Version: 2.8.5555 (Oct 13 2025 18:38:28)
Compiled with: Clang Version: 18.1.3
Npm: 10.8.2
HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB
TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553
2026-03-25 00:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13357 KB; ModuleMetadata: 1881 KB; ProcessInfo: 1164 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; BaseEvent: 274 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 110 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::ProcessConditionsCache: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18773 KB;
2026-03-25 00:00:56 7967594126c0 Info: Events Statistics, From:, 2026-03-24 23:53:52, To:, 2026-03-25 00:00:56, Duration (s):, 424, Events Per Second:, 3.881, Events:, 1647, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1407, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 231, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 189509
2026-03-25 00:00:57 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s084ms.
2026-03-25 00:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13357 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 373 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 17712 KB;
2026-03-25 00:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13357 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 376 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 68 KB; rules::ProcessConditionsCache: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 17665 KB;
2026-03-25 00:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13357 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 380 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 58 KB; TcpIpConnectionsManager: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 17649 KB;
2026-03-25 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:03:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13357 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 387 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 60 KB; TcpIpConnectionsManager: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 17659 KB;
2026-03-25 00:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 91 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18525 KB;
2026-03-25 00:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 122 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18732 KB;
2026-03-25 00:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18727 KB;
2026-03-25 00:07:56 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:00:56, To:, 2026-03-25 00:07:56, Duration (s):, 420, Events Per Second:, 1.191, Events:, 501, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 36, Livegrid:, 36, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61115
2026-03-25 00:07:57 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s866ms.
2026-03-25 00:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 315 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18392 KB;
2026-03-25 00:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 315 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18405 KB;
2026-03-25 00:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:09:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 620 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 315 KB; ModuleInfoCache: 307 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18406 KB;
2026-03-25 00:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; ProcessInfo: 691 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::ProcessConditionsCache: 350 KB; ModuleInfoCache: 308 KB; CacheEntry: 280 KB; TcpIpConnectionsManager: 245 KB; BaseEvent: 141 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 49 KB; ProcessInfoCommandLineTag: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19110 KB;
2026-03-25 00:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; ProcessInfo: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 344 KB; ModuleInfoCache: 308 KB; CacheEntry: 280 KB; TcpIpConnectionsManager: 250 KB; BaseEvent: 143 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 50 KB; ProcessInfoCommandLineTag: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19121 KB;
2026-03-25 00:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; ProcessInfo: 707 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 308 KB; CacheEntry: 280 KB; TcpIpConnectionsManager: 263 KB; BaseEvent: 145 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 51 KB; ProcessInfoCommandLineTag: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19167 KB;
2026-03-25 00:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 308 KB; CacheEntry: 280 KB; BaseEvent: 165 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 77 KB; BatchSerializer::EventsQueueTag: 60 KB; ProcessInfoCommandLineTag: 32 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18821 KB;
2026-03-25 00:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:14:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:14:56 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:05:23, To:, 2026-03-25 00:14:56, Duration (s):, 573, Events Per Second:, 2.989, Events:, 1714, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1486, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 51, Livegrid:, 51, OriginUrl:, 0, Alarms:, 125, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 201577
2026-03-25 00:14:58 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s586ms.
2026-03-25 00:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 424 KB; ModuleInfoCache: 308 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 181 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18384 KB;
2026-03-25 00:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1881 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 450 KB; ModuleInfoCache: 308 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 188 KB; TcpIpConnectionsManager: 173 KB; cloudutils::CloudData: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18429 KB;
2026-03-25 00:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1890 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 455 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 129 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18428 KB;
2026-03-25 00:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1890 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 502 KB; rules::ProcessConditionsCache: 322 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; cloudutils::CloudData: 129 KB; TcpIpConnectionsManager: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 6 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18640 KB;
2026-03-25 00:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1890 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 534 KB; rules::ProcessConditionsCache: 419 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; cloudutils::CloudData: 129 KB; TcpIpConnectionsManager: 117 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 85 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18817 KB;
2026-03-25 00:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:19:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13869 KB; ModuleMetadata: 1890 KB; ProcessInfo: 624 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 203 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 129 KB; BaseEvent: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19112 KB;
2026-03-25 00:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1890 KB; ProcessInfo: 728 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 309 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 307 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 214 KB; cloudutils::CloudData: 129 KB; BaseEvent: 112 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19392 KB;
2026-03-25 00:22:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:14:56, To:, 2026-03-25 00:21:57, Duration (s):, 421, Events Per Second:, 1.814, Events:, 764, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 646, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 21, Livegrid:, 21, OriginUrl:, 0, Alarms:, 75, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 98624
2026-03-25 00:22:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s058ms.
2026-03-25 00:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 416 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 233 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19054 KB;
2026-03-25 00:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1890 KB; ProcessInfo: 584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 518 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 129 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19395 KB;
2026-03-25 00:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1890 KB; ProcessInfo: 606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 451 KB; rules::ProcessConditionsCache: 326 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 129 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19300 KB;
2026-03-25 00:24:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:24:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:24:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:24:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1890 KB; ProcessInfo: 611 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 221 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 220 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 129 KB; BaseEvent: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18950 KB;
2026-03-25 00:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1892 KB; ProcessInfo: 613 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 135 KB; cloudutils::CloudData: 129 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18675 KB;
2026-03-25 00:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1892 KB; ProcessInfo: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 129 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 6 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18823 KB;
2026-03-25 00:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 268 KB; BaseEvent: 176 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19042 KB;
2026-03-25 00:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:29:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:21:55, To:, 2026-03-25 00:29:11, Duration (s):, 436, Events Per Second:, 2.548, Events:, 1113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 854, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 73, Livegrid:, 73, OriginUrl:, 0, Alarms:, 112, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 135476
2026-03-25 00:29:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s015ms.
2026-03-25 00:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 340 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18552 KB;
2026-03-25 00:29:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:29:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:29:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:29:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 433 KB; rules::ProcessConditionsCache: 318 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18529 KB;
2026-03-25 00:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 468 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; cloudutils::CloudData: 129 KB; TcpIpConnectionsManager: 105 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18548 KB;
2026-03-25 00:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 471 KB; rules::ProcessConditionsCache: 327 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; cloudutils::CloudData: 129 KB; TcpIpConnectionsManager: 82 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18529 KB;
2026-03-25 00:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; ProcessInfo: 641 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 172 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 129 KB; BaseEvent: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18728 KB;
2026-03-25 00:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; ProcessInfo: 917 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 250 KB; BaseEvent: 224 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 76 KB; BatchSerializer::EventsQueueTag: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19187 KB;
2026-03-25 00:34:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:34:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:34:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:34:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 13875 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1358 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; BaseEvent: 452 KB; TcpIpConnectionsManager: 437 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 129 KB; BatchSerializer::EventsQueueTag: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20184 KB;
2026-03-25 00:36:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:29:15, To:, 2026-03-25 00:36:11, Duration (s):, 416, Events Per Second:, 8.729, Events:, 3639, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3025, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 22, Livegrid:, 22, OriginUrl:, 0, Alarms:, 569, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 402547
2026-03-25 00:36:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s218ms.
2026-03-25 00:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1439 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 280 KB; cloudutils::CloudData: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20448 KB;
2026-03-25 00:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1755 KB; TcpIpConnectionsManager: 600 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 216 KB; BaseEvent: 173 KB; cloudutils::CloudData: 129 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20923 KB;
2026-03-25 00:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1853 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; TcpIpConnectionsManager: 441 KB; rules::ProcessConditionsCache: 310 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; BaseEvent: 220 KB; cloudutils::CloudData: 129 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21025 KB;
2026-03-25 00:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2106 KB; ModuleMetadata: 1893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; BaseEvent: 360 KB; TcpIpConnectionsManager: 344 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 138 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 103 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21209 KB;
2026-03-25 00:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:39:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2336 KB; ModuleMetadata: 1893 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; BaseEvent: 459 KB; rules::ProcessConditionsCache: 385 KB; TcpIpConnectionsManager: 326 KB; ModuleInfoCache: 309 KB; CacheEntry: 282 KB; BatchSerializer::EventsQueueTag: 132 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21811 KB;
2026-03-25 00:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2395 KB; ModuleMetadata: 1895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 489 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 309 KB; TcpIpConnectionsManager: 305 KB; CacheEntry: 283 KB; BatchSerializer::EventsQueueTag: 141 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21870 KB;
2026-03-25 00:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2407 KB; ModuleMetadata: 1895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; BaseEvent: 497 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 215 KB; BatchSerializer::EventsQueueTag: 145 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21771 KB;
2026-03-25 00:43:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:36:11, To:, 2026-03-25 00:43:11, Duration (s):, 420, Events Per Second:, 7.195, Events:, 3029, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2499, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 407, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 337547
2026-03-25 00:43:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s219ms.
2026-03-25 00:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 411 KB; ProcessInfo: 376 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 129 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19055 KB;
2026-03-25 00:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 406 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 90 KB; rules::ProcessConditionsCache: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18705 KB;
2026-03-25 00:44:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:44:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:44:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:44:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 309 KB; rules::ProcessConditionsCache: 286 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 130 KB; BaseEvent: 127 KB; BatchSerializer::EventsQueueTag: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19390 KB;
2026-03-25 00:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; ProcessInfo: 713 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 215 KB; BaseEvent: 147 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19678 KB;
2026-03-25 00:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; ProcessInfo: 735 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 226 KB; BaseEvent: 154 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19664 KB;
2026-03-25 00:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; BaseEvent: 170 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19602 KB;
2026-03-25 00:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; ProcessInfo: 985 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 309 KB; BaseEvent: 283 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 202 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 81 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19885 KB;
2026-03-25 00:49:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:49:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:49:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:49:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:50:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:43:12, To:, 2026-03-25 00:50:11, Duration (s):, 419, Events Per Second:, 4.043, Events:, 1698, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1440, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 245, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 190707
2026-03-25 00:50:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s962ms.
2026-03-25 00:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 502 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19012 KB;
2026-03-25 00:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 502 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 131 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18996 KB;
2026-03-25 00:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 509 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18906 KB;
2026-03-25 00:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1895 KB; ProcessInfo: 562 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 277 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19090 KB;
2026-03-25 00:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19158 KB;
2026-03-25 00:54:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:54:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:54:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:54:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 00:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; ProcessInfo: 705 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 328 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19519 KB;
2026-03-25 00:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 251 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 86 KB; BaseEvent: 67 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19481 KB;
2026-03-25 00:57:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:51:25, To:, 2026-03-25 00:57:11, Duration (s):, 346, Events Per Second:, 1.677, Events:, 582, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 541, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70575
2026-03-25 00:57:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s785ms.
2026-03-25 00:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 358 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18881 KB;
2026-03-25 00:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 359 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 69 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18806 KB;
2026-03-25 00:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 00:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 00:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 412 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 111 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18911 KB;
2026-03-25 00:59:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 00:59:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 00:59:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 00:59:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 478 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 172 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 129 KB; BaseEvent: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19015 KB;
2026-03-25 01:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 129 KB; BaseEvent: 92 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19176 KB;
2026-03-25 01:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 258 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 129 KB; BaseEvent: 118 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19299 KB;
2026-03-25 01:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; ProcessInfo: 608 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 262 KB; cloudutils::CloudData: 129 KB; BaseEvent: 122 KB; TcpIpConnectionsManager: 111 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19289 KB;
2026-03-25 01:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:04:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 00:57:11, To:, 2026-03-25 01:04:12, Duration (s):, 421, Events Per Second:, 1.888, Events:, 795, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 705, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 81, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 98216
2026-03-25 01:04:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s252ms.
2026-03-25 01:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 424 KB; ProcessInfo: 336 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; cloudutils::CloudData: 129 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19055 KB;
2026-03-25 01:04:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:04:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:04:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:04:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 356 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 163 KB; TcpIpConnectionsManager: 131 KB; cloudutils::CloudData: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18837 KB;
2026-03-25 01:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 384 KB; ModuleInfoCache: 309 KB; rules::ProcessConditionsCache: 290 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19078 KB;
2026-03-25 01:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1896 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 655 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 392 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 107 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19287 KB;
2026-03-25 01:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 747 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; ModuleInfoCache: 309 KB; rules::ProcessConditionsCache: 284 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 130 KB; BaseEvent: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19537 KB;
2026-03-25 01:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 728 KB; ProcessInfo: 624 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 314 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 130 KB; BaseEvent: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19721 KB;
2026-03-25 01:09:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:09:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:09:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:09:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 730 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 309 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 130 KB; BaseEvent: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19745 KB;
2026-03-25 01:11:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:04:06, To:, 2026-03-25 01:11:12, Duration (s):, 426, Events Per Second:, 2.293, Events:, 978, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 845, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 82, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 118331
2026-03-25 01:11:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s008ms.
2026-03-25 01:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 732 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 437 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19284 KB;
2026-03-25 01:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 680 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 437 KB; rules::ProcessConditionsCache: 334 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19186 KB;
2026-03-25 01:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19153 KB;
2026-03-25 01:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 447 KB; rules::ProcessConditionsCache: 334 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19108 KB;
2026-03-25 01:14:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:14:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:14:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:14:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 480 KB; rules::ProcessConditionsCache: 365 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19178 KB;
2026-03-25 01:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 139 KB; rules::ProcessConditionsCache: 137 KB; cloudutils::CloudData: 130 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19185 KB;
2026-03-25 01:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 91 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19074 KB;
2026-03-25 01:18:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:11:12, To:, 2026-03-25 01:18:12, Duration (s):, 420, Events Per Second:, 1.073, Events:, 451, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55191
2026-03-25 01:18:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s540ms.
2026-03-25 01:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 387 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 132 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18851 KB;
2026-03-25 01:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 418 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 132 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18873 KB;
2026-03-25 01:19:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:19:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:19:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:19:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 449 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18946 KB;
2026-03-25 01:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 481 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19030 KB;
2026-03-25 01:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 484 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 93 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19021 KB;
2026-03-25 01:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 493 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 88 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19029 KB;
2026-03-25 01:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 543 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19168 KB;
2026-03-25 01:24:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:24:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:24:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:24:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:25:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:18:12, To:, 2026-03-25 01:25:12, Duration (s):, 420, Events Per Second:, 1.130, Events:, 475, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 60, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58254
2026-03-25 01:25:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s793ms.
2026-03-25 01:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 323 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 239 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18829 KB;
2026-03-25 01:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 352 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18914 KB;
2026-03-25 01:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 428 KB; rules::ProcessConditionsCache: 340 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19119 KB;
2026-03-25 01:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 527 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 130 KB; BaseEvent: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 22 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19009 KB;
2026-03-25 01:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 310 KB; TcpIpConnectionsManager: 284 KB; CacheEntry: 283 KB; BaseEvent: 265 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20096 KB;
2026-03-25 01:29:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:29:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:29:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:29:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1239 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; BaseEvent: 444 KB; rules::ProcessConditionsCache: 422 KB; TcpIpConnectionsManager: 399 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20814 KB;
2026-03-25 01:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1370 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; BaseEvent: 506 KB; TcpIpConnectionsManager: 418 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 152 KB; BatchSerializer::EventsQueueTag: 134 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20765 KB;
2026-03-25 01:32:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:25:20, To:, 2026-03-25 01:32:12, Duration (s):, 412, Events Per Second:, 7.040, Events:, 2904, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 485, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 322793
2026-03-25 01:32:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s378ms.
2026-03-25 01:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 310 KB; TcpIpConnectionsManager: 295 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19443 KB;
2026-03-25 01:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 237 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19540 KB;
2026-03-25 01:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1031 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 367 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 130 KB; BaseEvent: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19865 KB;
2026-03-25 01:34:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:34:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:34:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:34:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1257 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 222 KB; BaseEvent: 212 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20169 KB;
2026-03-25 01:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1280 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 235 KB; BaseEvent: 225 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20194 KB;
2026-03-25 01:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1342 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 310 KB; rules::ProcessConditionsCache: 290 KB; CacheEntry: 283 KB; BaseEvent: 254 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20319 KB;
2026-03-25 01:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1683 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 421 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 268 KB; TcpIpConnectionsManager: 249 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20915 KB;
2026-03-25 01:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:39:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:32:25, To:, 2026-03-25 01:39:12, Duration (s):, 407, Events Per Second:, 6.326, Events:, 2578, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2160, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 417, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 287627
2026-03-25 01:39:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s439ms.
2026-03-25 01:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 746 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 319 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 256 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19503 KB;
2026-03-25 01:39:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:39:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:39:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:39:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 753 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 326 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19490 KB;
2026-03-25 01:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 759 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::ProcessConditionsCache: 330 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19373 KB;
2026-03-25 01:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 330 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19341 KB;
2026-03-25 01:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19574 KB;
2026-03-25 01:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19602 KB;
2026-03-25 01:44:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:44:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:44:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:44:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; ProcessInfo: 926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 104 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19459 KB;
2026-03-25 01:46:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:39:32, To:, 2026-03-25 01:46:12, Duration (s):, 400, Events Per Second:, 1.226, Events:, 491, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 419, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58493
2026-03-25 01:46:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s703ms.
2026-03-25 01:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 396 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18825 KB;
2026-03-25 01:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 402 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 133 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18848 KB;
2026-03-25 01:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 452 KB; ModuleInfoCache: 310 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18970 KB;
2026-03-25 01:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 310 KB; rules::ProcessConditionsCache: 287 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19257 KB;
2026-03-25 01:49:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:49:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:49:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:49:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1900 KB; ProcessInfo: 650 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 162 KB; BaseEvent: 133 KB; cloudutils::CloudData: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19570 KB;
2026-03-25 01:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1900 KB; ProcessInfo: 677 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 152 KB; BaseEvent: 146 KB; cloudutils::CloudData: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19632 KB;
2026-03-25 01:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1900 KB; ProcessInfo: 700 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; BaseEvent: 152 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19234 KB;
2026-03-25 01:53:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:46:18, To:, 2026-03-25 01:53:12, Duration (s):, 414, Events Per Second:, 2.342, Events:, 971, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 815, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 149, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 110336
2026-03-25 01:53:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s236ms.
