage PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=92; ClrInstanceID=10; Prepend=False; Message=LOG: Found assembly ...; 
EVENT 8,893.425: Microsoft-Windows-DotNETRuntimePrivate/Binding/FusionMessage PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=60; ClrInstanceID=10; Prepend=False; Message=BEGIN : Native image...; 
EVENT 8,893.428: Microsoft-Windows-DotNETRuntimePrivate/Binding/FusionMessage PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=64; ClrInstanceID=10; Prepend=False; Message=  BEGIN : Native ima...; 
EVENT 8,894.114: Microsoft-Windows-DotNETRuntimePrivate/Binding/FusionMessage PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=180; ClrInstanceID=10; Prepend=False; Message=WRN: Native image co...; 
EVENT 8,894.389: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=238; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Windows\assembly\...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,894.777: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=238; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Windows\assembly\...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,895.966: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,896.116: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,896.195: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,896.208: Microsoft-Windows-DotNETRuntime/Loader/AssemblyLoad PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=182; AssemblyID=19,953,760; AppDomainID=1,948,739,184; AssemblyFlags=DomainNeutral, Nativ...; FullyQualifiedAssemblyName=mscorlib, Version=4....; BindingID=19,912,520; ClrInstanceID=10; 
EVENT 8,896.224: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=522; ModuleID=1,761,611,776; AssemblyID=19,953,760; ModuleFlags=DomainNeutral, Nativ...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ManagedPdbSignature=f0736c7e-9384-4f56-b...; ManagedPdbAge=2; ManagedPdbBuildPath=mscorlib.pdb; NativePdbSignature=b1ea5171-f48f-a186-5...; NativePdbAge=1; NativePdbBuildPath=mscorlib.ni.pdb; ModuleILFileName=mscorlib.dll; 
EVENT 8,896.237: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,896.594: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=70; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\temp\PerfView.exe; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,896.596: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=70; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\temp\PerfView.exe; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,900.124: Microsoft-Windows-DotNETRuntime/GC/FinalizersStart PID=24000; TID=7192; PName=PerfView; ProceNum=3; DataLen=2; ClrInstanceID=10; 
EVENT 8,900.129: Microsoft-Windows-DotNETRuntime/GC/FinalizersStop PID=24000; TID=7192; PName=PerfView; ProceNum=3; DataLen=6; Count=0; ClrInstanceID=10; 
EVENT 8,900.350: Microsoft-Windows-DotNETRuntime/Loader/AppDomainLoad PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=19,775,488; AppDomainFlags=268435459; AppDomainName=DefaultDomain; AppDomainIndex=1; ClrInstanceID=10; 
EVENT 8,900.545: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,900.771: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,900.845: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=PerfView; ClrInstanceID=10; 
EVENT 8,901.643: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=PerfView; ClrInstanceID=10; 
EVENT 8,901.652: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=PerfView; ClrInstanceID=10; 
EVENT 8,901.744: Microsoft-Windows-DotNETRuntime/Loader/AssemblyLoad PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=158; AssemblyID=19,979,016; AppDomainID=19,775,488; AssemblyFlags=None; FullyQualifiedAssemblyName=PerfView, Version=1....; BindingID=19,911,944; ClrInstanceID=10; 
EVENT 8,901.750: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=272; ModuleID=19,283,900; AssemblyID=19,979,016; ModuleFlags=Manifest; ModuleILPath=C:\temp\PerfView.exe; ModuleNativePath=; ManagedPdbSignature=8f193340-8e5e-4da2-8...; ManagedPdbAge=1; ManagedPdbBuildPath=C:\Users\vancem\Sour...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=PerfView.exe; 
EVENT 8,901.753: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=78; ModuleID=19,283,900; AssemblyID=19,979,016; AppDomainID=19,775,488; ModuleFlags=Manifest; ModuleILPath=C:\temp\PerfView.exe; ModuleNativePath=; ClrInstanceID=10; 
EVENT 8,901.756: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=PerfView; ClrInstanceID=10; 
EVENT 8,902.079: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,902.087: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,902.358: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
EVENT 8,903.160: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=186; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core, Version...; ClrInstanceID=10; 
EVENT 8,903.161: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoopupAndProbingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=186; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core, Version...; ClrInstanceID=10; 
EVENT 8,903.165: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,903.166: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,903.305: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=186; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core, Version...; ClrInstanceID=10; 
EVENT 8,903.311: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,904.499: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
EVENT 8,904.612: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=176; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System, Version=4.0....; ClrInstanceID=10; 
EVENT 8,904.613: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoopupAndProbingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=176; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System, Version=4.0....; ClrInstanceID=10; 
EVENT 8,904.732: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=176; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System, Version=4.0....; ClrInstanceID=10; 
EVENT 8,904.838: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=176; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System, Version=4.0....; ClrInstanceID=10; 
EVENT 8,905.580: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=70; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Configuration; ClrInstanceID=10; 
EVENT 8,905.697: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=204; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Configuration...; ClrInstanceID=10; 
EVENT 8,905.698: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoopupAndProbingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=204; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Configuration...; ClrInstanceID=10; 
EVENT 8,905.779: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=204; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Configuration...; ClrInstanceID=10; 
