It seems the leak is coming from the serialisation through the managed process.