2026-03-25 01:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1900 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 333 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; cloudutils::CloudData: 129 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18689 KB;
2026-03-25 01:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1900 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 336 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18673 KB;
2026-03-25 01:54:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:54:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:54:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:54:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 01:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1900 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 367 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 90 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18740 KB;
2026-03-25 01:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 415 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 147 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18912 KB;
2026-03-25 01:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 440 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18969 KB;
2026-03-25 01:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 328 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 131 KB; BaseEvent: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19412 KB;
2026-03-25 01:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 01:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 01:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; ProcessInfo: 640 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 371 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 166 KB; BaseEvent: 142 KB; cloudutils::CloudData: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19547 KB;
2026-03-25 01:59:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 01:59:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 01:59:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 01:59:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:00:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 01:53:11, To:, 2026-03-25 02:00:12, Duration (s):, 421, Events Per Second:, 2.085, Events:, 879, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 747, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 127, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 101966
2026-03-25 02:00:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s001ms.
2026-03-25 02:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 492 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19267 KB;
2026-03-25 02:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 137 KB; cloudutils::CloudData: 131 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19183 KB;
2026-03-25 02:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; ProcessInfo: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 131 KB; BaseEvent: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19289 KB;
2026-03-25 02:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; ProcessInfo: 687 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 191 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 131 KB; BaseEvent: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19338 KB;
2026-03-25 02:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1901 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 131 KB; BaseEvent: 117 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19390 KB;
2026-03-25 02:04:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:04:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:04:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:04:45 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 311 KB; CacheEntry: 283 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 131 KB; BaseEvent: 131 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19455 KB;
2026-03-25 02:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 251 KB; BaseEvent: 135 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19460 KB;
2026-03-25 02:07:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:00:12, To:, 2026-03-25 02:07:12, Duration (s):, 420, Events Per Second:, 1.983, Events:, 834, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 701, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 128, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95291
2026-03-25 02:07:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s780ms.
2026-03-25 02:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 311 KB; ProcessInfo: 306 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 277 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18862 KB;
2026-03-25 02:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 312 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 286 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18877 KB;
2026-03-25 02:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 389 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 297 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18999 KB;
2026-03-25 02:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:09:46 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 418 KB; rules::ProcessConditionsCache: 317 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19068 KB;
2026-03-25 02:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 131 KB; BaseEvent: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::ProcessConditionsCache: 33 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19035 KB;
2026-03-25 02:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 90 KB; rules::ProcessConditionsCache: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19019 KB;
2026-03-25 02:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 91 KB; rules::ProcessConditionsCache: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19019 KB;
2026-03-25 02:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:14:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:07:39, To:, 2026-03-25 02:14:12, Duration (s):, 393, Events Per Second:, 1.771, Events:, 697, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 614, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 82, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 82046
2026-03-25 02:14:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s003ms.
2026-03-25 02:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 311 KB; ProcessInfo: 301 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 85 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18634 KB;
2026-03-25 02:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:14:47 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 327 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 114 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18718 KB;
2026-03-25 02:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 403 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18962 KB;
2026-03-25 02:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 746 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 241 KB; BaseEvent: 214 KB; rules::ProcessConditionsCache: 156 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19599 KB;
2026-03-25 02:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1085 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; BaseEvent: 380 KB; TcpIpConnectionsManager: 374 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 118 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20267 KB;
2026-03-25 02:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1108 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; BaseEvent: 392 KB; TcpIpConnectionsManager: 353 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20323 KB;
2026-03-25 02:19:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:19:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:19:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:19:48 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1138 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; BaseEvent: 407 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20281 KB;
2026-03-25 02:21:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:14:52, To:, 2026-03-25 02:21:12, Duration (s):, 380, Events Per Second:, 6.316, Events:, 2404, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1984, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 413, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 267060
2026-03-25 02:21:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s086ms.
2026-03-25 02:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 400 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 241 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18957 KB;
2026-03-25 02:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 406 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18924 KB;
2026-03-25 02:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 434 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 272 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18988 KB;
2026-03-25 02:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 131 KB; BaseEvent: 106 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19160 KB;
2026-03-25 02:24:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:24:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:24:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:24:48 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 233 KB; TcpIpConnectionsManager: 215 KB; BaseEvent: 177 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19648 KB;
2026-03-25 02:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 923 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 259 KB; BaseEvent: 250 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20091 KB;
2026-03-25 02:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; BaseEvent: 277 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19754 KB;
2026-03-25 02:28:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:21:36, To:, 2026-03-25 02:28:12, Duration (s):, 396, Events Per Second:, 5.239, Events:, 2078, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1716, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 359, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 231115
2026-03-25 02:28:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s149ms.
2026-03-25 02:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 732 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 311 KB; rules::ProcessConditionsCache: 303 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19500 KB;
2026-03-25 02:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::ProcessConditionsCache: 354 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19595 KB;
2026-03-25 02:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:29:49 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::ProcessConditionsCache: 382 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 131 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19662 KB;
2026-03-25 02:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 810 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19589 KB;
2026-03-25 02:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 419 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; BaseEvent: 74 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19636 KB;
2026-03-25 02:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1904 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::ProcessConditionsCache: 421 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; BaseEvent: 73 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19637 KB;
2026-03-25 02:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1906 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; BaseEvent: 100 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19415 KB;
2026-03-25 02:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:34:49 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:35:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:28:14, To:, 2026-03-25 02:35:12, Duration (s):, 418, Events Per Second:, 1.407, Events:, 589, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 489, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 93, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68136
2026-03-25 02:35:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s806ms.
2026-03-25 02:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 317 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18665 KB;
2026-03-25 02:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 362 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18804 KB;
2026-03-25 02:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 362 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18782 KB;
2026-03-25 02:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 487 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19168 KB;
2026-03-25 02:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; rules::ProcessConditionsCache: 268 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 108 KB; BaseEvent: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19225 KB;
2026-03-25 02:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:39:49 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1906 KB; ProcessInfo: 587 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 311 KB; CacheEntry: 284 KB; cloudutils::CloudData: 131 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19393 KB;
2026-03-25 02:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; ProcessInfo: 591 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::ProcessConditionsCache: 330 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; BaseEvent: 116 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19394 KB;
2026-03-25 02:42:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:36:02, To:, 2026-03-25 02:42:12, Duration (s):, 370, Events Per Second:, 2.361, Events:, 875, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 749, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 123, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 100857
2026-03-25 02:42:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s823ms.
2026-03-25 02:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 405 KB; ProcessInfo: 386 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19160 KB;
2026-03-25 02:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 405 KB; ProcessInfo: 386 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19140 KB;
2026-03-25 02:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 417 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; rules::ProcessConditionsCache: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18813 KB;
2026-03-25 02:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:44:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 449 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 87 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18838 KB;
2026-03-25 02:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 497 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 109 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18989 KB;
2026-03-25 02:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 133 KB; BaseEvent: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19295 KB;
2026-03-25 02:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; ProcessInfo: 666 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 313 KB; rules::ProcessConditionsCache: 293 KB; CacheEntry: 286 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 145 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19499 KB;
2026-03-25 02:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:49:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:42:10, To:, 2026-03-25 02:49:12, Duration (s):, 422, Events Per Second:, 2.439, Events:, 1031, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 856, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 174, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 116372
2026-03-25 02:49:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s105ms.
2026-03-25 02:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 517 KB; rules::ProcessConditionsCache: 369 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19254 KB;
2026-03-25 02:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:49:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 522 KB; rules::ProcessConditionsCache: 378 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19231 KB;
2026-03-25 02:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::ProcessConditionsCache: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18950 KB;
2026-03-25 02:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1921 KB; ProcessInfo: 596 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::ProcessConditionsCache: 55 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18988 KB;
2026-03-25 02:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; rules::ProcessConditionsCache: 187 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 134 KB; BaseEvent: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19372 KB;
2026-03-25 02:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19434 KB;
2026-03-25 02:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:54:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 02:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19506 KB;
2026-03-25 02:56:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:49:55, To:, 2026-03-25 02:56:12, Duration (s):, 377, Events Per Second:, 1.996, Events:, 754, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 624, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 123, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 86603
2026-03-25 02:56:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s796ms.
2026-03-25 02:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 334 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18912 KB;
2026-03-25 02:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 317 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19044 KB;
2026-03-25 02:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 411 KB; rules::ProcessConditionsCache: 347 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19127 KB;
2026-03-25 02:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 02:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 02:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 437 KB; rules::ProcessConditionsCache: 369 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19191 KB;
2026-03-25 02:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 02:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 02:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 02:59:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 474 KB; rules::ProcessConditionsCache: 413 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19289 KB;
2026-03-25 03:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 519 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 79 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18978 KB;
2026-03-25 03:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; ProcessInfo: 566 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 313 KB; CacheEntry: 286 KB; cloudutils::CloudData: 134 KB; BaseEvent: 96 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19105 KB;
2026-03-25 03:03:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 02:56:05, To:, 2026-03-25 03:03:12, Duration (s):, 427, Events Per Second:, 1.494, Events:, 639, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 549, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 79, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 73124
2026-03-25 03:03:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s844ms.
2026-03-25 03:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1932 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 343 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 86 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18757 KB;
2026-03-25 03:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1932 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 395 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18909 KB;
2026-03-25 03:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:04:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1932 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 396 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18900 KB;
2026-03-25 03:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1932 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 399 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 143 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; TcpIpConnectionsManager: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18912 KB;
2026-03-25 03:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1932 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 399 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 143 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; TcpIpConnectionsManager: 56 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18892 KB;
2026-03-25 03:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 424 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; TcpIpConnectionsManager: 65 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18970 KB;
2026-03-25 03:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 251 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 95 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19272 KB;
2026-03-25 03:09:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:09:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:09:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:09:51 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:10:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:03:13, To:, 2026-03-25 03:10:12, Duration (s):, 419, Events Per Second:, 2.399, Events:, 1007, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 854, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 144, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115573
2026-03-25 03:10:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s161ms.
2026-03-25 03:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 574 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19094 KB;
2026-03-25 03:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 134 KB; BaseEvent: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19574 KB;
2026-03-25 03:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 923 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; TcpIpConnectionsManager: 285 KB; BaseEvent: 164 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19704 KB;
2026-03-25 03:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; TcpIpConnectionsManager: 277 KB; BaseEvent: 225 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20003 KB;
2026-03-25 03:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1185 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; BaseEvent: 285 KB; rules::ProcessConditionsCache: 281 KB; TcpIpConnectionsManager: 262 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20318 KB;
2026-03-25 03:14:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:14:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:14:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:14:51 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1415 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; BaseEvent: 393 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 294 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20578 KB;
2026-03-25 03:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 513 KB; rules::ProcessConditionsCache: 385 KB; TcpIpConnectionsManager: 341 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; BatchSerializer::EventsQueueTag: 139 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21273 KB;
2026-03-25 03:17:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:10:16, To:, 2026-03-25 03:17:12, Duration (s):, 416, Events Per Second:, 8.900, Events:, 3709, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3103, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 605, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 410795
2026-03-25 03:17:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s292ms.
2026-03-25 03:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1061 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; TcpIpConnectionsManager: 399 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 297 KB; CacheEntry: 287 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19993 KB;
2026-03-25 03:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1069 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 308 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 282 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19880 KB;
2026-03-25 03:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1327 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 310 KB; CacheEntry: 287 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 134 KB; BaseEvent: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20197 KB;
2026-03-25 03:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:19:51 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1558 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 302 KB; CacheEntry: 287 KB; BaseEvent: 229 KB; cloudutils::CloudData: 134 KB; rules::ProcessConditionsCache: 68 KB; BatchSerializer::EventsQueueTag: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20445 KB;
2026-03-25 03:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1581 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 314 KB; TcpIpConnectionsManager: 300 KB; CacheEntry: 287 KB; BaseEvent: 244 KB; cloudutils::CloudData: 134 KB; rules::ProcessConditionsCache: 68 KB; BatchSerializer::EventsQueueTag: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20489 KB;
2026-03-25 03:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1822 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; BaseEvent: 362 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; TcpIpConnectionsManager: 285 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21117 KB;
2026-03-25 03:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 1902 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 422 KB; BaseEvent: 401 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21287 KB;
2026-03-25 03:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:24:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:17:16, To:, 2026-03-25 03:24:12, Duration (s):, 416, Events Per Second:, 5.485, Events:, 2286, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1914, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 369, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 255229
2026-03-25 03:24:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s099ms.
2026-03-25 03:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 597 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19434 KB;
2026-03-25 03:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:24:51 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 650 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 314 KB; CacheEntry: 287 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 111 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19101 KB;
2026-03-25 03:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 700 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; cloudutils::CloudData: 134 KB; rules::ProcessConditionsCache: 119 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19226 KB;
2026-03-25 03:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 702 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; cloudutils::CloudData: 134 KB; rules::ProcessConditionsCache: 119 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19232 KB;
2026-03-25 03:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19288 KB;
2026-03-25 03:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 69 KB; BaseEvent: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19275 KB;
2026-03-25 03:29:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:29:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:29:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:29:51 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; ProcessInfo: 735 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 156 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; TcpIpConnectionsManager: 69 KB; BaseEvent: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19299 KB;
2026-03-25 03:31:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:24:17, To:, 2026-03-25 03:31:12, Duration (s):, 415, Events Per Second:, 1.080, Events:, 449, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 377, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53748
2026-03-25 03:31:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s807ms.
2026-03-25 03:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 314 KB; ProcessInfo: 292 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18841 KB;
2026-03-25 03:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 315 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18898 KB;
2026-03-25 03:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 317 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18871 KB;
2026-03-25 03:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 364 KB; ModuleInfoCache: 314 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19037 KB;
2026-03-25 03:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:34:52 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 393 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 288 KB; CacheEntry: 288 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19119 KB;
2026-03-25 03:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 396 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 288 KB; CacheEntry: 288 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19095 KB;
2026-03-25 03:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 396 KB; ModuleInfoCache: 314 KB; rules::ProcessConditionsCache: 288 KB; CacheEntry: 288 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; TcpIpConnectionsManager: 67 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19079 KB;
2026-03-25 03:38:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:31:13, To:, 2026-03-25 03:38:12, Duration (s):, 419, Events Per Second:, 0.989, Events:, 415, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 346, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 68, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48931
2026-03-25 03:38:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s855ms.
2026-03-25 03:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1934 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::ProcessConditionsCache: 343 KB; ModuleInfoCache: 314 KB; ProcessInfo: 305 KB; CacheEntry: 288 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 82 KB; TcpIpConnectionsManager: 79 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19003 KB;
2026-03-25 03:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1942 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 399 KB; rules::ProcessConditionsCache: 371 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19188 KB;
2026-03-25 03:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:39:52 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 135 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19034 KB;
2026-03-25 03:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 480 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 62 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19048 KB;
2026-03-25 03:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1965 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 483 KB; ModuleInfoCache: 318 KB; CacheEntry: 293 KB; cloudutils::CloudData: 136 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::ProcessConditionsCache: 60 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19049 KB;
2026-03-25 03:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1967 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 318 KB; CacheEntry: 293 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 115 KB; BaseEvent: 100 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19122 KB;
2026-03-25 03:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1970 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 319 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 196 KB; BaseEvent: 138 KB; cloudutils::CloudData: 137 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19371 KB;
2026-03-25 03:44:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:44:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:44:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:44:52 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:45:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:38:05, To:, 2026-03-25 03:45:12, Duration (s):, 427, Events Per Second:, 3.181, Events:, 1361, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1041, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 73, Livegrid:, 73, OriginUrl:, 0, Alarms:, 173, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 153411
2026-03-25 03:45:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s295ms.
2026-03-25 03:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1989 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 321 KB; CacheEntry: 296 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 137 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19366 KB;
2026-03-25 03:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1989 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 354 KB; ModuleInfoCache: 321 KB; CacheEntry: 296 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 137 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19334 KB;
2026-03-25 03:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1989 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 354 KB; ModuleInfoCache: 321 KB; CacheEntry: 296 KB; cloudutils::CloudData: 137 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19313 KB;
2026-03-25 03:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1993 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 322 KB; CacheEntry: 296 KB; cloudutils::CloudData: 138 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19340 KB;
2026-03-25 03:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2015 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 139 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19457 KB;
2026-03-25 03:49:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:49:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:49:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:49:52 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2015 KB; ProcessInfo: 655 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 139 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 77 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19281 KB;
2026-03-25 03:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2015 KB; ProcessInfo: 678 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 139 KB; rules::ProcessConditionsCache: 115 KB; TcpIpConnectionsManager: 102 KB; BaseEvent: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19359 KB;
2026-03-25 03:52:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:45:13, To:, 2026-03-25 03:52:12, Duration (s):, 419, Events Per Second:, 1.953, Events:, 820, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 610, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 41, Livegrid:, 41, OriginUrl:, 0, Alarms:, 127, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 92255
2026-03-25 03:52:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s950ms.
2026-03-25 03:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2017 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 325 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 268 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19293 KB;
2026-03-25 03:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2017 KB; ProcessInfo: 741 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 325 KB; CacheEntry: 299 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 139 KB; BaseEvent: 116 KB; rules::ProcessConditionsCache: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19565 KB;
2026-03-25 03:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2017 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 325 KB; CacheEntry: 299 KB; TcpIpConnectionsManager: 236 KB; rules::ProcessConditionsCache: 181 KB; BaseEvent: 152 KB; cloudutils::CloudData: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19769 KB;
2026-03-25 03:54:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:54:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:54:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:54:52 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 03:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2017 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 325 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 190 KB; TcpIpConnectionsManager: 175 KB; BaseEvent: 153 KB; cloudutils::CloudData: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19729 KB;
2026-03-25 03:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2023 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 326 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 240 KB; BaseEvent: 179 KB; cloudutils::CloudData: 139 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19799 KB;
2026-03-25 03:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2026 KB; ProcessInfo: 915 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 293 KB; BaseEvent: 204 KB; cloudutils::CloudData: 140 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19931 KB;
2026-03-25 03:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1103 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 327 KB; CacheEntry: 301 KB; BaseEvent: 298 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 79 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20117 KB;
2026-03-25 03:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 03:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 03:59:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:52:17, To:, 2026-03-25 03:59:12, Duration (s):, 415, Events Per Second:, 5.497, Events:, 2286, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1849, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 24, Livegrid:, 24, OriginUrl:, 0, Alarms:, 388, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 254012
2026-03-25 03:59:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s093ms.
