updates/si/diffs/
etw_event_processor.xms.fpx