diff --git a/internal/etw/provider.go b/internal/etw/provider.go
index 6171f6a..c413351 100644
--- a/internal/etw/provider.go
+++ b/internal/etw/provider.go
@@ -91,9 +91,9 @@ func providerIDFromName(name string) *windows.GUID {
 	sum[7] = (sum[7] & 0xf) | 0x50
 
 	return &windows.GUID{
-		Data1: binary.LittleEndian.Uint32(sum[0:3]),
-		Data2: binary.LittleEndian.Uint16(sum[4:5]),
-		Data3: binary.LittleEndian.Uint16(sum[6:7]),
+		Data1: binary.LittleEndian.Uint32(sum[0:4]),
+		Data2: binary.LittleEndian.Uint16(sum[4:6]),
+		Data3: binary.LittleEndian.Uint16(sum[6:8]),
 		Data4: [8]byte{sum[8], sum[9], sum[10], sum[11], sum[12], sum[13], sum[14], sum[15]},
 	}
 }