2026-03-25 03:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2040 KB; ProcessInfo: 732 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 328 KB; CacheEntry: 301 KB; TcpIpConnectionsManager: 257 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19759 KB;
2026-03-25 03:59:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 03:59:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 03:59:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 03:59:53 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2042 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 328 KB; CacheEntry: 302 KB; TcpIpConnectionsManager: 249 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19855 KB;
2026-03-25 04:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2043 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 328 KB; CacheEntry: 302 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19789 KB;
2026-03-25 04:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2048 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 329 KB; CacheEntry: 302 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 64 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19708 KB;
2026-03-25 04:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 52 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19699 KB;
2026-03-25 04:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 52 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19700 KB;
2026-03-25 04:04:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:04:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:04:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:04:53 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 52 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19700 KB;
2026-03-25 04:06:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 03:59:16, To:, 2026-03-25 04:06:12, Duration (s):, 416, Events Per Second:, 0.628, Events:, 262, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 140, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 49, Livegrid:, 49, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30093
2026-03-25 04:06:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s630ms.
2026-03-25 04:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; ProcessInfo: 252 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19113 KB;
2026-03-25 04:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 356 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19032 KB;
2026-03-25 04:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 356 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 124 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19031 KB;
2026-03-25 04:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 424 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 81 KB; BaseEvent: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19177 KB;
2026-03-25 04:09:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:09:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:09:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:09:53 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2050 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 471 KB; ModuleInfoCache: 329 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 86 KB; BaseEvent: 82 KB; TcpIpConnectionsManager: 82 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19295 KB;
2026-03-25 04:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2057 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 502 KB; ModuleInfoCache: 330 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 142 KB; BaseEvent: 97 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 87 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19400 KB;
2026-03-25 04:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2057 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 525 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 330 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 142 KB; BaseEvent: 108 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 88 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19455 KB;
2026-03-25 04:13:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:01:42, To:, 2026-03-25 04:13:12, Duration (s):, 690, Events Per Second:, 1.058, Events:, 731, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 632, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 92, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 85090
2026-03-25 04:13:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s859ms.
2026-03-25 04:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2059 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 330 KB; ProcessInfo: 311 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 142 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; TcpIpConnectionsManager: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19066 KB;
2026-03-25 04:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2060 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 336 KB; ModuleInfoCache: 330 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 142 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; TcpIpConnectionsManager: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19135 KB;
2026-03-25 04:14:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:14:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:14:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:14:53 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2060 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ProcessInfo: 362 KB; ModuleInfoCache: 330 KB; rules::ProcessConditionsCache: 324 KB; CacheEntry: 305 KB; cloudutils::CloudData: 142 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 82 KB; TcpIpConnectionsManager: 75 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19211 KB;
2026-03-25 04:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2060 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 330 KB; CacheEntry: 305 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19270 KB;
2026-03-25 04:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 393 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19313 KB;
2026-03-25 04:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 393 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19306 KB;
2026-03-25 04:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 393 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 54 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19290 KB;
2026-03-25 04:19:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:19:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:19:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:19:53 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:20:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:13:11, To:, 2026-03-25 04:20:12, Duration (s):, 421, Events Per Second:, 1.017, Events:, 429, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 356, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 64, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49978
2026-03-25 04:20:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms.
2026-03-25 04:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 331 KB; ProcessInfo: 330 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18878 KB;
2026-03-25 04:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 355 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; rules::ProcessConditionsCache: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18972 KB;
2026-03-25 04:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 377 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19034 KB;
2026-03-25 04:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 402 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 109 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19085 KB;
2026-03-25 04:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 472 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; BaseEvent: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19298 KB;
2026-03-25 04:24:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:24:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:24:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:24:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19527 KB;
2026-03-25 04:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 111 KB; BaseEvent: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19517 KB;
2026-03-25 04:27:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:20:14, To:, 2026-03-25 04:27:12, Duration (s):, 418, Events Per Second:, 1.602, Events:, 671, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 557, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 113, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 77221
2026-03-25 04:27:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s251ms.
2026-03-25 04:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 355 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19199 KB;
2026-03-25 04:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 409 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19265 KB;
2026-03-25 04:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ProcessInfo: 433 KB; rules::ProcessConditionsCache: 370 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19342 KB;
2026-03-25 04:29:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:29:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:29:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:29:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 439 KB; rules::ProcessConditionsCache: 379 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19343 KB;
2026-03-25 04:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19400 KB;
2026-03-25 04:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 487 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BaseEvent: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 20 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19047 KB;
2026-03-25 04:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 297 KB; BaseEvent: 178 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19814 KB;
2026-03-25 04:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:34:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:27:49, To:, 2026-03-25 04:34:12, Duration (s):, 383, Events Per Second:, 2.964, Events:, 1138, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 942, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 193, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 127984
2026-03-25 04:34:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s940ms.
2026-03-25 04:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; ProcessInfo: 566 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19491 KB;
2026-03-25 04:34:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:34:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:34:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:34:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19489 KB;
2026-03-25 04:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2062 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 375 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19465 KB;
2026-03-25 04:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 646 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BaseEvent: 35 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19197 KB;
2026-03-25 04:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::ProcessConditionsCache: 56 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19278 KB;
2026-03-25 04:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 737 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 91 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19419 KB;
2026-03-25 04:39:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:39:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:39:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:39:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 331 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 143 KB; BaseEvent: 117 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19722 KB;
2026-03-25 04:41:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:35:00, To:, 2026-03-25 04:41:12, Duration (s):, 372, Events Per Second:, 2.159, Events:, 805, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 690, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 112, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 92946
2026-03-25 04:41:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s548ms.
2026-03-25 04:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 447 KB; ModuleInfoCache: 331 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19204 KB;
2026-03-25 04:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 474 KB; ModuleInfoCache: 331 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 257 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19259 KB;
2026-03-25 04:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 336 KB; ModuleInfoCache: 331 KB; CacheEntry: 306 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19454 KB;
2026-03-25 04:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 693 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 331 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 143 KB; BaseEvent: 115 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19468 KB;
2026-03-25 04:44:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:44:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:44:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:44:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 841 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 331 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 244 KB; TcpIpConnectionsManager: 213 KB; BaseEvent: 184 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19933 KB;
2026-03-25 04:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1155 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 340 KB; ModuleInfoCache: 331 KB; TcpIpConnectionsManager: 312 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20482 KB;
2026-03-25 04:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1490 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 504 KB; TcpIpConnectionsManager: 387 KB; ModuleInfoCache: 331 KB; CacheEntry: 306 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 133 KB; rules::ProcessConditionsCache: 132 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21054 KB;
2026-03-25 04:48:12 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:41:26, To:, 2026-03-25 04:48:12, Duration (s):, 406, Events Per Second:, 6.939, Events:, 2824, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2333, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 488, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 312510
2026-03-25 04:48:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s696ms.
2026-03-25 04:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 331 KB; TcpIpConnectionsManager: 325 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 137 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19768 KB;
2026-03-25 04:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19735 KB;
2026-03-25 04:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:49:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1346 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 217 KB; BaseEvent: 211 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20486 KB;
2026-03-25 04:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1371 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 251 KB; rules::ProcessConditionsCache: 248 KB; BaseEvent: 223 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20563 KB;
2026-03-25 04:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1442 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 285 KB; BaseEvent: 249 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20816 KB;
2026-03-25 04:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1515 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::ProcessConditionsCache: 384 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; BaseEvent: 289 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 141 KB; BatchSerializer::EventsQueueTag: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20795 KB;
2026-03-25 04:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 364 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 134 KB; BatchSerializer::EventsQueueTag: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20832 KB;
2026-03-25 04:54:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:54:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:54:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:54:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 04:55:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:48:19, To:, 2026-03-25 04:55:12, Duration (s):, 413, Events Per Second:, 5.520, Events:, 2285, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1905, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 377, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 254217
2026-03-25 04:55:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s413ms.
2026-03-25 04:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 655 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 246 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19610 KB;
2026-03-25 04:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 143 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19874 KB;
2026-03-25 04:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2064 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 143 KB; BaseEvent: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::ProcessConditionsCache: 34 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19489 KB;
2026-03-25 04:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; ProcessInfo: 807 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 110 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19511 KB;
2026-03-25 04:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 04:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 04:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; BaseEvent: 125 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19549 KB;
2026-03-25 04:59:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 04:59:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 04:59:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 04:59:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; BaseEvent: 128 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19582 KB;
2026-03-25 05:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; BaseEvent: 142 KB; rules::ProcessConditionsCache: 130 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19653 KB;
2026-03-25 05:02:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 04:55:14, To:, 2026-03-25 05:02:13, Duration (s):, 419, Events Per Second:, 1.870, Events:, 784, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 658, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 123, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 91272
2026-03-25 05:02:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s507ms.
2026-03-25 05:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; ProcessInfo: 305 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18913 KB;
2026-03-25 05:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; ProcessInfo: 305 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18886 KB;
2026-03-25 05:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; ProcessInfo: 305 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 130 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18876 KB;
2026-03-25 05:04:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:04:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:04:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:04:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 331 KB; ProcessInfo: 308 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18905 KB;
2026-03-25 05:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 331 KB; ProcessInfo: 312 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 134 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18887 KB;
2026-03-25 05:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 331 KB; ProcessInfo: 312 KB; CacheEntry: 307 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 134 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18891 KB;
2026-03-25 05:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 337 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19010 KB;
2026-03-25 05:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:09:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:02:17, To:, 2026-03-25 05:09:13, Duration (s):, 416, Events Per Second:, 0.812, Events:, 338, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 325, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45444
2026-03-25 05:09:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s856ms.
2026-03-25 05:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 381 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19222 KB;
2026-03-25 05:09:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:09:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:09:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:09:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2065 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 381 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19057 KB;
2026-03-25 05:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2067 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 420 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19212 KB;
2026-03-25 05:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2067 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 279 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 144 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19410 KB;
2026-03-25 05:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2067 KB; ProcessInfo: 593 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 360 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 144 KB; BaseEvent: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19627 KB;
2026-03-25 05:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2067 KB; ProcessInfo: 665 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 144 KB; BaseEvent: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19441 KB;
2026-03-25 05:14:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:14:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:14:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:14:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2067 KB; ProcessInfo: 669 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 144 KB; BaseEvent: 142 KB; TcpIpConnectionsManager: 118 KB; rules::ProcessConditionsCache: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19398 KB;
2026-03-25 05:16:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:09:12, To:, 2026-03-25 05:16:13, Duration (s):, 421, Events Per Second:, 3.276, Events:, 1380, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1224, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 14, Livegrid:, 14, OriginUrl:, 0, Alarms:, 127, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 163660
2026-03-25 05:16:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s542ms.
2026-03-25 05:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2067 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19231 KB;
2026-03-25 05:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2067 KB; ProcessInfo: 757 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 370 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 144 KB; BaseEvent: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; ProcessInfoCommandLineTag: 24 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19815 KB;
2026-03-25 05:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 216 KB; BaseEvent: 178 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 46 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19952 KB;
2026-03-25 05:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; ProcessInfo: 932 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 205 KB; BaseEvent: 179 KB; rules::ProcessConditionsCache: 156 KB; cloudutils::CloudData: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BatchSerializer::EventsQueueTag: 47 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19972 KB;
2026-03-25 05:19:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:19:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:19:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:19:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; ProcessInfo: 1009 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 242 KB; BaseEvent: 217 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 144 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20146 KB;
2026-03-25 05:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 270 KB; BaseEvent: 236 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 120 KB; BatchSerializer::EventsQueueTag: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20168 KB;
2026-03-25 05:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 270 KB; BaseEvent: 237 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 120 KB; BatchSerializer::EventsQueueTag: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20162 KB;
2026-03-25 05:23:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:16:46, To:, 2026-03-25 05:23:13, Duration (s):, 387, Events Per Second:, 3.815, Events:, 1478, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1230, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 243, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 166951
2026-03-25 05:23:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s111ms.
2026-03-25 05:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 362 KB; rules::ProcessConditionsCache: 338 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19238 KB;
2026-03-25 05:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ProcessInfo: 436 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19401 KB;
2026-03-25 05:24:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:24:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:24:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:24:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 65 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19224 KB;
2026-03-25 05:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; ProcessInfo: 684 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 331 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 276 KB; TcpIpConnectionsManager: 198 KB; BaseEvent: 157 KB; cloudutils::CloudData: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19823 KB;
2026-03-25 05:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2068 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 331 KB; BaseEvent: 323 KB; TcpIpConnectionsManager: 310 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 251 KB; cloudutils::CloudData: 144 KB; BatchSerializer::EventsQueueTag: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20442 KB;
2026-03-25 05:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2090 KB; ProcessInfo: 1079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 360 KB; ModuleInfoCache: 334 KB; TcpIpConnectionsManager: 313 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 306 KB; cloudutils::CloudData: 145 KB; BatchSerializer::EventsQueueTag: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20587 KB;
2026-03-25 05:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2114 KB; ProcessInfo: 1151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 401 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 337 KB; CacheEntry: 313 KB; TcpIpConnectionsManager: 277 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20741 KB;
2026-03-25 05:29:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:29:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:29:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:29:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:30:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:23:12, To:, 2026-03-25 05:30:13, Duration (s):, 421, Events Per Second:, 5.523, Events:, 2328, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1791, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 92, Livegrid:, 92, OriginUrl:, 0, Alarms:, 352, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 257749
2026-03-25 05:30:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s255ms.
2026-03-25 05:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 366 KB; ModuleInfoCache: 339 KB; CacheEntry: 316 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19433 KB;
2026-03-25 05:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 462 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19424 KB;
2026-03-25 05:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19523 KB;
2026-03-25 05:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; ProcessInfo: 561 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 97 KB; rules::ProcessConditionsCache: 66 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19280 KB;
2026-03-25 05:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; ProcessInfo: 561 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 69 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19286 KB;
2026-03-25 05:34:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:34:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:34:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:34:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; ProcessInfo: 599 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 111 KB; TcpIpConnectionsManager: 98 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19392 KB;
2026-03-25 05:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 141 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19471 KB;
2026-03-25 05:37:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:30:13, To:, 2026-03-25 05:37:13, Duration (s):, 420, Events Per Second:, 1.369, Events:, 576, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 473, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 21, Livegrid:, 21, OriginUrl:, 0, Alarms:, 60, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67767
2026-03-25 05:37:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s910ms.
2026-03-25 05:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 349 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 139 KB; rules::ProcessConditionsCache: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19055 KB;
2026-03-25 05:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 420 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 198 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19305 KB;
2026-03-25 05:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; ProcessInfo: 644 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 308 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 149 KB; BaseEvent: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19830 KB;
2026-03-25 05:39:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:39:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:39:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:39:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2142 KB; ProcessInfo: 650 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 149 KB; BaseEvent: 116 KB; BatchSerializer::EventsQueueTag: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19797 KB;
2026-03-25 05:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 650 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 149 KB; BaseEvent: 120 KB; BatchSerializer::EventsQueueTag: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19776 KB;
2026-03-25 05:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 722 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; BaseEvent: 154 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 107 KB; BatchSerializer::EventsQueueTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19863 KB;
2026-03-25 05:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 868 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; BaseEvent: 227 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 106 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19917 KB;
2026-03-25 05:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:44:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:37:13, To:, 2026-03-25 05:44:13, Duration (s):, 420, Events Per Second:, 5.236, Events:, 2203, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1889, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 311, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 248835
2026-03-25 05:44:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s553ms.
2026-03-25 05:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 418 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 285 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19943 KB;
2026-03-25 05:44:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:44:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:44:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:44:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 341 KB; CacheEntry: 317 KB; TcpIpConnectionsManager: 251 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19581 KB;
2026-03-25 05:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 124 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19741 KB;
2026-03-25 05:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 1132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 207 KB; BaseEvent: 184 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20476 KB;
2026-03-25 05:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 1158 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 210 KB; BaseEvent: 196 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20160 KB;
2026-03-25 05:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 1161 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; BaseEvent: 198 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20150 KB;
2026-03-25 05:49:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:49:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:49:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:49:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2143 KB; ProcessInfo: 1166 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; BaseEvent: 202 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 67 KB; rules::ProcessConditionsCache: 56 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20038 KB;
2026-03-25 05:51:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:44:21, To:, 2026-03-25 05:51:13, Duration (s):, 412, Events Per Second:, 2.640, Events:, 1090, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 899, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 186, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 123318
2026-03-25 05:51:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s938ms.
2026-03-25 05:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; ProcessInfo: 262 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 57 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18873 KB;
2026-03-25 05:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 149 KB; BaseEvent: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19659 KB;
2026-03-25 05:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 603 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 195 KB; BaseEvent: 165 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19526 KB;
2026-03-25 05:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 628 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 207 KB; BaseEvent: 176 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19605 KB;
2026-03-25 05:54:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:54:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:54:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:54:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 05:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; BaseEvent: 180 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 105 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19523 KB;
2026-03-25 05:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 897 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 354 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; BaseEvent: 311 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20317 KB;
2026-03-25 05:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 973 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 343 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 90 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20187 KB;
2026-03-25 05:58:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:51:42, To:, 2026-03-25 05:58:13, Duration (s):, 391, Events Per Second:, 5.214, Events:, 2043, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1706, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 336, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 228458
2026-03-25 05:58:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s009ms.
2026-03-25 05:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 643 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 251 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19433 KB;
2026-03-25 05:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 05:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 05:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 713 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 192 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19605 KB;
2026-03-25 05:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 05:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 05:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 05:59:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 1086 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 297 KB; BaseEvent: 213 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 106 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20244 KB;
2026-03-25 06:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 1324 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 341 KB; TcpIpConnectionsManager: 336 KB; BaseEvent: 324 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20912 KB;
2026-03-25 06:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 1348 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 341 KB; TcpIpConnectionsManager: 331 KB; BaseEvent: 327 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20988 KB;
2026-03-25 06:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 1348 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 350 KB; ModuleInfoCache: 341 KB; BaseEvent: 334 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20767 KB;
2026-03-25 06:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 1573 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 438 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 190 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20972 KB;
2026-03-25 06:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:04:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:05:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 05:58:13, To:, 2026-03-25 06:05:13, Duration (s):, 420, Events Per Second:, 6.880, Events:, 2896, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2456, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 439, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 323956
2026-03-25 06:05:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s187ms.