EVENT 8,905.886: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=204; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Configuration...; ClrInstanceID=10; 
EVENT 8,906.331: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=50; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Xml; ClrInstanceID=10; 
EVENT 8,906.456: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=184; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Xml, Version=...; ClrInstanceID=10; 
EVENT 8,906.458: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoopupAndProbingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=184; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Xml, Version=...; ClrInstanceID=10; 
EVENT 8,906.538: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=184; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Xml, Version=...; ClrInstanceID=10; 
EVENT 8,906.639: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=184; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Xml, Version=...; ClrInstanceID=10; 
EVENT 8,906.706: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=230; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Windows\assembly\...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,907.079: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=230; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Windows\assembly\...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,907.603: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=60; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Numerics; ClrInstanceID=10; 
EVENT 8,907.721: Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=194; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Numerics, Ver...; ClrInstanceID=10; 
EVENT 8,907.721: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoopupAndProbingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=194; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Numerics, Ver...; ClrInstanceID=10; 
EVENT 8,907.805: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=194; AppDomainID=1; LoadContextID=0; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Numerics, Ver...; ClrInstanceID=10; 
EVENT 8,907.908: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=194; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Numerics, Ver...; ClrInstanceID=10; 
EVENT 8,909.472: Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=194; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Security, Ver...; ClrInstanceID=10; 
EVENT 8,909.680: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=250; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Windows\assembly\...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.040: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=250; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Windows\assembly\...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.212: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.230: Microsoft-Windows-DotNETRuntimePrivate/Binding/LookupAndProbingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.240: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.341: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,910.348: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,910.351: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
EVENT 8,910.416: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.739: Microsoft-Windows-DotNETRuntimePrivate/Binding/LookupAndProbingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.741: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,910.782: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,910.783: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,910.785: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
EVENT 8,910.910: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
EVENT 8,910.912: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
EVENT 8,910.915: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
EVENT 8,910.984: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
EVENT 8,910.987: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,910.988: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,910.995: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=46; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=1; AssemblyCodebase=NULL; AssemblyName=mscorlib; ClrInstanceID=10; 
EVENT 8,911.313: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
EVENT 8,911.427: Microsoft-Windows-DotNETRuntime/Loader/AssemblyLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=188; AssemblyID=20,009,624; AppDomainID=19,775,488; AssemblyFlags=Native; FullyQualifiedAssemblyName=System.Core, Version...; BindingID=19,912,232; ClrInstanceID=10; 
EVENT 8,911.441: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=562; ModuleID=1,744,048,128; AssemblyID=20,009,624; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ManagedPdbSignature=5005a16d-6f1d-4f57-8...; ManagedPdbAge=2; ManagedPdbBuildPath=System.Core.pdb; NativePdbSignature=ea350a39-df13-34a4-9...; NativePdbAge=1; NativePdbBuildPath=System.Core.ni.pdb; ModuleILFileName=System.Core.dll; 
EVENT 8,911.450: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=460; ModuleID=1,744,048,128; AssemblyID=20,009,624; AppDomainID=19,775,488; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
EVENT 8,911.454: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=52; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System.Core; ClrInstanceID=10; 
EVENT 8,911.464: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
EVENT 8,911.547: Microsoft-Windows-DotNETRuntime/Loader/AssemblyLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=178; AssemblyID=19,990,088; AppDomainID=19,775,488; AssemblyFlags=Native; FullyQualifiedAssemblyName=System, Version=4.0....; BindingID=20,053,152; ClrInstanceID=10; 
EVENT 8,911.558: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=502; ModuleID=1,751,584,768; AssemblyID=19,990,088; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ManagedPdbSignature=323a39dc-d55e-4a32-9...; ManagedPdbAge=2; ManagedPdbBuildPath=System.pdb; NativePdbSignature=3a4f0a84-904c-4b56-8...; NativePdbAge=1; NativePdbBuildPath=System.ni.pdb; ModuleILFileName=System.dll; 
EVENT 8,911.564: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=420; ModuleID=1,751,584,768; AssemblyID=19,990,088; AppDomainID=19,775,488; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
EVENT 8,911.567: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=42; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=System; ClrInstanceID=10; 
EVENT 8,921.078: Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=10; BytesAllocated=1,344; ClrInstanceID=10; 
