| Min version | 8 Pre RTM |
|---|---|
| Max version | 10 TH2 |
| x64 offset offset:bitpos | Field Name |
| 0x0000 | uint16_t Size |
| 0x0002 | uint16_t HeaderType |
| 0x0004 | uint16_t Flags |
| 0x0006 | uint16_t EventProperty |
| 0x0008 | unsigned long ThreadId |
| 0x000C | unsigned long ProcessId |
| 0x0010 | union _LARGE_INTEGER TimeStamp |
| 0x0018 | struct _GUID ProviderId |
| 0x0028 | struct _EVENT_DESCRIPTOR EventDescriptor |
| 0x0038 | unsigned long KernelTime |
| 0x0038 | uint64_t ProcessorTime |
| 0x003C | unsigned long UserTime |
| 0x0040 | struct _GUID ActivityId |