2026-03-25 06:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 677 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 356 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 277 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19797 KB;
2026-03-25 06:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 271 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19904 KB;
2026-03-25 06:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2145 KB; ProcessInfo: 940 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 271 KB; rules::ProcessConditionsCache: 217 KB; cloudutils::CloudData: 149 KB; BaseEvent: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20088 KB;
2026-03-25 06:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; ProcessInfo: 1036 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 341 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 296 KB; TcpIpConnectionsManager: 231 KB; BaseEvent: 190 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20294 KB;
2026-03-25 06:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; ProcessInfo: 1105 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 318 KB; BaseEvent: 213 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20421 KB;
2026-03-25 06:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:09:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; ProcessInfo: 1111 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 341 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 318 KB; BaseEvent: 217 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 113 KB; BatchSerializer::EventsQueueTag: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20347 KB;
2026-03-25 06:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; ProcessInfo: 1161 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 391 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; BaseEvent: 243 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 85 KB; BatchSerializer::EventsQueueTag: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20461 KB;
2026-03-25 06:12:13 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:05:13, To:, 2026-03-25 06:12:13, Duration (s):, 420, Events Per Second:, 3.471, Events:, 1461, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1240, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 216, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 167246
2026-03-25 06:12:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s045ms.
2026-03-25 06:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 362 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::ProcessConditionsCache: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18988 KB;
2026-03-25 06:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 386 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19087 KB;
2026-03-25 06:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 411 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 100 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19147 KB;
2026-03-25 06:14:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:14:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:14:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:14:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 445 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 131 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19216 KB;
2026-03-25 06:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 470 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19286 KB;
2026-03-25 06:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; BaseEvent: 221 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 100 KB; BatchSerializer::EventsQueueTag: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19891 KB;
2026-03-25 06:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2146 KB; ProcessInfo: 1004 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 342 KB; rules::ProcessConditionsCache: 335 KB; BaseEvent: 327 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 290 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20539 KB;
2026-03-25 06:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:19:14 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:12:15, To:, 2026-03-25 06:19:13, Duration (s):, 418, Events Per Second:, 4.487, Events:, 1880, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1551, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 324, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 209447
2026-03-25 06:19:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s105ms.
2026-03-25 06:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2148 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 289 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19968 KB;
2026-03-25 06:19:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:19:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:19:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:19:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2148 KB; ProcessInfo: 823 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19857 KB;
2026-03-25 06:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2148 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::ProcessConditionsCache: 40 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19591 KB;
2026-03-25 06:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2148 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 130 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19807 KB;
2026-03-25 06:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2148 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 136 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19835 KB;
2026-03-25 06:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1041 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20043 KB;
2026-03-25 06:24:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:24:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:24:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:24:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1072 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 342 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 149 KB; BaseEvent: 125 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20101 KB;
2026-03-25 06:26:14 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:20:16, To:, 2026-03-25 06:26:14, Duration (s):, 358, Events Per Second:, 2.491, Events:, 892, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 736, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 151, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 102334
2026-03-25 06:26:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s047ms.
2026-03-25 06:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 487 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19591 KB;
2026-03-25 06:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 678 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 221 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 149 KB; BaseEvent: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19751 KB;
2026-03-25 06:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 678 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 210 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 149 KB; BaseEvent: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19735 KB;
2026-03-25 06:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 700 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 207 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 149 KB; BaseEvent: 117 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19741 KB;
2026-03-25 06:29:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:29:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:29:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:29:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 705 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 149 KB; BaseEvent: 131 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19681 KB;
2026-03-25 06:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::ProcessConditionsCache: 371 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 175 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20091 KB;
2026-03-25 06:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 294 KB; BaseEvent: 221 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 120 KB; BatchSerializer::EventsQueueTag: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20075 KB;
2026-03-25 06:33:14 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:26:11, To:, 2026-03-25 06:33:14, Duration (s):, 423, Events Per Second:, 3.269, Events:, 1383, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1054, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 108, Livegrid:, 108, OriginUrl:, 0, Alarms:, 112, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 152523
2026-03-25 06:33:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s089ms.
2026-03-25 06:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 437 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 296 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19352 KB;
2026-03-25 06:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 440 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 296 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19345 KB;
2026-03-25 06:34:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:34:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:34:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:34:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 515 KB; rules::ProcessConditionsCache: 406 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19623 KB;
2026-03-25 06:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 432 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19711 KB;
2026-03-25 06:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; ProcessInfo: 593 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 121 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19559 KB;
2026-03-25 06:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 618 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 79 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19460 KB;
2026-03-25 06:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 150 KB; BaseEvent: 139 KB; rules::ProcessConditionsCache: 132 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19680 KB;
2026-03-25 06:39:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:39:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:39:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:39:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:40:14 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:33:30, To:, 2026-03-25 06:40:14, Duration (s):, 404, Events Per Second:, 2.098, Events:, 848, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 642, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 75, Livegrid:, 75, OriginUrl:, 0, Alarms:, 55, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 94316
2026-03-25 06:40:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s061ms.
2026-03-25 06:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 390 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 115 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19118 KB;
2026-03-25 06:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 468 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19331 KB;
2026-03-25 06:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 128 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19453 KB;
2026-03-25 06:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 279 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 150 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19654 KB;
2026-03-25 06:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 275 KB; BaseEvent: 220 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20287 KB;
2026-03-25 06:44:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:44:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:44:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:44:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 922 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 262 KB; BaseEvent: 243 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20246 KB;
2026-03-25 06:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 249 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20258 KB;
2026-03-25 06:47:14 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:40:28, To:, 2026-03-25 06:47:14, Duration (s):, 406, Events Per Second:, 3.900, Events:, 1584, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1363, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 217, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 180103
2026-03-25 06:47:15 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s031ms.
2026-03-25 06:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 458 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19385 KB;
2026-03-25 06:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 492 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19384 KB;
2026-03-25 06:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 310 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19575 KB;
2026-03-25 06:49:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:49:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:49:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:49:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 618 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 323 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 150 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19706 KB;
2026-03-25 06:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 622 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 318 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19697 KB;
2026-03-25 06:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 743 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 150 KB; BaseEvent: 131 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19599 KB;
2026-03-25 06:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1063 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 283 KB; TcpIpConnectionsManager: 282 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20623 KB;
2026-03-25 06:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:54:14 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:47:13, To:, 2026-03-25 06:54:14, Duration (s):, 421, Events Per Second:, 5.689, Events:, 2396, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2032, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 363, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 268979
2026-03-25 06:54:16 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s342ms.
2026-03-25 06:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 991 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; TcpIpConnectionsManager: 412 KB; rules::ProcessConditionsCache: 360 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20253 KB;
2026-03-25 06:54:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:54:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:54:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:54:57 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 06:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1257 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; TcpIpConnectionsManager: 459 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 150 KB; BaseEvent: 129 KB; BatchSerializer::EventsQueueTag: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20549 KB;
2026-03-25 06:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1377 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 382 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 317 KB; BaseEvent: 189 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20807 KB;
2026-03-25 06:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1546 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 313 KB; BaseEvent: 275 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 99 KB; BatchSerializer::EventsQueueTag: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20804 KB;
2026-03-25 06:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1743 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 375 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 259 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21286 KB;
2026-03-25 06:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 06:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 06:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1984 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 493 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 312 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21583 KB;
2026-03-25 06:59:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 06:59:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 06:59:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 06:59:57 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2169 KB; ModuleMetadata: 2153 KB; BaseEvent: 579 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 317 KB; BatchSerializer::EventsQueueTag: 156 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22113 KB;
2026-03-25 07:01:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 06:54:14, To:, 2026-03-25 07:01:11, Duration (s):, 417, Events Per Second:, 9.717, Events:, 4052, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3368, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 677, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 448627
2026-03-25 07:01:14 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s443ms.
2026-03-25 07:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1138 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; TcpIpConnectionsManager: 417 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::ProcessConditionsCache: 36 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20132 KB;
2026-03-25 07:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1404 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; TcpIpConnectionsManager: 426 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 317 KB; BaseEvent: 163 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20837 KB;
2026-03-25 07:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1493 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; TcpIpConnectionsManager: 402 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 202 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::ProcessConditionsCache: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20664 KB;
2026-03-25 07:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1543 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 256 KB; BaseEvent: 230 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 81 KB; BatchSerializer::EventsQueueTag: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20660 KB;
2026-03-25 07:04:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:04:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:04:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:04:58 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1567 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 239 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 84 KB; BatchSerializer::EventsQueueTag: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20598 KB;
2026-03-25 07:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1614 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 247 KB; rules::ProcessConditionsCache: 185 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20776 KB;
2026-03-25 07:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1661 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 276 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 132 KB; BatchSerializer::EventsQueueTag: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20792 KB;
2026-03-25 07:08:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:01:10, To:, 2026-03-25 07:08:11, Duration (s):, 421, Events Per Second:, 3.912, Events:, 1648, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 237, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 184202
2026-03-25 07:08:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s247ms.
2026-03-25 07:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2153 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 352 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19099 KB;
2026-03-25 07:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 492 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 244 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 148 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19483 KB;
2026-03-25 07:09:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:09:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:09:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:09:58 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 318 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19682 KB;
2026-03-25 07:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 572 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 318 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19685 KB;
2026-03-25 07:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; BaseEvent: 193 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 135 KB; BatchSerializer::EventsQueueTag: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19836 KB;
2026-03-25 07:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 1132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; BaseEvent: 370 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 294 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 134 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20554 KB;
2026-03-25 07:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 1152 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; BaseEvent: 381 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 303 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20624 KB;
2026-03-25 07:14:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:14:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:14:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:14:59 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:15:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:08:19, To:, 2026-03-25 07:15:11, Duration (s):, 412, Events Per Second:, 5.416, Events:, 2233, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1871, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 359, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 249957
2026-03-25 07:15:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s510ms.
2026-03-25 07:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 706 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 233 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19637 KB;
2026-03-25 07:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 706 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19485 KB;
2026-03-25 07:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 712 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19487 KB;
2026-03-25 07:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19633 KB;
2026-03-25 07:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19638 KB;
2026-03-25 07:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:19:59 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 837 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19976 KB;
2026-03-25 07:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 314 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19891 KB;
2026-03-25 07:22:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:15:18, To:, 2026-03-25 07:22:11, Duration (s):, 413, Events Per Second:, 1.265, Events:, 523, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 473, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 62637
2026-03-25 07:22:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s422ms.
2026-03-25 07:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 402 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19120 KB;
2026-03-25 07:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 449 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19308 KB;
2026-03-25 07:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 484 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19271 KB;
2026-03-25 07:25:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:25:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:25:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:25:00 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2154 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 148 KB; BaseEvent: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19679 KB;
2026-03-25 07:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2156 KB; ProcessInfo: 760 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 271 KB; BaseEvent: 153 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20056 KB;
2026-03-25 07:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2156 KB; ProcessInfo: 762 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 218 KB; BaseEvent: 160 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19969 KB;
2026-03-25 07:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 190 KB; BaseEvent: 190 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20106 KB;
2026-03-25 07:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:29:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:22:11, To:, 2026-03-25 07:29:11, Duration (s):, 420, Events Per Second:, 2.912, Events:, 1224, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1080, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 137, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 140189
2026-03-25 07:29:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s946ms.
2026-03-25 07:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 361 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19322 KB;
2026-03-25 07:30:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:30:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:30:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:30:00 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 418 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19487 KB;
2026-03-25 07:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 423 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19467 KB;
2026-03-25 07:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19443 KB;
2026-03-25 07:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 474 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 80 KB; rules::ProcessConditionsCache: 69 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19191 KB;
2026-03-25 07:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 497 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 69 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19265 KB;
2026-03-25 07:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:35:01 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 524 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 97 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19342 KB;
2026-03-25 07:36:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:29:16, To:, 2026-03-25 07:36:11, Duration (s):, 415, Events Per Second:, 1.211, Events:, 503, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 430, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 70, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59196
2026-03-25 07:36:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s817ms.
2026-03-25 07:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 358 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19167 KB;
2026-03-25 07:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 381 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19222 KB;
2026-03-25 07:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2157 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 418 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19309 KB;
2026-03-25 07:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 465 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19353 KB;
2026-03-25 07:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:40:01 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 465 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 67 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19345 KB;
2026-03-25 07:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 493 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 82 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19396 KB;
2026-03-25 07:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 200 KB; BaseEvent: 198 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 130 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19891 KB;
2026-03-25 07:43:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:36:20, To:, 2026-03-25 07:43:11, Duration (s):, 411, Events Per Second:, 3.268, Events:, 1344, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1154, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 185, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 155925
2026-03-25 07:43:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s392ms.
2026-03-25 07:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 647 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 262 KB; rules::ProcessConditionsCache: 262 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19700 KB;
2026-03-25 07:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 257 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19699 KB;
2026-03-25 07:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:45:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 249 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 149 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19671 KB;
2026-03-25 07:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19647 KB;
2026-03-25 07:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 88 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19754 KB;
2026-03-25 07:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 300 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19791 KB;
2026-03-25 07:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 98 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19791 KB;
2026-03-25 07:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:50:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:50:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:43:02, To:, 2026-03-25 07:50:11, Duration (s):, 429, Events Per Second:, 1.286, Events:, 552, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 482, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67987
2026-03-25 07:50:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s327ms.
2026-03-25 07:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 319 KB; ProcessInfo: 308 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19249 KB;
2026-03-25 07:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 360 KB; ModuleInfoCache: 343 KB; ProcessInfo: 331 KB; CacheEntry: 319 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19303 KB;
2026-03-25 07:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 149 KB; BaseEvent: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19641 KB;
2026-03-25 07:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 944 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 343 KB; TcpIpConnectionsManager: 335 KB; CacheEntry: 319 KB; BaseEvent: 300 KB; rules::ProcessConditionsCache: 235 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20412 KB;
2026-03-25 07:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 1292 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 472 KB; TcpIpConnectionsManager: 469 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21010 KB;
2026-03-25 07:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 07:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 07:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 07:55:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 07:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 1681 KB; BaseEvent: 650 KB; TcpIpConnectionsManager: 561 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 306 KB; BatchSerializer::EventsQueueTag: 172 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21878 KB;
2026-03-25 07:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 1803 KB; BaseEvent: 715 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; TcpIpConnectionsManager: 461 KB; rules::ProcessConditionsCache: 392 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; BatchSerializer::EventsQueueTag: 191 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22057 KB;
2026-03-25 07:57:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:51:09, To:, 2026-03-25 07:57:11, Duration (s):, 362, Events Per Second:, 11.217, Events:, 4065, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3383, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 681, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 448488
2026-03-25 07:57:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s283ms.
2026-03-25 07:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 302 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20056 KB;
2026-03-25 07:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19631 KB;
2026-03-25 07:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 07:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 07:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 919 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19636 KB;
2026-03-25 08:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:00:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 149 KB; BaseEvent: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20081 KB;
2026-03-25 08:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 1057 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20056 KB;
2026-03-25 08:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 1060 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 149 KB; BaseEvent: 120 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20047 KB;
2026-03-25 08:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 1060 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 149 KB; BaseEvent: 121 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19997 KB;
2026-03-25 08:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:04:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 07:57:08, To:, 2026-03-25 08:04:11, Duration (s):, 423, Events Per Second:, 1.554, Events:, 658, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 504, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 41, Livegrid:, 41, OriginUrl:, 0, Alarms:, 71, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 75400
2026-03-25 08:04:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s789ms.
2026-03-25 08:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19034 KB;
2026-03-25 08:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:05:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19033 KB;
2026-03-25 08:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; ProcessInfo: 259 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19033 KB;
2026-03-25 08:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 461 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::ProcessConditionsCache: 27 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19244 KB;
2026-03-25 08:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 606 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 225 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 148 KB; BaseEvent: 142 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19753 KB;
2026-03-25 08:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 890 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 343 KB; TcpIpConnectionsManager: 341 KB; CacheEntry: 319 KB; BaseEvent: 264 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20140 KB;
2026-03-25 08:10:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:10:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:10:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:10:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2159 KB; ProcessInfo: 922 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 279 KB; BaseEvent: 279 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 80 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20141 KB;
2026-03-25 08:11:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:01:45, To:, 2026-03-25 08:11:11, Duration (s):, 566, Events Per Second:, 3.384, Events:, 1917, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1649, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 263, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 216680
2026-03-25 08:11:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s917ms.
2026-03-25 08:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 729 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19595 KB;
2026-03-25 08:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 143 KB; TcpIpConnectionsManager: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19586 KB;
2026-03-25 08:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 779 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19585 KB;
2026-03-25 08:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 870 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19910 KB;
2026-03-25 08:15:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:15:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:15:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:15:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19776 KB;
2026-03-25 08:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 148 KB; BaseEvent: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19857 KB;
2026-03-25 08:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1217 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 269 KB; BaseEvent: 208 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 143 KB; BatchSerializer::EventsQueueTag: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20411 KB;
2026-03-25 08:18:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:11:32, To:, 2026-03-25 08:18:11, Duration (s):, 399, Events Per Second:, 4.621, Events:, 1846, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1589, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 254, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 205781
2026-03-25 08:18:13 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s206ms.
2026-03-25 08:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 343 KB; ModuleInfoCache: 343 KB; TcpIpConnectionsManager: 325 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20008 KB;
2026-03-25 08:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 418 KB; ModuleInfoCache: 343 KB; TcpIpConnectionsManager: 336 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20230 KB;
2026-03-25 08:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:20:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 900 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 148 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 19 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19706 KB;
2026-03-25 08:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 53 KB; rules::ProcessConditionsCache: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19648 KB;
2026-03-25 08:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 970 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 75 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19753 KB;
2026-03-25 08:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 982 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 78 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19773 KB;
2026-03-25 08:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1175 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 208 KB; BaseEvent: 171 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20371 KB;
2026-03-25 08:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:25:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:25:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:18:13, To:, 2026-03-25 08:25:11, Duration (s):, 418, Events Per Second:, 2.834, Events:, 1186, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1013, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 172, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 134007
2026-03-25 08:25:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s963ms.
2026-03-25 08:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 583 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 401 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19715 KB;
2026-03-25 08:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 397 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 148 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19797 KB;
2026-03-25 08:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 681 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 148 KB; BaseEvent: 64 KB; rules::ProcessConditionsCache: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19475 KB;
2026-03-25 08:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 682 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 65 KB; rules::ProcessConditionsCache: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19441 KB;
2026-03-25 08:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 713 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 92 KB; rules::ProcessConditionsCache: 82 KB; BaseEvent: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19498 KB;
2026-03-25 08:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:30:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 722 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 98 KB; BaseEvent: 84 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19511 KB;
2026-03-25 08:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 148 KB; BaseEvent: 122 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19754 KB;
2026-03-25 08:32:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:25:16, To:, 2026-03-25 08:32:11, Duration (s):, 415, Events Per Second:, 2.154, Events:, 895, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 764, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 128, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 103822
2026-03-25 08:32:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s979ms.