EVENT 8,933.563: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,934.301: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,934.302: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,982.011: Microsoft-Windows-DotNETRuntimePrivate/Binding/LookupAndProbingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,984.457: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=276; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=file:///C:\Users\jef...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,984.587: Microsoft-Windows-DotNETRuntimePrivate/NgenBinder/NgenBind PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=262; ClrInstanceID=10; BindingID=20,053,056; ReasonCode=START_BIND; AssemblyName=file:///C:/Users/jef...; 
EVENT 8,984.588: Microsoft-Windows-DotNETRuntimePrivate/NgenBinder/NgenBind PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=24; ClrInstanceID=10; BindingID=20,053,056; ReasonCode=LOADFROM_NOT_ALLOWED; AssemblyName=NULL; 
EVENT 8,984.974: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=260; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Users\jeffschw\Ap...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,985.100: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=260; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=C:\Users\jeffschw\Ap...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,989.999: Microsoft-Windows-DotNETRuntimePrivate/Binding/LookupAndProbingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=276; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=file:///C:\Users\jef...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,990.005: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=276; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=file:///C:\Users\jef...; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 8,997.525: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=110; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=Microsoft.Diagnostic...; ClrInstanceID=10; 
EVENT 8,999.816: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=110; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=Microsoft.Diagnostic...; ClrInstanceID=10; 
EVENT 8,999.831: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=110; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=Microsoft.Diagnostic...; ClrInstanceID=10; 
EVENT 8,999.960: Microsoft-Windows-DotNETRuntime/Loader/AssemblyLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=222; AssemblyID=20,164,936; AppDomainID=19,775,488; AssemblyFlags=None; FullyQualifiedAssemblyName=Microsoft.Diagnostic...; BindingID=20,053,056; ClrInstanceID=10; 
EVENT 8,999.969: Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=522; ModuleID=19,301,992; AssemblyID=20,164,936; ModuleFlags=Manifest; ModuleILPath=C:\Users\jeffschw\Ap...; ModuleNativePath=; ManagedPdbSignature=ea5b71d9-238b-460b-b...; ManagedPdbAge=1; ManagedPdbBuildPath=C:\Users\vancem\Sour...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=Microsoft.Diagnostic...; 
EVENT 8,999.973: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=268; ModuleID=19,301,992; AssemblyID=20,164,936; AppDomainID=19,775,488; ModuleFlags=Manifest; ModuleILPath=C:\Users\jeffschw\Ap...; ModuleNativePath=; ClrInstanceID=10; 
EVENT 8,999.977: Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=110; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=Microsoft.Diagnostic...; ClrInstanceID=10; 
EVENT 9,006.948: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 9,007.261: Microsoft-Windows-DotNETRuntimePrivate/NgenBinder/NgenBind PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=204; ClrInstanceID=10; BindingID=20,052,192; ReasonCode=START_BIND; AssemblyName=Microsoft.Diagnostic...; 
EVENT 9,007.262: Microsoft-Windows-DotNETRuntimePrivate/NgenBinder/NgenBind PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=24; ClrInstanceID=10; BindingID=20,052,192; ReasonCode=LOADFROM_NOT_ALLOWED; AssemblyName=NULL; 
EVENT 9,008.533: Microsoft-Windows-DotNETRuntimePrivate/Binding/LookupAndProbingPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 9,008.536: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 9,008.810: Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=266; ModuleID=95,097,320; AssemblyID=20,087,544; AppDomainID=19,775,488; ModuleFlags=Manifest; ModuleILPath=C:\Users\jeffschw\Ap...; ModuleNativePath=; ClrInstanceID=10; 
EVENT 9,037.581: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 9,037.582: Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 9,042.826: Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=38; AppDomainID=1; LoadContextID=4; FromLoaderCache=0; DynamicLoad=0; AssemblyCodebase=NULL; AssemblyName=NULL; ClrInstanceID=10; 
EVENT 9,051.469: Microsoft-Windows-DotNETRuntimePrivate/NgenBinder/NgenBind PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=264; ClrInstanceID=10; BindingID=20,051,808; ReasonCode=START_BIND; AssemblyName=file:///C:/Users/jef...; 
EVENT 9,084.615: System.Diagnostics.Eventing.FrameworkEventSource/ManifestData PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=23708; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=23708; 
EVENT 9,120.144: PerfView/ManifestData PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=16163; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=16163; 
EVENT 9,134.436: PerfView/CommandLineParameters PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=130; commandLine= /MinSecForTrigger:0...; currentDirectory=C:\temp; version=1.9.0.0; 
EVENT 9,134.437: PerfView/Tracing/Stop PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=0; 
EVENT 9,135.091: PerfView/StartAndStopTimes PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=8; startTimeRelativeMSec=0; stopTimeRelativeMSec=0; 
EVENT 9,148.276: Windows Kernel/SystemConfig/NIC PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=854; PhysicalAddrLen=6; PhysicalAddr=220,042,865,679,616; Ipv4Index=2; Ipv6Index=2; NICDescription=Microsoft Hyper-V Ne...; IpAddresses=2001:4898:29:1010:40...; DnsServerAddresses=10.221.226.12;10.222...; 
EVENT 9,148.289: Windows Kernel/SystemConfig/NIC PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=210; PhysicalAddrLen=0; PhysicalAddr=0; Ipv4Index=1; Ipv6Index=1; NICDescription=Software Loopback In...; IpAddresses=::1;127.0.0.1; DnsServerAddresses=fec0:0:0:ffff::1;fec...; 
EVENT 9,148.301: Windows Kernel/SystemConfig/NIC PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=206; PhysicalAddrLen=8; PhysicalAddr=-2,305,843,009,213,6...; Ipv4Index=3; Ipv6Index=3; NICDescription=Microsoft ISATAP Ada...; IpAddresses=fe80::5efe:10.199.10...; DnsServerAddresses=10.221.226.12;10.222...; 
EVENT 9,150.327: Windows Kernel/SystemConfig/PhyDisk PID=24000; TID=8440; PName=PerfView; ProceNum=0; DataLen=568; DiskNumber=0; BytesPerSector=512; SectorsPerTrack=63; TracksPerCylinder=255; Cylinders=13,054; SCSIPort=0; SCSIPath=0; SCSITarget=0; SCSILun=0; Manufacturer=Virtual HD ATA Devic...; PartitionCount=1; WriteCacheEnabled=1; BootDriveLetter=C; Spare=; 