2026-03-25 08:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 424 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19317 KB;
2026-03-25 08:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 450 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 253 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19369 KB;
2026-03-25 08:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 506 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 284 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19502 KB;
2026-03-25 08:35:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:35:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:35:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:35:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 511 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19460 KB;
2026-03-25 08:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 317 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19533 KB;
2026-03-25 08:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19620 KB;
2026-03-25 08:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 634 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19415 KB;
2026-03-25 08:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:39:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:32:11, To:, 2026-03-25 08:39:11, Duration (s):, 420, Events Per Second:, 2.483, Events:, 1044, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 916, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 125, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 121321
2026-03-25 08:39:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s007ms.
2026-03-25 08:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19623 KB;
2026-03-25 08:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:40:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 343 KB; TcpIpConnectionsManager: 320 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 189 KB; BaseEvent: 166 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20139 KB;
2026-03-25 08:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1257 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; TcpIpConnectionsManager: 487 KB; ModuleInfoCache: 343 KB; BaseEvent: 329 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20830 KB;
2026-03-25 08:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1401 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; TcpIpConnectionsManager: 405 KB; BaseEvent: 401 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 310 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21130 KB;
2026-03-25 08:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1474 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; BaseEvent: 440 KB; rules::ProcessConditionsCache: 391 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 313 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21266 KB;
2026-03-25 08:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1474 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; BaseEvent: 443 KB; rules::ProcessConditionsCache: 391 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 144 KB; BatchSerializer::EventsQueueTag: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21106 KB;
2026-03-25 08:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:45:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1477 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 444 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 122 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21066 KB;
2026-03-25 08:46:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:39:11, To:, 2026-03-25 08:46:11, Duration (s):, 420, Events Per Second:, 6.121, Events:, 2574, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2167, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 404, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 288348
2026-03-25 08:46:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s220ms.
2026-03-25 08:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; ProcessInfo: 262 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19241 KB;
2026-03-25 08:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 358 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 108 KB; rules::ProcessConditionsCache: 84 KB; BaseEvent: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19093 KB;
2026-03-25 08:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 359 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 82 KB; BaseEvent: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19095 KB;
2026-03-25 08:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 383 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 108 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19176 KB;
2026-03-25 08:50:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:50:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:50:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:50:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 389 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 119 KB; TcpIpConnectionsManager: 64 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19143 KB;
2026-03-25 08:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 400 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 121 KB; TcpIpConnectionsManager: 74 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19168 KB;
2026-03-25 08:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; BaseEvent: 205 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 58 KB; BatchSerializer::EventsQueueTag: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19734 KB;
2026-03-25 08:53:11 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:46:23, To:, 2026-03-25 08:53:11, Duration (s):, 408, Events Per Second:, 3.255, Events:, 1330, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1126, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 203, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 151900
2026-03-25 08:53:12 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s030ms.
2026-03-25 08:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 658 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 257 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19612 KB;
2026-03-25 08:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 912 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 379 KB; TcpIpConnectionsManager: 367 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; cloudutils::CloudData: 148 KB; BaseEvent: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20312 KB;
2026-03-25 08:55:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 08:55:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 08:55:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 08:55:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 08:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1222 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; TcpIpConnectionsManager: 390 KB; rules::ProcessConditionsCache: 355 KB; ModuleInfoCache: 343 KB; CacheEntry: 319 KB; BaseEvent: 261 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20810 KB;
2026-03-25 08:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1492 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 489 KB; BaseEvent: 393 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21150 KB;
2026-03-25 08:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1806 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 541 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 484 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 148 KB; rules::ProcessConditionsCache: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21618 KB;
2026-03-25 08:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1880 KB; BaseEvent: 583 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; TcpIpConnectionsManager: 399 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 161 KB; BatchSerializer::EventsQueueTag: 160 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21692 KB;
2026-03-25 08:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 08:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 08:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 2123 KB; BaseEvent: 704 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 343 KB; TcpIpConnectionsManager: 338 KB; CacheEntry: 320 KB; BatchSerializer::EventsQueueTag: 193 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22293 KB;
2026-03-25 08:59:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:53:09, To:, 2026-03-25 08:59:27, Duration (s):, 378, Events Per Second:, 10.810, Events:, 4089, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3430, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 658, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454877
2026-03-25 08:59:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s259ms.
2026-03-25 09:00:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:00:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:00:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:00:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1075 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 294 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 149 KB; BaseEvent: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20240 KB;
2026-03-25 09:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 282 KB; TcpIpConnectionsManager: 251 KB; cloudutils::CloudData: 149 KB; BaseEvent: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20337 KB;
2026-03-25 09:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 282 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20224 KB;
2026-03-25 09:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1214 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 367 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; BaseEvent: 140 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20383 KB;
2026-03-25 09:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1236 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; BaseEvent: 146 KB; TcpIpConnectionsManager: 121 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20393 KB;
2026-03-25 09:05:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:05:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:05:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:05:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1288 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; BaseEvent: 173 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 143 KB; BatchSerializer::EventsQueueTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20555 KB;
2026-03-25 09:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 1321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; BaseEvent: 177 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 139 KB; BatchSerializer::EventsQueueTag: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20219 KB;
2026-03-25 09:06:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 08:59:26, To:, 2026-03-25 09:06:27, Duration (s):, 421, Events Per Second:, 2.759, Events:, 1163, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1017, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 143, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 133146
2026-03-25 09:06:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s959ms.
2026-03-25 09:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 380 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19043 KB;
2026-03-25 09:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 406 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19092 KB;
2026-03-25 09:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 499 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 119 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19316 KB;
2026-03-25 09:10:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:10:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:10:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:10:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19455 KB;
2026-03-25 09:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 572 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 146 KB; TcpIpConnectionsManager: 136 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19465 KB;
2026-03-25 09:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 572 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 146 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19435 KB;
2026-03-25 09:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 162 KB; BaseEvent: 160 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19966 KB;
2026-03-25 09:13:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:06:20, To:, 2026-03-25 09:13:27, Duration (s):, 427, Events Per Second:, 2.592, Events:, 1108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 973, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 134, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 128664
2026-03-25 09:13:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s205ms.
2026-03-25 09:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 713 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 149 KB; BaseEvent: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19769 KB;
2026-03-25 09:15:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:15:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:15:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:15:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 344 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 300 KB; BaseEvent: 174 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20230 KB;
2026-03-25 09:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 860 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 216 KB; BaseEvent: 175 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20154 KB;
2026-03-25 09:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 350 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; BaseEvent: 182 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 143 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20115 KB;
2026-03-25 09:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; BaseEvent: 183 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 80 KB; BatchSerializer::EventsQueueTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20053 KB;
2026-03-25 09:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 888 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; BaseEvent: 183 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 80 KB; BatchSerializer::EventsQueueTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20056 KB;
2026-03-25 09:20:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:20:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:20:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:20:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 942 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; BaseEvent: 201 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 93 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19854 KB;
2026-03-25 09:20:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:13:27, To:, 2026-03-25 09:20:27, Duration (s):, 420, Events Per Second:, 2.823, Events:, 1187, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1004, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 182, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 135503
2026-03-25 09:20:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s658ms.
2026-03-25 09:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 343 KB; ProcessInfo: 339 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19024 KB;
2026-03-25 09:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 409 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19244 KB;
2026-03-25 09:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 458 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 136 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19335 KB;
2026-03-25 09:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 503 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 190 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 149 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19433 KB;
2026-03-25 09:25:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:25:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:25:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:25:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 722 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 370 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 238 KB; BaseEvent: 173 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20056 KB;
2026-03-25 09:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 750 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 431 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 212 KB; BaseEvent: 185 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20144 KB;
2026-03-25 09:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 775 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 198 KB; BaseEvent: 197 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::ProcessConditionsCache: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19774 KB;
2026-03-25 09:27:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:20:27, To:, 2026-03-25 09:27:27, Duration (s):, 420, Events Per Second:, 3.032, Events:, 1275, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1114, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 154, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 145790
2026-03-25 09:27:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s737ms.
2026-03-25 09:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 118 KB; rules::ProcessConditionsCache: 86 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19379 KB;
2026-03-25 09:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 108 KB; rules::ProcessConditionsCache: 86 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19373 KB;
2026-03-25 09:30:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:30:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:30:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:30:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 99 KB; TcpIpConnectionsManager: 80 KB; BaseEvent: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19387 KB;
2026-03-25 09:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 668 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 98 KB; BaseEvent: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19620 KB;
2026-03-25 09:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 668 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 134 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19553 KB;
2026-03-25 09:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 721 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 183 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 149 KB; BaseEvent: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19718 KB;
2026-03-25 09:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 771 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 207 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 149 KB; BaseEvent: 136 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19841 KB;
2026-03-25 09:34:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:27:28, To:, 2026-03-25 09:34:27, Duration (s):, 419, Events Per Second:, 1.933, Events:, 811, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 568, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 88635
2026-03-25 09:34:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s804ms.
2026-03-25 09:35:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:35:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:35:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:35:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 411 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19231 KB;
2026-03-25 09:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 418 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 193 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19278 KB;
2026-03-25 09:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 515 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 320 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19585 KB;
2026-03-25 09:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19458 KB;
2026-03-25 09:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 587 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 246 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 150 KB; BaseEvent: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19636 KB;
2026-03-25 09:40:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:40:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:40:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:40:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2160 KB; ProcessInfo: 616 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 150 KB; BaseEvent: 103 KB; BatchSerializer::EventsQueueTag: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19669 KB;
2026-03-25 09:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2162 KB; ProcessInfo: 619 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 111 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19638 KB;
2026-03-25 09:41:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:34:26, To:, 2026-03-25 09:41:27, Duration (s):, 421, Events Per Second:, 1.677, Events:, 707, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 561, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 80763
2026-03-25 09:41:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s814ms.
2026-03-25 09:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2162 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 414 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19355 KB;
2026-03-25 09:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2162 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 424 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 299 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19357 KB;
2026-03-25 09:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2162 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 400 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19657 KB;
2026-03-25 09:45:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:45:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:45:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:45:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2162 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 417 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 121 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19699 KB;
2026-03-25 09:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2162 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 109 KB; rules::ProcessConditionsCache: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19414 KB;
2026-03-25 09:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; BaseEvent: 109 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19373 KB;
2026-03-25 09:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; ProcessInfo: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 143 KB; BaseEvent: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19681 KB;
2026-03-25 09:48:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:41:40, To:, 2026-03-25 09:48:27, Duration (s):, 407, Events Per Second:, 2.041, Events:, 832, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 676, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 105, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95192
2026-03-25 09:48:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s854ms.
2026-03-25 09:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 458 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 208 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 149 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19391 KB;
2026-03-25 09:50:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:50:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:50:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:50:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 270 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 149 KB; BaseEvent: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19613 KB;
2026-03-25 09:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; ProcessInfo: 700 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 253 KB; BaseEvent: 151 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 46 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19728 KB;
2026-03-25 09:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; ProcessInfo: 728 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 215 KB; BaseEvent: 158 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 116 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19789 KB;
2026-03-25 09:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; ProcessInfo: 975 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 343 KB; rules::ProcessConditionsCache: 322 KB; CacheEntry: 320 KB; BaseEvent: 281 KB; TcpIpConnectionsManager: 279 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20439 KB;
2026-03-25 09:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; ProcessInfo: 1323 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 450 KB; TcpIpConnectionsManager: 356 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21046 KB;
2026-03-25 09:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 09:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 09:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 09:55:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 09:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2164 KB; ProcessInfo: 1665 KB; BaseEvent: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; TcpIpConnectionsManager: 474 KB; ModuleInfoCache: 343 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 262 KB; BatchSerializer::EventsQueueTag: 168 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21703 KB;
2026-03-25 09:55:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:48:27, To:, 2026-03-25 09:55:27, Duration (s):, 420, Events Per Second:, 8.450, Events:, 3554, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2981, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 572, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 394674
2026-03-25 09:55:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s155ms.
2026-03-25 09:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 1558 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; TcpIpConnectionsManager: 494 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 233 KB; BaseEvent: 165 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21016 KB;
2026-03-25 09:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 1932 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 344 KB; BaseEvent: 336 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21654 KB;
2026-03-25 09:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 2109 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 469 KB; BaseEvent: 426 KB; rules::ProcessConditionsCache: 383 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22013 KB;
2026-03-25 09:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 09:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 09:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2203 KB; ModuleMetadata: 2165 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; BaseEvent: 440 KB; TcpIpConnectionsManager: 423 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21953 KB;
2026-03-25 10:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:00:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2577 KB; ModuleMetadata: 2165 KB; BaseEvent: 632 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; TcpIpConnectionsManager: 407 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 224 KB; BatchSerializer::EventsQueueTag: 173 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22545 KB;
2026-03-25 10:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2652 KB; ModuleMetadata: 2165 KB; BaseEvent: 674 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 341 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 275 KB; BatchSerializer::EventsQueueTag: 185 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22645 KB;
2026-03-25 10:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2664 KB; ModuleMetadata: 2165 KB; BaseEvent: 678 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 344 KB; TcpIpConnectionsManager: 331 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 271 KB; BatchSerializer::EventsQueueTag: 187 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22633 KB;
2026-03-25 10:02:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 09:55:26, To:, 2026-03-25 10:02:27, Duration (s):, 421, Events Per Second:, 9.326, Events:, 3932, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3310, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 611, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 435419
2026-03-25 10:02:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s119ms.
2026-03-25 10:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 938 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 149 KB; BaseEvent: 91 KB; rules::ProcessConditionsCache: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19850 KB;
2026-03-25 10:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 1144 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 293 KB; TcpIpConnectionsManager: 256 KB; BaseEvent: 189 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20440 KB;
2026-03-25 10:05:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:05:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:05:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:05:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 1267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 423 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 284 KB; BaseEvent: 246 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20860 KB;
2026-03-25 10:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 1301 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; BaseEvent: 261 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 71 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20479 KB;
2026-03-25 10:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 1336 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; BaseEvent: 276 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 87 KB; BatchSerializer::EventsQueueTag: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20436 KB;
2026-03-25 10:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2165 KB; ProcessInfo: 1390 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 344 KB; CacheEntry: 320 KB; BaseEvent: 303 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 125 KB; BatchSerializer::EventsQueueTag: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20547 KB;
2026-03-25 10:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1439 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; BaseEvent: 315 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 146 KB; TcpIpConnectionsManager: 110 KB; BatchSerializer::EventsQueueTag: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20627 KB;
2026-03-25 10:09:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:02:40, To:, 2026-03-25 10:09:27, Duration (s):, 407, Events Per Second:, 4.592, Events:, 1872, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1590, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 279, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 210411
2026-03-25 10:09:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s949ms.
2026-03-25 10:10:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:10:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:10:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:10:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 418 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19220 KB;
2026-03-25 10:11:03 7967327fc6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2]
2026-03-25 10:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ProcessInfo: 447 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19261 KB;
2026-03-25 10:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 450 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19268 KB;
2026-03-25 10:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 452 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19266 KB;
2026-03-25 10:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 452 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19251 KB;
2026-03-25 10:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:15:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 345 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 320 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19715 KB;
2026-03-25 10:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 628 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19776 KB;
2026-03-25 10:16:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:09:21, To:, 2026-03-25 10:16:27, Duration (s):, 426, Events Per Second:, 1.474, Events:, 629, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 530, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 96, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 73654
2026-03-25 10:16:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s793ms.
2026-03-25 10:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 486 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19236 KB;
2026-03-25 10:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 486 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19169 KB;
2026-03-25 10:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 509 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19201 KB;
2026-03-25 10:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:20:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 514 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 113 KB; rules::ProcessConditionsCache: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19211 KB;
2026-03-25 10:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 525 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 92 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19248 KB;
2026-03-25 10:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 788 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 303 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 150 KB; BaseEvent: 143 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19980 KB;
2026-03-25 10:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1034 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 300 KB; BaseEvent: 261 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20347 KB;
2026-03-25 10:23:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:16:55, To:, 2026-03-25 10:23:27, Duration (s):, 392, Events Per Second:, 4.283, Events:, 1682, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1440, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 239, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 188072
2026-03-25 10:23:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s946ms.
2026-03-25 10:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 997 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 398 KB; TcpIpConnectionsManager: 394 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20417 KB;
2026-03-25 10:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:25:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1194 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 345 KB; TcpIpConnectionsManager: 335 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 210 KB; BaseEvent: 188 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20496 KB;
2026-03-25 10:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1244 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 260 KB; TcpIpConnectionsManager: 251 KB; BaseEvent: 211 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20542 KB;
2026-03-25 10:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1266 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 287 KB; BaseEvent: 217 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20527 KB;
2026-03-25 10:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1266 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 267 KB; BaseEvent: 219 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 100 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20421 KB;
2026-03-25 10:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1266 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 265 KB; BaseEvent: 219 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 77 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20398 KB;
2026-03-25 10:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:30:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; ProcessInfo: 1285 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 284 KB; BaseEvent: 225 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 72 KB; BatchSerializer::EventsQueueTag: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20439 KB;
2026-03-25 10:30:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:23:22, To:, 2026-03-25 10:30:27, Duration (s):, 425, Events Per Second:, 3.042, Events:, 1295, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1092, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 202, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 146780
2026-03-25 10:30:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s971ms.
2026-03-25 10:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 286 KB; ProcessInfo: 286 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19158 KB;
2026-03-25 10:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 398 KB; ProcessInfo: 390 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19493 KB;
2026-03-25 10:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 414 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 150 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19491 KB;
2026-03-25 10:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 414 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19490 KB;
2026-03-25 10:35:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:35:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:35:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:35:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 430 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 102 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19475 KB;
2026-03-25 10:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 455 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19521 KB;
2026-03-25 10:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 455 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19527 KB;
2026-03-25 10:37:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:30:35, To:, 2026-03-25 10:37:27, Duration (s):, 412, Events Per Second:, 1.146, Events:, 473, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 423, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55613
2026-03-25 10:37:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s795ms.
2026-03-25 10:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 345 KB; ProcessInfo: 326 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19344 KB;
2026-03-25 10:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 351 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 74 KB; rules::ProcessConditionsCache: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19015 KB;
2026-03-25 10:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:40:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 442 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 105 KB; TcpIpConnectionsManager: 93 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19245 KB;
2026-03-25 10:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 494 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 138 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19372 KB;
2026-03-25 10:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 546 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19507 KB;
2026-03-25 10:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 640 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 150 KB; BaseEvent: 138 KB; BatchSerializer::EventsQueueTag: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19766 KB;
2026-03-25 10:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 669 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 302 KB; BaseEvent: 153 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 146 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19856 KB;
2026-03-25 10:44:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:38:04, To:, 2026-03-25 10:44:27, Duration (s):, 383, Events Per Second:, 2.616, Events:, 1004, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 873, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 128, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115737
2026-03-25 10:44:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s938ms.
2026-03-25 10:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:45:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 493 KB; ModuleInfoCache: 345 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19527 KB;
2026-03-25 10:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 382 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19617 KB;
2026-03-25 10:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19520 KB;
2026-03-25 10:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 257 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 150 KB; BaseEvent: 146 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 6 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20025 KB;
2026-03-25 10:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 264 KB; rules::ProcessConditionsCache: 215 KB; BaseEvent: 153 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20016 KB;
2026-03-25 10:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:50:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1086 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 345 KB; TcpIpConnectionsManager: 336 KB; CacheEntry: 320 KB; BaseEvent: 289 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 103 KB; BatchSerializer::EventsQueueTag: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20421 KB;
2026-03-25 10:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1088 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; BaseEvent: 292 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 105 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20312 KB;
2026-03-25 10:51:27 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:44:23, To:, 2026-03-25 10:51:27, Duration (s):, 424, Events Per Second:, 4.165, Events:, 1769, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1541, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 225, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 199583
2026-03-25 10:51:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s930ms.
2026-03-25 10:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 663 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19684 KB;
2026-03-25 10:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1001 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 267 KB; BaseEvent: 200 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 139 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20191 KB;
2026-03-25 10:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1183 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; TcpIpConnectionsManager: 351 KB; ModuleInfoCache: 345 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 320 KB; BaseEvent: 284 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20771 KB;
2026-03-25 10:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 10:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 10:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 10:55:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 10:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1581 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 485 KB; BaseEvent: 473 KB; rules::ProcessConditionsCache: 372 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21553 KB;
2026-03-25 10:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1781 KB; BaseEvent: 572 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 418 KB; ModuleInfoCache: 345 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 196 KB; BatchSerializer::EventsQueueTag: 155 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21633 KB;
2026-03-25 10:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1971 KB; BaseEvent: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; TcpIpConnectionsManager: 438 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; BatchSerializer::EventsQueueTag: 179 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22135 KB;
2026-03-25 10:57:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:51:27, To:, 2026-03-25 10:57:39, Duration (s):, 372, Events Per Second:, 10.952, Events:, 4078, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3417, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 656, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 451594
2026-03-25 10:57:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s325ms.
2026-03-25 10:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1311 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; TcpIpConnectionsManager: 408 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; cloudutils::CloudData: 150 KB; BaseEvent: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20802 KB;
2026-03-25 10:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 10:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 10:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1363 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 345 KB; TcpIpConnectionsManager: 331 KB; CacheEntry: 321 KB; BaseEvent: 165 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 44 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20469 KB;
2026-03-25 11:00:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:00:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:00:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:00:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1423 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 256 KB; BaseEvent: 196 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 112 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20601 KB;
2026-03-25 11:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2168 KB; ProcessInfo: 1593 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 297 KB; BaseEvent: 280 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20984 KB;
2026-03-25 11:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1645 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; rules::ProcessConditionsCache: 347 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; BaseEvent: 306 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21108 KB;
2026-03-25 11:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1787 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; BaseEvent: 370 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21170 KB;
2026-03-25 11:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1954 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 453 KB; ModuleInfoCache: 345 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 223 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21597 KB;
2026-03-25 11:04:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 10:57:38, To:, 2026-03-25 11:04:39, Duration (s):, 421, Events Per Second:, 6.165, Events:, 2599, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2133, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 17, Livegrid:, 17, OriginUrl:, 0, Alarms:, 431, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 288292
2026-03-25 11:04:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s128ms.
2026-03-25 11:05:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:05:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:05:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:05:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 649 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19760 KB;
2026-03-25 11:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 652 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19692 KB;
2026-03-25 11:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 677 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19699 KB;
2026-03-25 11:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 724 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19458 KB;
2026-03-25 11:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 90 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19652 KB;
2026-03-25 11:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:10:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 813 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 115 KB; rules::ProcessConditionsCache: 97 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19669 KB;
2026-03-25 11:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 841 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 123 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19745 KB;
2026-03-25 11:11:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:04:33, To:, 2026-03-25 11:11:39, Duration (s):, 426, Events Per Second:, 1.388, Events:, 592, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 529, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 60, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70077
2026-03-25 11:11:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s862ms.
2026-03-25 11:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 423 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19229 KB;
2026-03-25 11:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 458 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19355 KB;
2026-03-25 11:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 481 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19446 KB;
2026-03-25 11:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:15:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 484 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 93 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 14 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19442 KB;
2026-03-25 11:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 546 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 109 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 14 KB; ProcessInfoCommandLineTag: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19570 KB;
2026-03-25 11:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 313 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 121 KB; BaseEvent: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 13 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19640 KB;
2026-03-25 11:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 596 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 313 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19694 KB;
2026-03-25 11:18:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:11:50, To:, 2026-03-25 11:18:39, Duration (s):, 409, Events Per Second:, 2.038, Events:, 835, File:, 6, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 714, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 112, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95110
2026-03-25 11:18:41 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s127ms.
2026-03-25 11:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 606 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 198 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 150 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19594 KB;
2026-03-25 11:20:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:20:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:20:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:20:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 671 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 231 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 150 KB; BaseEvent: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19765 KB;
2026-03-25 11:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 672 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 233 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 150 KB; BaseEvent: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19753 KB;
2026-03-25 11:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 721 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 150 KB; BaseEvent: 125 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19784 KB;
2026-03-25 11:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 819 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 382 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; BaseEvent: 171 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 118 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20050 KB;
2026-03-25 11:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1138 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 345 KB; rules::ProcessConditionsCache: 323 KB; BaseEvent: 322 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 259 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20644 KB;
2026-03-25 11:25:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:25:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:25:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:25:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 1452 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 457 KB; TcpIpConnectionsManager: 403 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 310 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21269 KB;
2026-03-25 11:25:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:18:39, To:, 2026-03-25 11:25:39, Duration (s):, 420, Events Per Second:, 6.378, Events:, 2683, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2249, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 427, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 298002
2026-03-25 11:25:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s148ms.
2026-03-25 11:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 2170 KB; ProcessInfo: 989 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 359 KB; ModuleInfoCache: 345 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 268 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20132 KB;
2026-03-25 11:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1839 KB; ProcessInfo: 1009 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 335 KB; rules::ProcessConditionsCache: 288 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 249 KB; cloudutils::CloudData: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 5 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19643 KB;
2026-03-25 11:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1839 KB; ProcessInfo: 1034 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 335 KB; rules::ProcessConditionsCache: 297 KB; CacheEntry: 259 KB; cloudutils::CloudData: 127 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19549 KB;
2026-03-25 11:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1839 KB; ProcessInfo: 1155 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 127 KB; BaseEvent: 66 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19560 KB;
2026-03-25 11:30:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:30:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:30:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:30:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1839 KB; ProcessInfo: 1191 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 110 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19695 KB;
2026-03-25 11:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; ProcessInfo: 1192 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 99 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19673 KB;
2026-03-25 11:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; ProcessInfo: 1241 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 128 KB; cloudutils::CloudData: 127 KB; rules::ProcessConditionsCache: 123 KB; BaseEvent: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19732 KB;
2026-03-25 11:32:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:25:39, To:, 2026-03-25 11:32:39, Duration (s):, 420, Events Per Second:, 1.647, Events:, 693, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 617, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 72, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 81064
2026-03-25 11:32:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s809ms.
2026-03-25 11:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 380 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; rules::ProcessConditionsCache: 146 KB; cloudutils::CloudData: 127 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18736 KB;
2026-03-25 11:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 425 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18917 KB;
2026-03-25 11:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:35:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 525 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 335 KB; rules::ProcessConditionsCache: 269 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 127 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19145 KB;
2026-03-25 11:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; rules::ProcessConditionsCache: 253 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 127 KB; BaseEvent: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19162 KB;
2026-03-25 11:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; ProcessInfo: 584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 335 KB; rules::ProcessConditionsCache: 301 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 127 KB; BaseEvent: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19307 KB;
2026-03-25 11:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; ProcessInfo: 668 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 127 KB; BaseEvent: 126 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19441 KB;
2026-03-25 11:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 367 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 172 KB; BaseEvent: 147 KB; cloudutils::CloudData: 127 KB; BatchSerializer::EventsQueueTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19600 KB;
2026-03-25 11:39:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:32:36, To:, 2026-03-25 11:39:39, Duration (s):, 423, Events Per Second:, 2.634, Events:, 1116, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1020, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 93, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 130516
2026-03-25 11:39:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s946ms.
2026-03-25 11:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:40:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 489 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19119 KB;
2026-03-25 11:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 335 KB; CacheEntry: 259 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; rules::ProcessConditionsCache: 16 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18922 KB;
2026-03-25 11:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 609 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19306 KB;
2026-03-25 11:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 609 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19227 KB;
2026-03-25 11:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 656 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 84 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19227 KB;
2026-03-25 11:45:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:45:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:45:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:45:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 133 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19479 KB;
2026-03-25 11:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 781 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 190 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 133 KB; BaseEvent: 121 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19513 KB;
2026-03-25 11:46:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:39:31, To:, 2026-03-25 11:46:39, Duration (s):, 428, Events Per Second:, 2.085, Events:, 894, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 811, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 82, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 105310
2026-03-25 11:46:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s949ms.
2026-03-25 11:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 499 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 246 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19101 KB;
2026-03-25 11:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 502 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 246 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19061 KB;
2026-03-25 11:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 272 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19134 KB;
2026-03-25 11:50:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:50:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:50:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:50:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 533 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 283 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19132 KB;
2026-03-25 11:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19278 KB;
2026-03-25 11:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 627 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 111 KB; BaseEvent: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19382 KB;
2026-03-25 11:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; ProcessInfo: 652 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 388 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19461 KB;
2026-03-25 11:53:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:46:39, To:, 2026-03-25 11:53:39, Duration (s):, 420, Events Per Second:, 1.172, Events:, 493, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 423, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57802
2026-03-25 11:53:41 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s616ms.
2026-03-25 11:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 402 KB; ProcessInfo: 387 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19109 KB;
2026-03-25 11:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 11:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 11:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 11:55:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 11:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19054 KB;
2026-03-25 11:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1923 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 474 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18908 KB;
2026-03-25 11:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 505 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 86 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18982 KB;
2026-03-25 11:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 95 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19041 KB;
2026-03-25 11:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 11:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 11:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 133 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19172 KB;
2026-03-25 12:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:00:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 133 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19215 KB;
2026-03-25 12:00:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 11:54:08, To:, 2026-03-25 12:00:39, Duration (s):, 391, Events Per Second:, 1.807, Events:, 708, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 648, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 59, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 83533
2026-03-25 12:00:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s808ms.
2026-03-25 12:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 471 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19066 KB;
2026-03-25 12:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19256 KB;
2026-03-25 12:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 317 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 133 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19329 KB;
2026-03-25 12:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 347 KB; CacheEntry: 271 KB; rules::ProcessConditionsCache: 262 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 133 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19290 KB;
2026-03-25 12:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:05:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; ProcessInfo: 618 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 288 KB; CacheEntry: 271 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 133 KB; BaseEvent: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19377 KB;
2026-03-25 12:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; ProcessInfo: 621 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 297 KB; CacheEntry: 271 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19361 KB;
2026-03-25 12:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; ProcessInfo: 621 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 297 KB; CacheEntry: 271 KB; cloudutils::CloudData: 134 KB; BaseEvent: 101 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19326 KB;
2026-03-25 12:07:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:00:39, To:, 2026-03-25 12:07:39, Duration (s):, 420, Events Per Second:, 1.597, Events:, 672, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 548, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 38, Livegrid:, 38, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 76285
2026-03-25 12:07:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s846ms.
2026-03-25 12:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 295 KB; CacheEntry: 271 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18846 KB;
2026-03-25 12:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 295 KB; CacheEntry: 271 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18846 KB;
2026-03-25 12:10:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:10:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:10:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:10:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 347 KB; rules::ProcessConditionsCache: 296 KB; ProcessInfo: 295 KB; CacheEntry: 271 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18846 KB;
2026-03-25 12:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 461 KB; rules::ProcessConditionsCache: 354 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 134 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19224 KB;
2026-03-25 12:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1925 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 464 KB; rules::ProcessConditionsCache: 356 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 134 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19223 KB;
2026-03-25 12:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 492 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 44 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18988 KB;
2026-03-25 12:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 86 KB; BaseEvent: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19053 KB;
2026-03-25 12:14:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:05:35, To:, 2026-03-25 12:14:39, Duration (s):, 544, Events Per Second:, 1.188, Events:, 647, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 610, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 77955
2026-03-25 12:14:42 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s188ms.
2026-03-25 12:15:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:15:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:15:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:15:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 373 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18826 KB;
2026-03-25 12:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 373 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18814 KB;
2026-03-25 12:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 386 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 115 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18810 KB;
2026-03-25 12:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 436 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 95 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18957 KB;
2026-03-25 12:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 458 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 121 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19047 KB;
2026-03-25 12:20:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:20:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:20:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:20:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 511 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 133 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19150 KB;
2026-03-25 12:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 511 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 204 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 116 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19121 KB;
2026-03-25 12:21:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:15:00, To:, 2026-03-25 12:21:39, Duration (s):, 399, Events Per Second:, 1.138, Events:, 455, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 408, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54975
2026-03-25 12:21:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms.
2026-03-25 12:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 348 KB; ProcessInfo: 340 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18843 KB;
2026-03-25 12:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 352 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18822 KB;
2026-03-25 12:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 374 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 133 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18891 KB;
2026-03-25 12:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:25:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 470 KB; rules::ProcessConditionsCache: 370 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19268 KB;
2026-03-25 12:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1926 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 470 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 255 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 133 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19135 KB;
2026-03-25 12:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 499 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 264 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 133 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19201 KB;
2026-03-25 12:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 348 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 133 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19290 KB;
2026-03-25 12:28:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:22:22, To:, 2026-03-25 12:28:39, Duration (s):, 377, Events Per Second:, 1.398, Events:, 528, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 495, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 32, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61819
2026-03-25 12:28:41 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s578ms.
2026-03-25 12:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 381 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 134 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19092 KB;
2026-03-25 12:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:30:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 389 KB; ModuleInfoCache: 348 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 272 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19066 KB;
2026-03-25 12:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 436 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19238 KB;
2026-03-25 12:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 440 KB; ModuleInfoCache: 348 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 272 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19154 KB;
2026-03-25 12:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 499 KB; rules::ProcessConditionsCache: 369 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 133 KB; BaseEvent: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19350 KB;
2026-03-25 12:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 373 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 133 KB; BaseEvent: 113 KB; BatchSerializer::EventsQueueTag: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19396 KB;
2026-03-25 12:35:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:35:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:35:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:35:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; ProcessInfo: 675 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; BaseEvent: 186 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 111 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19412 KB;
2026-03-25 12:35:39 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:28:53, To:, 2026-03-25 12:35:39, Duration (s):, 406, Events Per Second:, 3.227, Events:, 1313, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 982, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 95, Livegrid:, 95, OriginUrl:, 0, Alarms:, 140, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 143023
2026-03-25 12:35:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s995ms.
2026-03-25 12:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; ProcessInfo: 831 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 348 KB; TcpIpConnectionsManager: 312 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 133 KB; BaseEvent: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19652 KB;
2026-03-25 12:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; ProcessInfo: 1128 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 422 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; BaseEvent: 259 KB; cloudutils::CloudData: 133 KB; rules::ProcessConditionsCache: 86 KB; BatchSerializer::EventsQueueTag: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20174 KB;
2026-03-25 12:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; ProcessInfo: 1514 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 440 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 133 KB; BatchSerializer::EventsQueueTag: 119 KB; rules::ProcessConditionsCache: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20949 KB;
2026-03-25 12:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 1954 KB; ModuleMetadata: 1928 KB; BaseEvent: 672 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; BatchSerializer::EventsQueueTag: 183 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21776 KB;
2026-03-25 12:39:40 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:35:41, To:, 2026-03-25 12:39:40, Duration (s):, 239, Events Per Second:, 17.060, Events:, 4084, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3337, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 626, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 449401
2026-03-25 12:39:42 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s350ms.
2026-03-25 12:40:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:40:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:40:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:40:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1928 KB; ProcessInfo: 1614 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 133 KB; BaseEvent: 122 KB; rules::ProcessConditionsCache: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20630 KB;
2026-03-25 12:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 1969 KB; ModuleMetadata: 1928 KB; TcpIpConnectionsManager: 559 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 348 KB; BaseEvent: 295 KB; CacheEntry: 272 KB; cloudutils::CloudData: 133 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::ProcessConditionsCache: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21167 KB;
2026-03-25 12:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2339 KB; ModuleMetadata: 1929 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 541 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 479 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 127 KB; rules::ProcessConditionsCache: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21758 KB;
2026-03-25 12:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2726 KB; ModuleMetadata: 1929 KB; BaseEvent: 669 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; BatchSerializer::EventsQueueTag: 176 KB; cloudutils::CloudData: 134 KB; rules::ProcessConditionsCache: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 22387 KB;
2026-03-25 12:43:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:39:39, To:, 2026-03-25 12:43:50, Duration (s):, 251, Events Per Second:, 16.312, Events:, 4100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456118
2026-03-25 12:43:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s256ms.