EVENT 9,151.437: Windows Kernel/SystemConfig/IDEChannel PID=24000; TID=8440; PName=PerfView; ProceNum=0; DataLen=36; TargetID=0; DeviceType=1; DeviceTimingMode=1,040; LocationInformationLen=9; LocationInformation=Channel 0; 
EVENT 9,151.553: Windows Kernel/SystemConfig/IDEChannel PID=24000; TID=8440; PName=PerfView; ProceNum=0; DataLen=36; TargetID=0; DeviceType=2; DeviceTimingMode=1,040; LocationInformationLen=9; LocationInformation=Channel 1; 
EVENT 9,158.954: Windows Kernel/SystemConfig/PnP PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=126; DeviceID=ACPI\PNP0C01\1; DeviceDescription=System board; FriendlyName=; PdoName=\Device\00000016; ServiceName=; 
EVENT 9,159.441: Windows Kernel/SystemConfig/PnP PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=144; DeviceID=ACPI\PNP0C02\1; DeviceDescription=Motherboard resource...; FriendlyName=; PdoName=\Device\00000028; ServiceName=; 
EVENT 9,159.814: Windows Kernel/SystemConfig/PnP PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=144; DeviceID=ACPI\PNP0C02\2; DeviceDescription=Motherboard resource...; FriendlyName=; PdoName=\Device\00000029; ServiceName=; 
EVENT 9,160.298: Windows Kernel/SystemConfig/PnP PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=384; DeviceID=VMBUS\{F8615163-DF3E...; DeviceDescription=Microsoft Hyper-V Ne...; FriendlyName=Microsoft Hyper-V Ne...; PdoName=\Device\00000038; ServiceName=netvsc; 
EVENT 9,160.439: Windows Kernel/SystemConfig/PnP PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=344; DeviceID=SWD\PRINTENUM\{22A93...; DeviceDescription=Xerox Office XPS Cla...; FriendlyName=\\prn-corp2.redmond....; PdoName=\Device\0000006b; ServiceName=; 
EVENT 9,249.750: Windows Kernel/SystemConfig/Services PID=1712; TID=8440; PName=Aegis.WindowsService; ProceNum=0; DataLen=150; ServiceName=AegisWindowsService; DisplayName=Aegis Windows Servic...; ProcessName=Aegis.WindowsService; ProcessID=1,712; ServiceState=4; SubProcessTag=1; 
EVENT 9,249.753: Windows Kernel/SystemConfig/Services PID=0; TID=8440; PName=Idle; ProceNum=0; DataLen=82; ServiceName=AJRouter; DisplayName=AllJoyn Router Servi...; ProcessName=Idle; ProcessID=0; ServiceState=1; SubProcessTag=2; 
EVENT 9,249.755: Windows Kernel/SystemConfig/Services PID=0; TID=8440; PName=Idle; ProceNum=0; DataLen=94; ServiceName=ALG; DisplayName=Application Layer Ga...; ProcessName=Idle; ProcessID=0; ServiceState=1; SubProcessTag=3; 
EVENT 9,249.757: Windows Kernel/SystemConfig/Services PID=0; TID=8440; PName=Idle; ProceNum=0; DataLen=104; ServiceName=AppIDSvc; DisplayName=Application Identity; ProcessName=Idle; ProcessID=0; ServiceState=1; SubProcessTag=4; 
EVENT 9,249.759: Windows Kernel/SystemConfig/Services PID=1160; TID=8440; PName=svchost; ProceNum=0; DataLen=104; ServiceName=Appinfo; DisplayName=Application Informat...; ProcessName=svchost; ProcessID=1,160; ServiceState=4; SubProcessTag=5; 
EVENT 9,250.730: Windows Kernel/SystemConfig/CPU PID=24000; TID=8440; PName=PerfView; ProceNum=0; DataLen=828; MHz=2,993; NumberOfProcessors=4; MemSize=7,168; PageSize=4,096; AllocationGranularity=65,536; ComputerName=JEFFSCHW-0511; DomainName=redmond.corp.microso...; HyperThreadingFlag=0x00000000; 
EVENT 9,251.055: Windows Kernel/SystemConfig/Power PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=8; S1=0; S2=0; S3=0; S4=0; S5=1; 
EVENT 9,251.095: MSNT_SystemTrace/SystemConfig/Platform PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=112; SystemManufacturer=Microsoft Corporatio...; SystemProductName=Virtual Machine; BiosDate=05/23/2012; BiosVersion=090006; 
EVENT 9,251.301: Windows Kernel/SystemConfig/LogDisk PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=112; StartOffset=1,048,576; PartitionSize=107,372,085,248; DiskNumber=0; Size=112; DriveType=1; DriveLetterString=C:; PartitionNumber=1; SectorsPerCluster=8; BytesPerSector=512; NumberOfFreeClusters=9,326,470; TotalNumberOfClusters=26,213,887; FileSystem=NTFS; VolumeExt=0; 
EVENT 9,251.503: Windows Kernel/EventTrace/EndExtension PID=-1; TID=-1; PName=; ProceNum=3; DataLen=36; GroupMask1=75,535; GroupMask2=2; GroupMask3=0; GroupMask4=0; GroupMask5=0; GroupMask6=0; GroupMask7=0; GroupMask8=0; KernelEventVersion=60; 
EVENT 9,251.511: Windows Kernel/Process/PerfCtrRundown PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=104; ProcessID=0; MemoryCount=2; HandleCount=1,289; PeakVirtualSize=65,536; PeakWorkingSetSize=4,096; PeakPagefileUsage=0; QuotaPeakPagedPoolUsage=0; QuotaPeakNonPagedPoolUsage=0; VirtualSize=65,536; WorkingSetSize=4,096; PagefileUsage=0; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=0; 
EVENT 9,251.514: Windows Kernel/Process/DCStop PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=75; ProcessID=0; ParentID=0; ImageFileName=Idle; PageDirectoryBase=0x001aa000; Flags=None; SessionID=-1; ExitStatus=0; UniqueProcessKey=0xfffff803c1196a40; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 9,251.515: MSNT_SystemTrace/Image/KernelBase PID=-1; TID=-1; PName=; ProceNum=3; DataLen=8; ImageBase=0xfffff803c0e04000; 
EVENT 9,251.516: Windows Kernel/Image/DCStop PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=124; ImageBase=0xfffff803c0e04000; ImageSize=8,175,616; ImageChecksum=7,527,605; TimeDateStamp=1,461,384,261; DefaultBase=0x00000000; BuildTime=16/04/23 04:04:21.00...; FileName=C:\Windows\system32\...; 
EVENT 9,251.517: Windows Kernel/Image/DCStop PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=114; ImageBase=0xfffff803c15d0000; ImageSize=471,040; ImageChecksum=480,341; TimeDateStamp=1,446,171,002; DefaultBase=0x00000000; BuildTime=15/10/30 02:10:02.00...; FileName=C:\Windows\system32\...; 
EVENT 9,251.517: Windows Kernel/Image/DCStop PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=112; ImageBase=0xfffff803bff99000; ImageSize=45,056; ImageChecksum=28,350; TimeDateStamp=1,446,172,984; DefaultBase=0x00000000; BuildTime=15/10/30 02:43:04.00...; FileName=C:\Windows\system32\...; 
EVENT 9,251.518: Windows Kernel/Image/DCStop PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=150; ImageBase=0xfffff801852f0000; ImageSize=581,632; ImageChecksum=541,943; TimeDateStamp=1,446,172,946; DefaultBase=0x00000000; BuildTime=15/10/30 02:42:26.00...; FileName=C:\Windows\system32\...; 
EVENT 9,251.518: Windows Kernel/Image/DCStop PID=0; TID=-1; PName=Idle; ProceNum=3; DataLen=142; ImageBase=0xfffff80185380000; ImageSize=65,536; ImageChecksum=61,920; TimeDateStamp=1,446,172,939; DefaultBase=0x00000000; BuildTime=15/10/30 02:42:19.00...; FileName=C:\Windows\System32\...; 
EVENT 9,252.092: Windows Kernel/Process/PerfCtrRundown PID=4; TID=-1; PName=System; ProceNum=3; DataLen=104; ProcessID=4; MemoryCount=3,583,722; HandleCount=1,289; PeakVirtualSize=482,361,344; PeakWorkingSetSize=414,171,136; PeakPagefileUsage=1,114,112; QuotaPeakPagedPoolUsage=0; QuotaPeakNonPagedPoolUsage=0; VirtualSize=189,202,432; WorkingSetSize=131,354,624; PagefileUsage=778,240; QuotaPagedPoolUsage=0; QuotaNonPagedPoolUsage=0; PrivatePageCount=778,240; 
EVENT 9,252.093: Windows Kernel/Process/DCStop PID=4; TID=-1; PName=System; ProceNum=3; DataLen=77; ProcessID=4; ParentID=0; ImageFileName=System; PageDirectoryBase=0x001aa000; Flags=Protected; SessionID=-1; ExitStatus=259; UniqueProcessKey=0xffffe000cd898700; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 9,252.278: Windows Kernel/Process/PerfCtrRundown PID=368; TID=-1; PName=smss; ProceNum=2; DataLen=104; ProcessID=368; MemoryCount=1,427; HandleCount=52; PeakVirtualSize=2,199,052,185,600; PeakWorkingSetSize=1,228,800; PeakPagefileUsage=446,464; QuotaPeakPagedPoolUsage=56,384; QuotaPeakNonPagedPoolUsage=4,600; VirtualSize=2,199,029,788,672; WorkingSetSize=434,176; PagefileUsage=360,448; QuotaPagedPoolUsage=12,640; QuotaNonPagedPoolUsage=2,536; PrivatePageCount=360,448; 
EVENT 9,252.282: Windows Kernel/Process/DCStop PID=368; TID=-1; PName=smss; ProceNum=2; DataLen=137; ProcessID=368; ParentID=4; ImageFileName=smss.exe; PageDirectoryBase=0x97280000; Flags=Protected; SessionID=-1; ExitStatus=259; UniqueProcessKey=0xffffe000cf8ff840; CommandLine=\SystemRoot\System32...; PackageFullName=; ApplicationID=; 
EVENT 9,252.479: Windows Kernel/Process/PerfCtrRundown PID=468; TID=-1; PName=csrss; ProceNum=2; DataLen=104; ProcessID=468; MemoryCount=124,814; HandleCount=497; PeakVirtualSize=2,199,080,660,992; PeakWorkingSetSize=39,297,024; PeakPagefileUsage=2,072,576; QuotaPeakPagedPoolUsage=180,056; QuotaPeakNonPagedPoolUsage=18,000; VirtualSize=2,199,078,760,448; WorkingSetSize=2,162,688; PagefileUsage=1,671,168; QuotaPagedPoolUsage=158,712; QuotaNonPagedPoolUsage=14,056; PrivatePageCount=1,671,168; 
EVENT 9,252.483: Windows Kernel/Process/DCStop PID=468; TID=-1; PName=csrss; ProceNum=2; DataLen=568; ProcessID=468; ParentID=460; ImageFileName=csrss.exe; PageDirectoryBase=0x09256000; Flags=Protected; SessionID=0; ExitStatus=259; UniqueProcessKey=0xffffe000cff78600; CommandLine=%SystemRoot%\system3...; PackageFullName=; ApplicationID=; 
EVENT 9,252.490: Windows Kernel/Process/Defunct PID=524; TID=-1; PName=Process(524); ProceNum=2; DataLen=87; ProcessID=524; ParentID=368; ImageFileName=smss.exe; PageDirectoryBase=0x215ea000; Flags=Protected; SessionID=1; ExitStatus=0; UniqueProcessKey=0xffffe000d0570840; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 9,252.589: Windows Kernel/Process/PerfCtrRundown PID=532; TID=-1; PName=csrss; ProceNum=2; DataLen=104; ProcessID=532; MemoryCount=94,137; HandleCount=121; PeakVirtualSize=2,199,081,947,136; PeakWorkingSetSize=42,582,016; PeakPagefileUsage=1,363,968; QuotaPeakPagedPoolUsage=121,400; QuotaPeakNonPagedPoolUsage=9,520; VirtualSize=2,199,066,841,088; WorkingSetSize=712,704; PagefileUsage=1,146,880; QuotaPagedPoolUsage=100,952; QuotaNonPagedPoolUsage=8,840; PrivatePageCount=1,146,880; 
EVENT 9,252.593: Windows Kernel/Process/DCStop PID=532; TID=-1; PName=csrss; ProceNum=2; DataLen=568; ProcessID=532; ParentID=524; ImageFileName=csrss.exe; PageDirectoryBase=0x216bc000; Flags=Protected; SessionID=1; ExitStatus=259; UniqueProcessKey=0xffffe000d056b6c0; CommandLine=%SystemRoot%\system3...; PackageFullName=; ApplicationID=; 
EVENT 9,269.007: Windows Kernel/Process/Defunct PID=3764; TID=-1; PName=Process(3764); ProceNum=2; DataLen=87; ProcessID=3,764; ParentID=368; ImageFileName=smss.exe; PageDirectoryBase=0x0792d000; Flags=Protected; SessionID=2; ExitStatus=0; UniqueProcessKey=0xffffe000d19a9080; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 9,276.583: Windows Kernel/Process/Defunct PID=4900; TID=-1; PName=Process(4900); ProceNum=1; DataLen=107; ProcessID=4,900; ParentID=1,000; ImageFileName=userinit.exe; PageDirectoryBase=0x55475000; Flags=None; SessionID=2; ExitStatus=0; UniqueProcessKey=0xffffe000d3fc0080; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 9,281.869: Windows Kernel/Process/Defunct PID=1040; TID=-1; PName=Process(1040); ProceNum=3; DataLen=130; ProcessID=1,040; ParentID=4,148; ImageFileName=Microsoft.VsHub.Serv...; PageDirectoryBase=0x0ccd9000; Flags=Wow64; SessionID=2; ExitStatus=0; UniqueProcessKey=0xffffe000d4dff300; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 9,283.495: Windows Kernel/Process/Defunct PID=14604; TID=-1; PName=Process(14604); ProceNum=0; DataLen=105; ProcessID=14,604; ParentID=1,948; ImageFileName=dotnet.exe; PageDirectoryBase=0xe48be000; Flags=None; SessionID=2; ExitStatus=0; UniqueProcessKey=0xffffe000d59e0840; CommandLine=; PackageFullName=; ApplicationID=; 
EVENT 9,291.461: Windows Kernel/PerfInfo/CollectionEnd PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=24; SampleSource=0; NewInterval=10,000; OldInterval=10,000; 
EVENT 9,301.460: Windows Kernel/EventTrace/Extension PID=-1; TID=-1; PName=; ProceNum=3; DataLen=36; GroupMask1=0; GroupMask2=0; GroupMask3=0; GroupMask4=0; GroupMask5=0; GroupMask6=0; GroupMask7=0; GroupMask8=0; KernelEventVersion=60; 
EVENT 9,301.461: Windows Kernel/EventTrace/RundownComplete PID=-1; TID=-1; PName=; ProceNum=3; DataLen=0; 
EVENT 9,317.692: Microsoft-Windows-Kernel-EventTracing/ETW_TASK_SESSION/ETW_OPCODE_STOP PID=24000; TID=8440; PName=PerfView; ProceNum=1; DataLen=142; SessionGuid=9e814aad-3204-11d2-9...; LoggerMode=171,966,593; SessionName=NT Kernel Logger; LogFileName=C:\temp\PerfViewData...; MinimumBuffers=1,024; MaximumBuffers=1,290; BufferSize=65,536; PeakBuffersCount=1,024; CurrentBuffersCount=1,024; FlushThreshold=0; 
EVENT 9,322.786: Microsoft-Windows-DotNETRuntime/AppDomainResourceManagement/ThreadCreated PID=24000; TID=17160; PName=PerfView; ProceNum=3; DataLen=30; ManagedThreadID=19,855,440; AppDomainID=19,775,488; Flags=0; ManagedThreadIndex=3; OSThreadID=17,160; ClrInstanceID=10; 
EVENT 9,375.038: PerfView/ManifestData PID=24000; TID=16312; PName=PerfView; ProceNum=2; DataLen=16163; Format=1; MajorVersion=1; MinorVersion=0; Magic=91; TotalChunks=1; ChunkNumber=0; PayloadLength=16163; 
EVENT 9,396.834: PerfView/Rundown/Start PID=24000; TID=8440; PName=PerfView; ProceNum=0; DataLen=0; 
EVENT 9,407.493: Microsoft-Windows-DotNETRuntimeRundown/Runtime/Start PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=247; ClrInstanceID=10; Sku=DesktopClr; BclMajorVersion=4; BclMinorVersion=0; BclBuildNumber=0; BclQfeNumber=0; VMMajorVersion=4; VMMinorVersion=0; VMBuildNumber=30,319; VMQfeNumber=0; StartupFlags=CONCURRENT_GC; StartupMode=ManagedExe; CommandLine=PerfView.exe  stop /...; ComObjectGuid=00000000-0000-0000-0...; RuntimeDllPath=C:\Windows\Microsoft...; 
EVENT 9,407.496: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopInit PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=10; 