2026-03-25 12:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1929 KB; ProcessInfo: 1481 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 523 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 401 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; cloudutils::CloudData: 134 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20704 KB;
2026-03-25 12:45:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:45:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:45:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:45:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1929 KB; ProcessInfo: 1752 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; TcpIpConnectionsManager: 481 KB; ModuleInfoCache: 348 KB; rules::ProcessConditionsCache: 274 KB; CacheEntry: 272 KB; BaseEvent: 202 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 20969 KB;
2026-03-25 12:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 1994 KB; ModuleMetadata: 1929 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; TcpIpConnectionsManager: 441 KB; ModuleInfoCache: 348 KB; BaseEvent: 321 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 135 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21191 KB;
2026-03-25 12:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 1994 KB; ModuleMetadata: 1929 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 348 KB; BaseEvent: 322 KB; TcpIpConnectionsManager: 282 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 135 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21035 KB;
2026-03-25 12:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2069 KB; ModuleMetadata: 1929 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 357 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; rules::ProcessConditionsCache: 214 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21145 KB;
2026-03-25 12:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2189 KB; ModuleMetadata: 1929 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 410 KB; ModuleInfoCache: 348 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21416 KB;
2026-03-25 12:50:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:50:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:50:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:50:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ProcessInfo: 2220 KB; ModuleMetadata: 1929 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 425 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 134 KB; BatchSerializer::EventsQueueTag: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 21498 KB;
2026-03-25 12:50:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:43:47, To:, 2026-03-25 12:50:50, Duration (s):, 423, Events Per Second:, 5.744, Events:, 2432, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2035, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 394, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 273883
2026-03-25 12:50:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s192ms.
2026-03-25 12:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1929 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 472 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 348 KB; CacheEntry: 272 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19241 KB;
2026-03-25 12:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1937 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 506 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 20 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18892 KB;
2026-03-25 12:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1937 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 506 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18886 KB;
2026-03-25 12:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1937 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 506 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18877 KB;
2026-03-25 12:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 12:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 12:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 12:55:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 12:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1937 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 80 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18948 KB;
2026-03-25 12:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1937 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 349 KB; CacheEntry: 273 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 65 KB; rules::ProcessConditionsCache: 60 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18933 KB;
2026-03-25 12:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 85 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19093 KB;
2026-03-25 12:57:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:50:53, To:, 2026-03-25 12:57:50, Duration (s):, 417, Events Per Second:, 1.049, Events:, 438, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 370, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 10, Livegrid:, 10, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51924
2026-03-25 12:57:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s007ms.
2026-03-25 12:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 392 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 145 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18898 KB;
2026-03-25 12:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 12:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 12:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 437 KB; ModuleInfoCache: 350 KB; rules::ProcessConditionsCache: 275 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19154 KB;
2026-03-25 13:00:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:00:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:00:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:00:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 475 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 191 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 134 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19108 KB;
2026-03-25 13:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 475 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19071 KB;
2026-03-25 13:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ProcessInfo: 475 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19060 KB;
2026-03-25 13:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 525 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 95 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19193 KB;
2026-03-25 13:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 103 KB; BaseEvent: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19225 KB;
2026-03-25 13:04:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 12:57:52, To:, 2026-03-25 13:04:50, Duration (s):, 418, Events Per Second:, 1.389, Events:, 581, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 482, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67152
2026-03-25 13:04:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s832ms.
2026-03-25 13:05:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:05:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:05:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:05:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 365 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18975 KB;
2026-03-25 13:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 425 KB; ModuleInfoCache: 350 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 274 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19155 KB;
2026-03-25 13:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 447 KB; ModuleInfoCache: 350 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 274 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19172 KB;
2026-03-25 13:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 499 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19330 KB;
2026-03-25 13:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 34 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19066 KB;
2026-03-25 13:10:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:10:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:10:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:10:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 134 KB; BaseEvent: 96 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::ProcessConditionsCache: 30 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19045 KB;
2026-03-25 13:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1939 KB; ProcessInfo: 596 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 134 KB; BaseEvent: 108 KB; TcpIpConnectionsManager: 84 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19117 KB;
2026-03-25 13:11:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:05:00, To:, 2026-03-25 13:11:50, Duration (s):, 410, Events Per Second:, 1.898, Events:, 779, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 687, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 91, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 93569
2026-03-25 13:11:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s817ms.
2026-03-25 13:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 440 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 143 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18966 KB;
2026-03-25 13:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 134 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19233 KB;
2026-03-25 13:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 182 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 134 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19190 KB;
2026-03-25 13:15:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:15:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:15:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:15:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 591 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 134 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19308 KB;
2026-03-25 13:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 593 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 118 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19209 KB;
2026-03-25 13:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 702 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 350 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 135 KB; BaseEvent: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19587 KB;
2026-03-25 13:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 749 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 350 KB; rules::ProcessConditionsCache: 291 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 135 KB; BaseEvent: 130 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19636 KB;
2026-03-25 13:18:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:11:40, To:, 2026-03-25 13:18:50, Duration (s):, 430, Events Per Second:, 2.330, Events:, 1003, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 920, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 80, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 119447
2026-03-25 13:18:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s959ms.
2026-03-25 13:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 443 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 255 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 135 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19112 KB;
2026-03-25 13:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:20:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 350 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 274 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 135 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19310 KB;
2026-03-25 13:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 546 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 365 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 134 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19340 KB;
2026-03-25 13:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19372 KB;
2026-03-25 13:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 616 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 103 KB; BaseEvent: 80 KB; rules::ProcessConditionsCache: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19088 KB;
2026-03-25 13:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 641 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 108 KB; BaseEvent: 94 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19150 KB;
2026-03-25 13:25:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:25:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:25:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:25:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; ProcessInfo: 646 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 98 KB; BaseEvent: 95 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19149 KB;
2026-03-25 13:25:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:18:50, To:, 2026-03-25 13:25:50, Duration (s):, 420, Events Per Second:, 1.513, Events:, 636, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 541, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 94, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 76233
2026-03-25 13:25:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s805ms.
2026-03-25 13:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1940 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 380 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18841 KB;
2026-03-25 13:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1942 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 381 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 115 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18833 KB;
2026-03-25 13:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1942 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 406 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 141 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 5 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18917 KB;
2026-03-25 13:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1942 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 442 KB; ModuleInfoCache: 350 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18990 KB;
2026-03-25 13:30:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:30:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:30:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:30:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1943 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 461 KB; ModuleInfoCache: 351 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19027 KB;
2026-03-25 13:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1943 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 461 KB; ModuleInfoCache: 351 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19017 KB;
2026-03-25 13:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1943 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 465 KB; ModuleInfoCache: 351 KB; CacheEntry: 274 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 69 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19008 KB;
2026-03-25 13:32:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:25:50, To:, 2026-03-25 13:32:50, Duration (s):, 420, Events Per Second:, 0.725, Events:, 305, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 260, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 32, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37231
2026-03-25 13:32:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s749ms.
2026-03-25 13:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 351 KB; ProcessInfo: 311 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18839 KB;
2026-03-25 13:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 351 KB; ProcessInfo: 314 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18846 KB;
2026-03-25 13:35:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:35:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:35:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:35:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 351 KB; ProcessInfo: 340 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18905 KB;
2026-03-25 13:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 351 KB; ProcessInfo: 342 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18892 KB;
2026-03-25 13:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 351 KB; ProcessInfo: 346 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 224 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18930 KB;
2026-03-25 13:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 368 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18978 KB;
2026-03-25 13:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 477 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 296 KB; CacheEntry: 275 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 108 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19235 KB;
2026-03-25 13:39:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:32:53, To:, 2026-03-25 13:39:50, Duration (s):, 417, Events Per Second:, 1.626, Events:, 679, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 618, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 58, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 80733
2026-03-25 13:39:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s193ms.
2026-03-25 13:40:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:40:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:40:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:40:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 135 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::ProcessConditionsCache: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19088 KB;
2026-03-25 13:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1945 KB; ProcessInfo: 564 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 135 KB; BaseEvent: 43 KB; rules::ProcessConditionsCache: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19121 KB;
2026-03-25 13:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1946 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 134 KB; BaseEvent: 45 KB; rules::ProcessConditionsCache: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19065 KB;
2026-03-25 13:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1946 KB; ProcessInfo: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; rules::ProcessConditionsCache: 91 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19133 KB;
2026-03-25 13:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1946 KB; ProcessInfo: 647 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; rules::ProcessConditionsCache: 117 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19208 KB;
2026-03-25 13:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:45:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1946 KB; ProcessInfo: 674 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 108 KB; BaseEvent: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19287 KB;
2026-03-25 13:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1946 KB; ProcessInfo: 674 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 134 KB; BaseEvent: 94 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19266 KB;
2026-03-25 13:46:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:39:49, To:, 2026-03-25 13:46:50, Duration (s):, 421, Events Per Second:, 1.357, Events:, 572, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 486, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 85, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67309
2026-03-25 13:46:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms.
2026-03-25 13:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1946 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 365 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18960 KB;
2026-03-25 13:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1946 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 436 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19147 KB;
2026-03-25 13:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 445 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 280 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 134 KB; BaseEvent: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19176 KB;
2026-03-25 13:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:50:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 497 KB; rules::ProcessConditionsCache: 383 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 134 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19379 KB;
2026-03-25 13:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19384 KB;
2026-03-25 13:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19369 KB;
2026-03-25 13:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 367 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 121 KB; BaseEvent: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19442 KB;
2026-03-25 13:53:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:47:07, To:, 2026-03-25 13:53:50, Duration (s):, 403, Events Per Second:, 1.864, Events:, 752, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 659, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 90, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 86123
2026-03-25 13:53:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s861ms.
2026-03-25 13:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 367 KB; ProcessInfo: 352 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19023 KB;
2026-03-25 13:55:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 13:55:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 13:55:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 13:55:19 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 13:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 396 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 98 KB; rules::ProcessConditionsCache: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18813 KB;
2026-03-25 13:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1948 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 424 KB; ModuleInfoCache: 351 KB; CacheEntry: 275 KB; cloudutils::CloudData: 134 KB; TcpIpConnectionsManager: 118 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18857 KB;
2026-03-25 13:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 486 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 108 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19045 KB;
2026-03-25 13:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 489 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 89 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19017 KB;
2026-03-25 13:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 13:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 13:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 194 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 135 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19255 KB;
2026-03-25 14:00:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:00:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:00:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:00:19 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; ProcessInfo: 603 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 196 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 135 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19318 KB;
2026-03-25 14:00:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 13:54:07, To:, 2026-03-25 14:00:50, Duration (s):, 403, Events Per Second:, 1.839, Events:, 742, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 673, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 68, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 86706
2026-03-25 14:00:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s760ms.
2026-03-25 14:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 409 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 135 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19001 KB;
2026-03-25 14:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 434 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19037 KB;
2026-03-25 14:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 434 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18999 KB;
2026-03-25 14:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 367 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19374 KB;
2026-03-25 14:05:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:05:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:05:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:05:19 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 302 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 134 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19312 KB;
2026-03-25 14:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; ProcessInfo: 609 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 351 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 135 KB; BaseEvent: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19474 KB;
2026-03-25 14:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; ProcessInfo: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 135 KB; BaseEvent: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19526 KB;
2026-03-25 14:07:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:01:11, To:, 2026-03-25 14:07:50, Duration (s):, 399, Events Per Second:, 1.579, Events:, 631, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 546, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 82, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72218
2026-03-25 14:07:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s793ms.
2026-03-25 14:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 374 KB; ProcessInfo: 371 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19087 KB;
2026-03-25 14:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 452 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19230 KB;
2026-03-25 14:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:10:19 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 481 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18925 KB;
2026-03-25 14:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1951 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 351 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 66 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19041 KB;
2026-03-25 14:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 126 KB; rules::ProcessConditionsCache: 90 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19089 KB;
2026-03-25 14:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 105 KB; rules::ProcessConditionsCache: 92 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19082 KB;
2026-03-25 14:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 92 KB; TcpIpConnectionsManager: 69 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19051 KB;
2026-03-25 14:14:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:08:24, To:, 2026-03-25 14:14:50, Duration (s):, 386, Events Per Second:, 1.291, Events:, 499, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 464, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59956
2026-03-25 14:14:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s783ms.
2026-03-25 14:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:15:19 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 352 KB; ProcessInfo: 296 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18714 KB;
2026-03-25 14:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 367 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18936 KB;
2026-03-25 14:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 393 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18976 KB;
2026-03-25 14:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 398 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18993 KB;
2026-03-25 14:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 400 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18955 KB;
2026-03-25 14:20:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:20:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:20:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:20:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 436 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19038 KB;
2026-03-25 14:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 506 KB; ModuleInfoCache: 352 KB; rules::ProcessConditionsCache: 302 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 135 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19326 KB;
2026-03-25 14:21:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:15:00, To:, 2026-03-25 14:21:50, Duration (s):, 410, Events Per Second:, 1.396, Events:, 573, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 524, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68723
2026-03-25 14:21:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s793ms.
2026-03-25 14:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 428 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 266 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 135 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19122 KB;
2026-03-25 14:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 481 KB; ModuleInfoCache: 352 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 135 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19263 KB;
2026-03-25 14:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; ProcessInfo: 566 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 360 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 135 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19421 KB;
2026-03-25 14:25:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:25:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:25:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:25:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; ProcessInfo: 622 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 103 KB; BatchSerializer::EventsQueueTag: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19523 KB;
2026-03-25 14:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1953 KB; ProcessInfo: 672 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; BaseEvent: 127 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 64 KB; BatchSerializer::EventsQueueTag: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19254 KB;
2026-03-25 14:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1954 KB; ProcessInfo: 672 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; BaseEvent: 128 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19281 KB;
2026-03-25 14:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1956 KB; ProcessInfo: 694 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; BaseEvent: 132 KB; rules::ProcessConditionsCache: 110 KB; TcpIpConnectionsManager: 98 KB; BatchSerializer::EventsQueueTag: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19331 KB;
2026-03-25 14:28:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:21:49, To:, 2026-03-25 14:28:50, Duration (s):, 421, Events Per Second:, 2.149, Events:, 906, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 770, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 89, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106298
2026-03-25 14:28:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s932ms.
2026-03-25 14:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1956 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 352 KB; ProcessInfo: 336 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18738 KB;
2026-03-25 14:30:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:30:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:30:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:30:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1956 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 367 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18824 KB;
2026-03-25 14:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1956 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 392 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18901 KB;
2026-03-25 14:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1956 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 414 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19003 KB;
2026-03-25 14:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1956 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 439 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18988 KB;
2026-03-25 14:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 442 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18992 KB;
2026-03-25 14:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:35:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 492 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19153 KB;
2026-03-25 14:35:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:30:00, To:, 2026-03-25 14:35:50, Duration (s):, 350, Events Per Second:, 1.215, Events:, 426, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 365, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50500
2026-03-25 14:35:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s860ms.
2026-03-25 14:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 417 KB; ModuleInfoCache: 352 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19156 KB;
2026-03-25 14:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 417 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 239 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19063 KB;
2026-03-25 14:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 493 KB; ModuleInfoCache: 352 KB; rules::ProcessConditionsCache: 316 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 135 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19284 KB;
2026-03-25 14:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; ProcessInfo: 562 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 352 KB; rules::ProcessConditionsCache: 347 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19407 KB;
2026-03-25 14:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:40:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 135 KB; BaseEvent: 99 KB; rules::ProcessConditionsCache: 51 KB; BatchSerializer::EventsQueueTag: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19210 KB;
2026-03-25 14:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; ProcessInfo: 646 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 116 KB; BaseEvent: 114 KB; rules::ProcessConditionsCache: 95 KB; BatchSerializer::EventsQueueTag: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19295 KB;
2026-03-25 14:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; ProcessInfo: 688 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 136 KB; cloudutils::CloudData: 135 KB; BaseEvent: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19435 KB;
2026-03-25 14:42:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:35:50, To:, 2026-03-25 14:42:50, Duration (s):, 420, Events Per Second:, 2.228, Events:, 937, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 833, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 93, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 109025
2026-03-25 14:42:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s996ms.
2026-03-25 14:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 361 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18819 KB;
2026-03-25 14:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 373 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; rules::ProcessConditionsCache: 116 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18837 KB;
2026-03-25 14:45:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:45:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:45:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:45:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 399 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18902 KB;
2026-03-25 14:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 472 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 217 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19114 KB;
2026-03-25 14:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19259 KB;
2026-03-25 14:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 352 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19422 KB;
2026-03-25 14:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; ProcessInfo: 599 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 352 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 111 KB; BaseEvent: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19473 KB;
2026-03-25 14:49:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:42:51, To:, 2026-03-25 14:49:50, Duration (s):, 419, Events Per Second:, 1.842, Events:, 773, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 645, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 127, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 88226
2026-03-25 14:49:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s838ms.
2026-03-25 14:50:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:50:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:50:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:50:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 420 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::ProcessConditionsCache: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18853 KB;
2026-03-25 14:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1957 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 445 KB; ModuleInfoCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18929 KB;
2026-03-25 14:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 470 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 18987 KB;
2026-03-25 14:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19224 KB;
2026-03-25 14:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; ProcessInfo: 613 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 231 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 135 KB; BaseEvent: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19389 KB;
2026-03-25 14:55:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 14:55:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 14:55:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 14:55:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 14:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; ProcessInfo: 663 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 286 KB; CacheEntry: 276 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 135 KB; BaseEvent: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19538 KB;
2026-03-25 14:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; ProcessInfo: 666 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 286 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; BaseEvent: 125 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19492 KB;
2026-03-25 14:56:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:49:52, To:, 2026-03-25 14:56:50, Duration (s):, 418, Events Per Second:, 1.849, Events:, 774, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 655, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 114, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 90469
2026-03-25 14:56:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s777ms.
2026-03-25 14:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 390 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 286 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19048 KB;
2026-03-25 14:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 414 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19109 KB;
2026-03-25 14:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 14:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 14:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 415 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19114 KB;
2026-03-25 15:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:00:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 452 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19207 KB;
2026-03-25 15:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19108 KB;
2026-03-25 15:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; ProcessInfo: 587 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 118 KB; rules::ProcessConditionsCache: 91 KB; BaseEvent: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19176 KB;
2026-03-25 15:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; ProcessInfo: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 172 KB; TcpIpConnectionsManager: 139 KB; cloudutils::CloudData: 135 KB; BaseEvent: 117 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19403 KB;
2026-03-25 15:03:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 14:56:46, To:, 2026-03-25 15:03:50, Duration (s):, 424, Events Per Second:, 1.969, Events:, 836, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 724, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 107, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 97117
2026-03-25 15:03:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s871ms.