EVENT 9,407.509: Microsoft-Windows-DotNETRuntimeRundown/Runtime/Start PID=6416; TID=18968; PName=iexplore; ProceNum=1; DataLen=181; ClrInstanceID=101; Sku=CoreClr; BclMajorVersion=5; BclMinorVersion=0; BclBuildNumber=5; BclQfeNumber=0; VMMajorVersion=5; VMMinorVersion=1; VMBuildNumber=41,212; VMQfeNumber=0; StartupFlags=None; StartupMode=HostedClr; CommandLine=; ComObjectGuid=00000000-0000-0000-0...; RuntimeDllPath=c:\Program Files (x8...; 
EVENT 9,407.512: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopInit PID=6416; TID=18968; PName=iexplore; ProceNum=1; DataLen=2; ClrInstanceID=101; 
EVENT 9,407.513: Microsoft-Windows-DotNETRuntimeRundown/Loader/ModuleDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=272; ModuleID=19,283,900; AssemblyID=19,979,016; ModuleFlags=Manifest; ModuleILPath=C:\temp\PerfView.exe; ModuleNativePath=; ManagedPdbSignature=8f193340-8e5e-4da2-8...; ManagedPdbAge=1; ManagedPdbBuildPath=C:\Users\vancem\Sour...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=PerfView.exe; 
EVENT 9,407.517: Microsoft-Windows-DotNETRuntimeRundown/Loader/DomainModuleDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=78; ModuleID=19,283,900; AssemblyID=19,979,016; AppDomainID=19,775,488; ModuleFlags=Manifest; ModuleILPath=C:\temp\PerfView.exe; ModuleNativePath=; ClrInstanceID=10; 
EVENT 9,407.549: Microsoft-Windows-DotNETRuntimeRundown/Runtime/Start PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=351; ClrInstanceID=10; Sku=DesktopClr; BclMajorVersion=4; BclMinorVersion=0; BclBuildNumber=0; BclQfeNumber=0; VMMajorVersion=4; VMMinorVersion=0; VMBuildNumber=30,319; VMQfeNumber=0; StartupFlags=CONCURRENT_GC; StartupMode=ManagedExe; CommandLine="C:\Program Files (x...; ComObjectGuid=00000000-0000-0000-0...; RuntimeDllPath=C:\Windows\Microsoft...; 
EVENT 9,407.552: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopInit PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=2; ClrInstanceID=10; 
EVENT 9,407.580: Microsoft-Windows-DotNETRuntimeRundown/Loader/ModuleDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=302; ModuleID=9,584,572; AssemblyID=10,641,304; ModuleFlags=Manifest; ModuleILPath=C:\Program Files (x8...; ModuleNativePath=; ManagedPdbSignature=dbeadf55-9848-4334-b...; ManagedPdbAge=1; ManagedPdbBuildPath=IpOverUsbSvc.pdb; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=IpOverUsbSvc.exe; 
EVENT 9,407.584: Microsoft-Windows-DotNETRuntimeRundown/Loader/DomainModuleDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=234; ModuleID=9,584,572; AssemblyID=10,641,304; AppDomainID=10,472,424; ModuleFlags=Manifest; ModuleILPath=C:\Program Files (x8...; ModuleNativePath=; ClrInstanceID=10; 
EVENT 9,407.587: Microsoft-Windows-DotNETRuntimeRundown/Runtime/Start PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=243; ClrInstanceID=8; Sku=DesktopClr; BclMajorVersion=4; BclMinorVersion=0; BclBuildNumber=0; BclQfeNumber=0; VMMajorVersion=4; VMMinorVersion=0; VMBuildNumber=30,319; VMQfeNumber=0; StartupFlags=CONCURRENT_GC; StartupMode=ManagedExe; CommandLine="C:\AegisTools\Bin\A...; ComObjectGuid=00000000-0000-0000-0...; RuntimeDllPath=C:\Windows\Microsoft...; 
EVENT 9,407.590: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopInit PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=2; ClrInstanceID=8; 
EVENT 9,407.618: Microsoft-Windows-DotNETRuntimeRundown/Loader/ModuleDCStop PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=388; ModuleID=140,733,502,865,600; AssemblyID=5,558,416; ModuleFlags=Manifest; ModuleILPath=C:\AegisTools\Bin\Ae...; ModuleNativePath=; ManagedPdbSignature=d380f427-0d87-403e-9...; ManagedPdbAge=1; ManagedPdbBuildPath=c:\Users\chulbert\So...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=Aegis.WindowsService...; 
EVENT 9,407.622: Microsoft-Windows-DotNETRuntimeRundown/Loader/DomainModuleDCStop PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=122; ModuleID=140,733,502,865,600; AssemblyID=5,558,416; AppDomainID=5,204,240; ModuleFlags=Manifest; ModuleILPath=C:\AegisTools\Bin\Ae...; ModuleNativePath=; ClrInstanceID=8; 
EVENT 9,407.682: Microsoft-Windows-DotNETRuntimeRundown/Loader/AssemblyDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=158; AssemblyID=19,979,016; AppDomainID=19,775,488; AssemblyFlags=None; FullyQualifiedAssemblyName=PerfView, Version=1....; BindingID=19,911,944; ClrInstanceID=10; 
EVENT 9,407.690: Microsoft-Windows-DotNETRuntimeRundown/Loader/ModuleDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=562; ModuleID=1,744,048,128; AssemblyID=20,009,624; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ManagedPdbSignature=5005a16d-6f1d-4f57-8...; ManagedPdbAge=2; ManagedPdbBuildPath=System.Core.pdb; NativePdbSignature=ea350a39-df13-34a4-9...; NativePdbAge=1; NativePdbBuildPath=System.Core.ni.pdb; ModuleILFileName=System.Core.dll; 
EVENT 9,407.694: Microsoft-Windows-DotNETRuntimeRundown/Loader/DomainModuleDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=460; ModuleID=1,744,048,128; AssemblyID=20,009,624; AppDomainID=19,775,488; ModuleFlags=Native, Manifest, Ib...; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=C:\Windows\assembly\...; ClrInstanceID=10; 
EVENT 9,407.770: Microsoft-Windows-DotNETRuntimeRundown/Loader/AssemblyDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=192; AssemblyID=10,641,304; AppDomainID=10,472,424; AssemblyFlags=None; FullyQualifiedAssemblyName=IpOverUsbSvc, Versio...; BindingID=0; ClrInstanceID=10; 
EVENT 9,407.778: Microsoft-Windows-DotNETRuntimeRundown/Loader/ModuleDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=366; ModuleID=9,586,264; AssemblyID=10,716,616; ModuleFlags=Manifest; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=; ManagedPdbSignature=ea17b53c-1b4c-49a4-9...; ManagedPdbAge=1; ManagedPdbBuildPath=System.ServiceProces...; NativePdbSignature=00000000-0000-0000-0...; NativePdbAge=0; NativePdbBuildPath=; ModuleILFileName=System.ServiceProces...; 
EVENT 9,407.781: Microsoft-Windows-DotNETRuntimeRundown/Loader/DomainModuleDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=280; ModuleID=9,586,264; AssemblyID=10,716,616; AppDomainID=10,472,424; ModuleFlags=Manifest; ModuleILPath=C:\Windows\Microsoft...; ModuleNativePath=; ClrInstanceID=10; 
EVENT 9,407.782: Microsoft-Windows-DotNETRuntimeRundown/Loader/AssemblyDCStop PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=182; AssemblyID=5,558,416; AppDomainID=5,204,240; AssemblyFlags=None; FullyQualifiedAssemblyName=Aegis.WindowsService...; BindingID=0; ClrInstanceID=8; 
EVENT 9,407.835: Microsoft-Windows-DotNETRuntimeRundown/Loader/AssemblyDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=188; AssemblyID=20,009,624; AppDomainID=19,775,488; AssemblyFlags=Native; FullyQualifiedAssemblyName=System.Core, Version...; BindingID=19,912,232; ClrInstanceID=10; 
EVENT 9,407.862: Microsoft-Windows-DotNETRuntimeRundown/Loader/AssemblyDCStop PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=208; AssemblyID=5,561,296; AppDomainID=5,204,240; AssemblyFlags=None; FullyQualifiedAssemblyName=System.ServiceProces...; BindingID=0; ClrInstanceID=8; 
EVENT 9,408.066: Microsoft-Windows-DotNETRuntimeRundown/Loader/AppDomainDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=52; AppDomainID=10,472,424; AppDomainFlags=268435459; AppDomainName=IpOverUsbSvc.exe; AppDomainIndex=1; ClrInstanceID=10; 
EVENT 9,408.090: Microsoft-Windows-DotNETRuntimeRundown/Loader/AppDomainDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=44; AppDomainID=1,948,739,184; AppDomainFlags=Shared; AppDomainName=SharedDomain; AppDomainIndex=0; ClrInstanceID=10; 
EVENT 9,408.091: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopComplete PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=2; DataLen=2; ClrInstanceID=10; 
EVENT 9,408.692: Microsoft-Windows-DotNETRuntimeRundown/Loader/AppDomainDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=44; AppDomainID=19,775,488; AppDomainFlags=268435459; AppDomainName=PerfView.exe; AppDomainIndex=1; ClrInstanceID=10; 
EVENT 9,408.707: Microsoft-Windows-DotNETRuntimeRundown/Loader/AppDomainDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=44; AppDomainID=1,948,739,184; AppDomainFlags=Shared; AppDomainName=SharedDomain; AppDomainIndex=0; ClrInstanceID=10; 
EVENT 9,408.708: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopComplete PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=10; 
EVENT 9,409.026: Microsoft-Windows-DotNETRuntimeRundown/Loader/AppDomainDCStop PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=68; AppDomainID=5,204,240; AppDomainFlags=268435459; AppDomainName=Aegis.WindowsService...; AppDomainIndex=1; ClrInstanceID=8; 
EVENT 9,409.044: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopComplete PID=1712; TID=12336; PName=Aegis.WindowsService; ProceNum=3; DataLen=2; ClrInstanceID=8; 
EVENT 9,417.212: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopComplete PID=6416; TID=18968; PName=iexplore; ProceNum=1; DataLen=2; ClrInstanceID=101; 
EVENT 9,909.450: Microsoft-Windows-DotNETRuntimeRundown/Runtime/Start PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=247; ClrInstanceID=10; Sku=DesktopClr; BclMajorVersion=4; BclMinorVersion=0; BclBuildNumber=0; BclQfeNumber=0; VMMajorVersion=4; VMMinorVersion=0; VMBuildNumber=30,319; VMQfeNumber=0; StartupFlags=CONCURRENT_GC; StartupMode=ManagedExe; CommandLine=PerfView.exe  stop /...; ComObjectGuid=00000000-0000-0000-0...; RuntimeDllPath=C:\Windows\Microsoft...; 
EVENT 9,909.452: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopInit PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=10; 
EVENT 9,911.724: Microsoft-Windows-DotNETRuntimeRundown/Loader/ThreadDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=30; ManagedThreadID=19,799,368; AppDomainID=19,775,488; Flags=0; ManagedThreadIndex=1; OSThreadID=8,440; ClrInstanceID=10; 
EVENT 9,911.725: Microsoft-Windows-DotNETRuntimeRundown/Loader/ThreadDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=30; ManagedThreadID=19,867,608; AppDomainID=19,775,488; Flags=2; ManagedThreadIndex=2; OSThreadID=7,192; ClrInstanceID=10; 
EVENT 9,911.726: Microsoft-Windows-DotNETRuntimeRundown/Loader/ThreadDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=30; ManagedThreadID=19,855,440; AppDomainID=19,775,488; Flags=0; ManagedThreadIndex=3; OSThreadID=17,160; ClrInstanceID=10; 
EVENT 9,911.727: Microsoft-Windows-DotNETRuntimeRundown/Loader/ThreadDCStop PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=30; ManagedThreadID=19,856,792; AppDomainID=19,775,488; Flags=0; ManagedThreadIndex=4; OSThreadID=16,312; ClrInstanceID=10; 
EVENT 9,911.728: Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopComplete PID=24000; TID=16312; PName=PerfView; ProceNum=0; DataLen=2; ClrInstanceID=10; 
EVENT 9,912.310: PerfView/ClrEnableParameters PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=16; keywords=0x80070138; level=Verbose; 
EVENT 9,914.421: PerfView/WaitForIdle PID=24000; TID=8440; PName=PerfView; ProceNum=2; DataLen=0; 
EVENT 9,917.689: Microsoft-Windows-DotNETRuntimeRundown/Loader/ThreadDCStop PID=2208; TID=16648; PName=IpOverUsbSvc; ProceNum=3; DataLen=30; ManagedThreadID=10,500,368; AppDomainID=10,472,424; Flags=0; ManagedThreadIndex=1; OSThreadID=2,212; ClrInstanceID=10; 
EVENT 11,922.937: PerfView/CommandLineParameters PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=130; commandLine= /MinSecForTrigger:0...; currentDirectory=C:\temp; version=1.9.0.0; 
EVENT 11,922.942: PerfView/StartAndStopTimes PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=8; startTimeRelativeMSec=0; stopTimeRelativeMSec=2,788; 
EVENT 11,922.943: PerfView/Rundown/Stop PID=24000; TID=8440; PName=PerfView; ProceNum=3; DataLen=0; 
EVENT 11,922.943: Windows Kernel/SysConfig/BuildInfo PID=0; TID=0; PName=Idle; ProceNum=3; DataLen=146; InstallDate=70/01/01 00:00:00.00...; BuildLab=10586.306.amd64fre.t...; ProductName=Windows 10 Enterpris...; 
EVENT 11,922.943: Windows Kernel/SysConfig/Opcode(37) PID=0; TID=0; PName=Idle; ProceNum=3; DataLen=16; 
COUNT KernelTraceControl/ImageID:8942
COUNT KernelTraceControl/ImageID/DbgID_ILRSDS:96
COUNT KernelTraceControl/ImageID/DbgID_RSDS:8846
COUNT KernelTraceControl/ImageID/FileVersion:1241
COUNT KernelTraceControl/ImageID/None:40
COUNT KernelTraceControl/MetaData/EventInfo:69
COUNT KernelTraceControl/MetaData/EventMapInfo:24
COUNT MSNT_SystemTrace/Image/KernelBase:1
COUNT MSNT_SystemTrace/SystemConfig/Platform:1
COUNT Microsoft-JScript/MethodRundown/DCEndComplete:1
COUNT Microsoft-JScript/MethodRundown/DCEndInit:1
COUNT Microsoft-JScript/MethodRundown/DCStartComplete:1
COUNT Microsoft-JScript/MethodRundown/DCStartInit:1
COUNT Microsoft-JScript/MethodRundown/MethodDCStart:9
COUNT Microsoft-JScript/ScriptContextRundown/ScriptContextDCEnd:2
COUNT Microsoft-JScript/ScriptContextRundown/ScriptContextDCStart:2
COUNT Microsoft-JScript/ScriptContextRundown/SourceDCEnd:2
COUNT Microsoft-JScript/ScriptContextRundown/SourceDCStart:2
COUNT Microsoft-Windows-DNS-Client/DnsNoServerConfigV6:1
COUNT Microsoft-Windows-DNS-Client/DnsServerForInterface:3
COUNT Microsoft-Windows-DNS-Client/EventID(3006):2
COUNT Microsoft-Windows-DNS-Client/EventID(3008):2
COUNT Microsoft-Windows-DNS-Client/EventID(3009):1
COUNT Microsoft-Windows-DNS-Client/EventID(3010):2
COUNT Microsoft-Windows-DNS-Client/EventID(3011):2
COUNT Microsoft-Windows-DNS-Client/EventID(3016):2
COUNT Microsoft-Windows-DNS-Client/EventID(3018):2
COUNT Microsoft-Windows-DNS-Client/EventID(3019):2
COUNT Microsoft-Windows-DNS-Client/EventID(3020):2
COUNT Microsoft-Windows-DotNETRuntime/AppDomainResourceManagement/ThreadCreated:4
COUNT Microsoft-Windows-DotNETRuntime/GC/AllocationTick:11438
COUNT Microsoft-Windows-DotNETRuntime/GC/CreateSegment:2
COUNT Microsoft-Windows-DotNETRuntime/GC/FinalizeObject:22
COUNT Microsoft-Windows-DotNETRuntime/GC/FinalizersStart:3
COUNT Microsoft-Windows-DotNETRuntime/GC/FinalizersStop:3
COUNT Microsoft-Windows-DotNETRuntime/GC/HeapStats:234
COUNT Microsoft-Windows-DotNETRuntime/GC/RestartEEStart:235
COUNT Microsoft-Windows-DotNETRuntime/GC/RestartEEStop:235
COUNT Microsoft-Windows-DotNETRuntime/GC/Start:234
COUNT Microsoft-Windows-DotNETRuntime/GC/Stop:234
COUNT Microsoft-Windows-DotNETRuntime/GC/SuspendEEStart:235
COUNT Microsoft-Windows-DotNETRuntime/GC/SuspendEEStop:235
COUNT Microsoft-Windows-DotNETRuntime/GarbageCollection/IncreaseMemoryPressure:1
COUNT Microsoft-Windows-DotNETRuntime/Loader/AppDomainLoad:2
COUNT Microsoft-Windows-DotNETRuntime/Loader/AppDomainUnload:2
COUNT Microsoft-Windows-DotNETRuntime/Loader/AssemblyLoad:9
COUNT Microsoft-Windows-DotNETRuntime/Loader/AssemblyUnload:9
COUNT Microsoft-Windows-DotNETRuntime/Loader/DomainModuleLoad:8
COUNT Microsoft-Windows-DotNETRuntime/Loader/ModuleLoad:9
COUNT Microsoft-Windows-DotNETRuntime/Loader/ModuleUnload:9
COUNT Microsoft-Windows-DotNETRuntime/Method/JittingStarted:186
COUNT Microsoft-Windows-DotNETRuntime/Method/LoadVerbose:186
COUNT Microsoft-Windows-DotNETRuntime/Method/UnloadVerbose:240
COUNT Microsoft-Windows-DotNETRuntime/Runtime/Start:1
COUNT Microsoft-Windows-DotNETRuntime/Type/BulkType:22
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStart:15
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/DownloadPhaseStop:18
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/FusionMessage:447
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStart:9
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderAssemblyInitPhaseStop:9
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventPhaseStart:9
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderDeliverEventsPhaseStop:9
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStart:9
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderMappingPhaseStop:9
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStart:42
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoaderPhaseStop:42
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LookupAndProbingPhaseStop:10
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/LoopupAndProbingPhaseStart:18
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStart:8
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/NgenPhaseStop:8
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStart:10
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/PhaseStop:8
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStart:18
COUNT Microsoft-Windows-DotNETRuntimePrivate/Binding/PolicyPhaseStop:18
COUNT Microsoft-Windows-DotNETRuntimePrivate/GC/GlobalHeapHistory:234
COUNT Microsoft-Windows-DotNETRuntimePrivate/GC/MarkCards:233
COUNT Microsoft-Windows-DotNETRuntimePrivate/GC/MarkFinalizeQueueRoots:234
COUNT Microsoft-Windows-DotNETRuntimePrivate/GC/MarkHandles:234
COUNT Microsoft-Windows-DotNETRuntimePrivate/GC/MarkStackRoots:234
COUNT Microsoft-Windows-DotNETRuntimePrivate/GC/PerHeapHistory:234
COUNT Microsoft-Windows-DotNETRuntimePrivate/GC/Settings:4
COUNT Microsoft-Windows-DotNETRuntimePrivate/NgenBinder/NgenBind:8
COUNT Microsoft-Windows-DotNETRuntimeRundown/Loader/AppDomainDCStop:9
COUNT Microsoft-Windows-DotNETRuntimeRundown/Loader/AssemblyDCStop:46
COUNT Microsoft-Windows-DotNETRuntimeRundown/Loader/DomainModuleDCStop:31
COUNT Microsoft-Windows-DotNETRuntimeRundown/Loader/ModuleDCStop:46
COUNT Microsoft-Windows-DotNETRuntimeRundown/Loader/ThreadDCStop:12
COUNT Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopComplete:8
COUNT Microsoft-Windows-DotNETRuntimeRundown/Method/DCStopInit:8
COUNT Microsoft-Windows-DotNETRuntimeRundown/Runtime/Start:8
COUNT Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerOnShellHookMessage/Start:2
COUNT Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerOnShellHookMessage/Stop:2
COUNT Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Start:2
COUNT Microsoft-Windows-Immersive-Shell/ImmersiveShellAppManagerSetActiveProcess/Stop:2
COUNT Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_ENABLE:14
COUNT Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_REGISTER:74
COUNT Microsoft-Windows-Kernel-EventTracing/ETW_TASK_PROVIDER/ETW_OPCODE_UNREGISTER:66
COUNT Microsoft-Windows-Kernel-EventTracing/ETW_TASK_SESSION/ETW_OPCODE_STOP:1
COUNT PerfView/ClrEnableParameters:2
COUNT PerfView/CommandLineParameters:3
COUNT PerfView/KernelEnableParameters:1
COUNT PerfView/ManifestData:3
COUNT PerfView/ProviderEnableParameters:28
COUNT PerfView/Rundown/Start:1
COUNT PerfView/Rundown/Stop:1
COUNT PerfView/SessionParameters:2
COUNT PerfView/StartAndStopTimes:2
COUNT PerfView/Tracing/Start:1
COUNT PerfView/Tracing/Stop:1
COUNT PerfView/WaitForIdle:1
COUNT System.Diagnostics.Eventing.FrameworkEventSource/ManifestData:5
COUNT Windows Kernel/DiskIO/FlushBuffers:11
COUNT Windows Kernel/DiskIO/FlushInit:11
COUNT Windows Kernel/DiskIO/Read:70
COUNT Windows Kernel/DiskIO/ReadInit:70
COUNT Windows Kernel/DiskIO/Write:320
COUNT Windows Kernel/DiskIO/WriteInit:322
COUNT Windows Kernel/EventTrace:1
COUNT Windows Kernel/EventTrace/EndExtension:2
COUNT Windows Kernel/EventTrace/Extension:3
COUNT Windows Kernel/EventTrace/RundownComplete:2
COUNT Windows Kernel/Image/DCStart:4406
COUNT Windows Kernel/Image/DCStop:4409
COUNT Windows Kernel/Image/Load:68
COUNT Windows Kernel/Image/Unload:65
COUNT Windows Kernel/Memory/HardFault:71
COUNT Windows Kernel/PerfInfo/CollectionEnd:1
COUNT Windows Kernel/PerfInfo/CollectionStart:1
COUNT Windows Kernel/PerfInfo/Sample:30926
COUNT Windows Kernel/Process/DCStart:67
COUNT Windows Kernel/Process/DCStop:67
COUNT Windows Kernel/Process/Defunct:61
COUNT Windows Kernel/Process/PerfCtr:1
COUNT Windows Kernel/Process/PerfCtrRundown:67
COUNT Windows Kernel/Process/Start:1
COUNT Windows Kernel/Process/Stop:1
COUNT Windows Kernel/SysConfig/BuildInfo:1
COUNT Windows Kernel/SysConfig/Opcode(37):1
COUNT Windows Kernel/SysConfig/SystemPaths:1
COUNT Windows Kernel/SysConfig/VolumeMapping:9
COUNT Windows Kernel/SystemConfig/CPU:1
COUNT Windows Kernel/SystemConfig/IDEChannel:2
COUNT Windows Kernel/SystemConfig/LogDisk:1
COUNT Windows Kernel/SystemConfig/NIC:3
COUNT Windows Kernel/SystemConfig/Network:1
COUNT Windows Kernel/SystemConfig/PhyDisk:1
COUNT Windows Kernel/SystemConfig/PnP:100
COUNT Windows Kernel/SystemConfig/Power:1
COUNT Windows Kernel/SystemConfig/Services:210
COUNT Windows Kernel/TcpIp/Connect:1
COUNT Windows Kernel/TcpIp/Recv:1
COUNT Windows Kernel/TcpIp/RecvIPV6:159
COUNT Windows Kernel/TcpIp/Send:2
COUNT Windows Kernel/TcpIp/SendIPV6:7
COUNT Windows Kernel/Thread/Start:14
COUNT Windows Kernel/Thread/Stop:18
COUNT Windows Kernel/UdpIp/Recv:42
COUNT Windows Kernel/UdpIp/RecvIPV6:871
COUNT Windows Kernel/UdpIp/Send:20
COUNT Windows Kernel/UdpIp/SendIPV6:1906