2026-03-25 15:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 477 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19067 KB;
2026-03-25 15:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:05:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1959 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 531 KB; ModuleInfoCache: 353 KB; CacheEntry: 276 KB; rules::ProcessConditionsCache: 256 KB; cloudutils::CloudData: 135 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19219 KB;
2026-03-25 15:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1960 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 282 KB; CacheEntry: 276 KB; cloudutils::CloudData: 136 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19260 KB;
2026-03-25 15:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1960 KB; ProcessInfo: 613 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 276 KB; cloudutils::CloudData: 136 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19384 KB;
2026-03-25 15:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1960 KB; ProcessInfo: 613 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 308 KB; CacheEntry: 276 KB; cloudutils::CloudData: 136 KB; TcpIpConnectionsManager: 111 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19365 KB;
2026-03-25 15:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 14387 KB; ModuleMetadata: 1960 KB; ProcessInfo: 659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 353 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 276 KB; cloudutils::CloudData: 136 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 19426 KB;
2026-03-25 15:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:10:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1960 KB; ProcessInfo: 782 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 353 KB; CacheEntry: 277 KB; TcpIpConnectionsManager: 138 KB; cloudutils::CloudData: 136 KB; BaseEvent: 115 KB; rules::ProcessConditionsCache: 64 KB; BatchSerializer::EventsQueueTag: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31702 KB;
2026-03-25 15:10:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:03:51, To:, 2026-03-25 15:10:50, Duration (s):, 419, Events Per Second:, 1.987, Events:, 834, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 750, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 79, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 97165
2026-03-25 15:10:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s627ms.
2026-03-25 15:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1960 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 455 KB; ModuleInfoCache: 353 KB; CacheEntry: 277 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31264 KB;
2026-03-25 15:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1989 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 489 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31382 KB;
2026-03-25 15:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1989 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 534 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 137 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31496 KB;
2026-03-25 15:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1989 KB; ProcessInfo: 559 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 95 KB; BaseEvent: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31496 KB;
2026-03-25 15:15:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:15:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:15:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:15:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1989 KB; ProcessInfo: 586 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 124 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31548 KB;
2026-03-25 15:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1989 KB; ProcessInfo: 624 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 138 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31628 KB;
2026-03-25 15:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1989 KB; ProcessInfo: 652 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 138 KB; TcpIpConnectionsManager: 97 KB; BaseEvent: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31678 KB;
2026-03-25 15:17:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:10:45, To:, 2026-03-25 15:17:50, Duration (s):, 425, Events Per Second:, 1.367, Events:, 582, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 534, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67581
2026-03-25 15:17:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms.
2026-03-25 15:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 26675 KB; ModuleMetadata: 1989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 406 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 138 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 31405 KB;
2026-03-25 15:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 138 KB; BaseEvent: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32890 KB;
2026-03-25 15:20:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:20:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:20:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:20:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; ProcessInfo: 606 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 138 KB; BaseEvent: 109 KB; rules::ProcessConditionsCache: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32579 KB;
2026-03-25 15:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 138 KB; BaseEvent: 124 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32636 KB;
2026-03-25 15:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; BaseEvent: 124 KB; TcpIpConnectionsManager: 80 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32548 KB;
2026-03-25 15:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; BaseEvent: 128 KB; rules::ProcessConditionsCache: 71 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32549 KB;
2026-03-25 15:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; ProcessInfo: 633 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; BaseEvent: 127 KB; rules::ProcessConditionsCache: 71 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32560 KB;
2026-03-25 15:24:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:18:08, To:, 2026-03-25 15:24:50, Duration (s):, 402, Events Per Second:, 1.932, Events:, 778, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 662, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 115, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 90126
2026-03-25 15:24:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s853ms.
2026-03-25 15:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:25:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 357 KB; ProcessInfo: 298 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32062 KB;
2026-03-25 15:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1989 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 357 KB; ProcessInfo: 348 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 128 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32229 KB;
2026-03-25 15:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 387 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 147 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32322 KB;
2026-03-25 15:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 437 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 227 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32532 KB;
2026-03-25 15:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 459 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 177 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 138 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32500 KB;
2026-03-25 15:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:30:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 478 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 135 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32462 KB;
2026-03-25 15:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 596 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 278 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 138 KB; BaseEvent: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32849 KB;
2026-03-25 15:31:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:24:50, To:, 2026-03-25 15:31:50, Duration (s):, 420, Events Per Second:, 2.867, Events:, 1206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1076, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 129, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 140642
2026-03-25 15:31:51 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s956ms.
2026-03-25 15:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 357 KB; TcpIpConnectionsManager: 295 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 138 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 32964 KB;
2026-03-25 15:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 942 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; TcpIpConnectionsManager: 362 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; BaseEvent: 168 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33172 KB;
2026-03-25 15:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 1254 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 466 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 357 KB; BaseEvent: 319 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34112 KB;
2026-03-25 15:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:35:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 1549 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 465 KB; TcpIpConnectionsManager: 428 KB; ModuleInfoCache: 357 KB; rules::ProcessConditionsCache: 296 KB; CacheEntry: 282 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34482 KB;
2026-03-25 15:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 1910 KB; BaseEvent: 642 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; TcpIpConnectionsManager: 466 KB; ModuleInfoCache: 357 KB; rules::ProcessConditionsCache: 285 KB; CacheEntry: 282 KB; BatchSerializer::EventsQueueTag: 172 KB; cloudutils::CloudData: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35100 KB;
2026-03-25 15:36:51 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:31:50, To:, 2026-03-25 15:36:50, Duration (s):, 300, Events Per Second:, 13.576, Events:, 4086, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 692, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453275
2026-03-25 15:36:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s322ms.
2026-03-25 15:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 1468 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 477 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 138 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33929 KB;
2026-03-25 15:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 27699 KB; ModuleMetadata: 1990 KB; ProcessInfo: 1816 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 510 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; BaseEvent: 249 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34507 KB;
2026-03-25 15:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ProcessInfo: 2235 KB; ModuleMetadata: 1990 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; TcpIpConnectionsManager: 520 KB; BaseEvent: 445 KB; ModuleInfoCache: 357 KB; CacheEntry: 282 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36194 KB;
2026-03-25 15:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ProcessInfo: 2602 KB; ModuleMetadata: 2051 KB; BaseEvent: 625 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 495 KB; ModuleInfoCache: 366 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 224 KB; BatchSerializer::EventsQueueTag: 173 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36928 KB;
2026-03-25 15:40:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:40:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:40:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:40:23 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ProcessInfo: 2602 KB; ModuleMetadata: 2053 KB; BaseEvent: 629 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; TcpIpConnectionsManager: 351 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 224 KB; BatchSerializer::EventsQueueTag: 175 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36792 KB;
2026-03-25 15:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ProcessInfo: 2602 KB; ModuleMetadata: 2053 KB; BaseEvent: 631 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 224 KB; BatchSerializer::EventsQueueTag: 176 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36620 KB;
2026-03-25 15:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ProcessInfo: 2602 KB; ModuleMetadata: 2053 KB; BaseEvent: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 223 KB; BatchSerializer::EventsQueueTag: 177 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36508 KB;
2026-03-25 15:43:51 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:36:42, To:, 2026-03-25 15:43:51, Duration (s):, 429, Events Per Second:, 8.557, Events:, 3671, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2978, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 85, Livegrid:, 87, OriginUrl:, 0, Alarms:, 519, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 409260
2026-03-25 15:43:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s094ms.
2026-03-25 15:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; ProcessInfo: 301 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33378 KB;
2026-03-25 15:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 1521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; TcpIpConnectionsManager: 558 KB; BaseEvent: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 151 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35875 KB;
2026-03-25 15:45:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:45:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:45:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:45:23 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 1571 KB; TcpIpConnectionsManager: 589 KB; BaseEvent: 577 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; rules::ProcessConditionsCache: 364 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 157 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36053 KB;
2026-03-25 15:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 1621 KB; TcpIpConnectionsManager: 625 KB; BaseEvent: 596 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 163 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35875 KB;
2026-03-25 15:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 1693 KB; BaseEvent: 617 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; TcpIpConnectionsManager: 192 KB; BatchSerializer::EventsQueueTag: 170 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35650 KB;
2026-03-25 15:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 1834 KB; BaseEvent: 688 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; TcpIpConnectionsManager: 234 KB; rules::ProcessConditionsCache: 215 KB; BatchSerializer::EventsQueueTag: 191 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35960 KB;
2026-03-25 15:50:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:40:01, To:, 2026-03-25 15:50:09, Duration (s):, 608, Events Per Second:, 6.945, Events:, 4224, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3616, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 607, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 478879
2026-03-25 15:50:11 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s355ms.
2026-03-25 15:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; ProcessInfo: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 268 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33863 KB;
2026-03-25 15:50:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:50:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:50:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:50:23 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 596 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 257 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33872 KB;
2026-03-25 15:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 599 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 251 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33782 KB;
2026-03-25 15:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 624 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 277 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33834 KB;
2026-03-25 15:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 696 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 378 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 121 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34070 KB;
2026-03-25 15:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 735 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 366 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 136 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34109 KB;
2026-03-25 15:55:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 15:55:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 15:55:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 15:55:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 15:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2054 KB; ProcessInfo: 735 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 366 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34121 KB;
2026-03-25 15:57:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:50:05, To:, 2026-03-25 15:57:09, Duration (s):, 424, Events Per Second:, 1.332, Events:, 566, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 497, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 68, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 69535
2026-03-25 15:57:10 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s813ms.
2026-03-25 15:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2056 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 405 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33707 KB;
2026-03-25 15:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2056 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 412 KB; rules::ProcessConditionsCache: 392 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33670 KB;
2026-03-25 15:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 15:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 15:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2056 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 471 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33471 KB;
2026-03-25 16:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2056 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33619 KB;
2026-03-25 16:00:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:00:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:00:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:00:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2056 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 82 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33622 KB;
2026-03-25 16:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 540 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33635 KB;
2026-03-25 16:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 540 KB; ModuleInfoCache: 366 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 93 KB; TcpIpConnectionsManager: 87 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33615 KB;
2026-03-25 16:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:04:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:57:30, To:, 2026-03-25 16:04:09, Duration (s):, 399, Events Per Second:, 0.998, Events:, 399, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 324, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 20, Livegrid:, 20, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47518
2026-03-25 16:04:10 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s775ms.
2026-03-25 16:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 366 KB; ProcessInfo: 320 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 93 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33280 KB;
2026-03-25 16:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 366 KB; ProcessInfo: 320 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 93 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33280 KB;
2026-03-25 16:05:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:05:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:05:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:05:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 366 KB; ProcessInfo: 320 KB; CacheEntry: 292 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 93 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33280 KB;
2026-03-25 16:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; ProcessInfo: 646 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 141 KB; BaseEvent: 132 KB; BatchSerializer::EventsQueueTag: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34202 KB;
2026-03-25 16:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; ProcessInfo: 724 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 280 KB; BaseEvent: 158 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 51 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34055 KB;
2026-03-25 16:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; ProcessInfo: 816 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 303 KB; CacheEntry: 293 KB; BaseEvent: 196 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 92 KB; BatchSerializer::EventsQueueTag: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34284 KB;
2026-03-25 16:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; ProcessInfo: 894 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; BaseEvent: 231 KB; rules::ProcessConditionsCache: 178 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34378 KB;
2026-03-25 16:10:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:10:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:10:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:10:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:11:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:01:52, To:, 2026-03-25 16:11:09, Duration (s):, 557, Events Per Second:, 3.132, Events:, 1747, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1517, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 227, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 198126
2026-03-25 16:11:11 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s858ms.
2026-03-25 16:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 257 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33808 KB;
2026-03-25 16:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; ProcessInfo: 587 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 270 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33808 KB;
2026-03-25 16:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; ProcessInfo: 693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 380 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 141 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34117 KB;
2026-03-25 16:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2057 KB; ProcessInfo: 752 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 382 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 141 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34208 KB;
2026-03-25 16:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 838 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 141 KB; BaseEvent: 113 KB; rules::ProcessConditionsCache: 65 KB; BatchSerializer::EventsQueueTag: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34058 KB;
2026-03-25 16:15:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:15:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:15:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:15:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 922 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 192 KB; rules::ProcessConditionsCache: 155 KB; BaseEvent: 153 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34269 KB;
2026-03-25 16:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; BaseEvent: 157 KB; rules::ProcessConditionsCache: 148 KB; TcpIpConnectionsManager: 141 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34208 KB;
2026-03-25 16:18:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:11:51, To:, 2026-03-25 16:18:09, Duration (s):, 378, Events Per Second:, 2.692, Events:, 1020, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 889, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 126, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 117451
2026-03-25 16:18:11 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s757ms.
2026-03-25 16:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 437 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33568 KB;
2026-03-25 16:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 484 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33611 KB;
2026-03-25 16:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 280 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33864 KB;
2026-03-25 16:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:20:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; ProcessInfo: 611 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 141 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34104 KB;
2026-03-25 16:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 634 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 141 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34040 KB;
2026-03-25 16:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 663 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 354 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 141 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34087 KB;
2026-03-25 16:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 760 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 141 KB; BaseEvent: 140 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34342 KB;
2026-03-25 16:25:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:18:07, To:, 2026-03-25 16:25:09, Duration (s):, 422, Events Per Second:, 3.114, Events:, 1317, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1136, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 178, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 150601
2026-03-25 16:25:11 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s876ms.
2026-03-25 16:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 586 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33741 KB;
2026-03-25 16:25:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:25:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:25:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:25:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 588 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 190 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33764 KB;
2026-03-25 16:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 618 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 141 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33840 KB;
2026-03-25 16:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33775 KB;
2026-03-25 16:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 631 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 85 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33798 KB;
2026-03-25 16:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 662 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 257 KB; cloudutils::CloudData: 141 KB; BaseEvent: 86 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33899 KB;
2026-03-25 16:30:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:30:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:30:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:30:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; ProcessInfo: 665 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 257 KB; cloudutils::CloudData: 141 KB; BaseEvent: 88 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33927 KB;
2026-03-25 16:32:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:25:27, To:, 2026-03-25 16:32:09, Duration (s):, 402, Events Per Second:, 1.305, Events:, 526, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 303, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 93, Livegrid:, 93, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56568
2026-03-25 16:32:10 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s845ms.
2026-03-25 16:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 383 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33569 KB;
2026-03-25 16:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 408 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33668 KB;
2026-03-25 16:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 408 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33604 KB;
2026-03-25 16:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 414 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 288 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33594 KB;
2026-03-25 16:35:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:35:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:35:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:35:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28723 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 417 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33605 KB;
2026-03-25 16:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 681 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 142 KB; BaseEvent: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34027 KB;
2026-03-25 16:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1020 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 627 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 317 KB; BaseEvent: 303 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 139 KB; BatchSerializer::EventsQueueTag: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB;
2026-03-25 16:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:39:09 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:32:09, To:, 2026-03-25 16:39:09, Duration (s):, 420, Events Per Second:, 5.785, Events:, 2435, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1940, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 66, Livegrid:, 66, OriginUrl:, 0, Alarms:, 361, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 268599
2026-03-25 16:39:11 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s268ms.
2026-03-25 16:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1217 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 629 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 461 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34694 KB;
2026-03-25 16:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1449 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 449 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 293 KB; BaseEvent: 149 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35203 KB;
2026-03-25 16:40:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:40:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:40:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:40:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1750 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 453 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 284 KB; BaseEvent: 270 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35638 KB;
2026-03-25 16:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2137 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 538 KB; BaseEvent: 466 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36398 KB;
2026-03-25 16:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2480 KB; ModuleMetadata: 2059 KB; BaseEvent: 638 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 541 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 291 KB; BatchSerializer::EventsQueueTag: 174 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36945 KB;
2026-03-25 16:43:50 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:39:09, To:, 2026-03-25 16:43:50, Duration (s):, 281, Events Per Second:, 14.663, Events:, 4128, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3458, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 667, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455500
2026-03-25 16:43:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s237ms.
2026-03-25 16:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; TcpIpConnectionsManager: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 141 KB; BaseEvent: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35258 KB;
2026-03-25 16:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 533 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 298 KB; CacheEntry: 293 KB; BaseEvent: 266 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35936 KB;
2026-03-25 16:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:45:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2278 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 548 KB; BaseEvent: 445 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 293 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36496 KB;
2026-03-25 16:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2564 KB; ModuleMetadata: 2059 KB; BaseEvent: 578 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 536 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 209 KB; BatchSerializer::EventsQueueTag: 156 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36824 KB;
2026-03-25 16:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2780 KB; ModuleMetadata: 2059 KB; BaseEvent: 685 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 485 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; BatchSerializer::EventsQueueTag: 183 KB; cloudutils::CloudData: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36925 KB;
2026-03-25 16:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:49:19 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:43:49, To:, 2026-03-25 16:49:19, Duration (s):, 330, Events Per Second:, 12.369, Events:, 4082, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 681, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 449617
2026-03-25 16:49:20 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s401ms.
2026-03-25 16:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 923 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 326 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 135 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34176 KB;
2026-03-25 16:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1025 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 246 KB; rules::ProcessConditionsCache: 224 KB; cloudutils::CloudData: 141 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34341 KB;
2026-03-25 16:50:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:50:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:50:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:50:26 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 251 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 141 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34329 KB;
2026-03-25 16:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1075 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 134 KB; BaseEvent: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34419 KB;
2026-03-25 16:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1125 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34550 KB;
2026-03-25 16:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1172 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; BaseEvent: 130 KB; TcpIpConnectionsManager: 123 KB; BatchSerializer::EventsQueueTag: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34618 KB;
2026-03-25 16:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; ProcessInfo: 1176 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 365 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; BaseEvent: 132 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34626 KB;
2026-03-25 16:55:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 16:55:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 16:55:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 16:55:26 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 16:56:19 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:49:18, To:, 2026-03-25 16:56:19, Duration (s):, 421, Events Per Second:, 2.241, Events:, 944, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 774, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 123, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106799
2026-03-25 16:56:20 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s967ms.
2026-03-25 16:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2059 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 423 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::ProcessConditionsCache: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33365 KB;
2026-03-25 16:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 446 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 98 KB; rules::ProcessConditionsCache: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33398 KB;
2026-03-25 16:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 116 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33463 KB;
2026-03-25 16:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 16:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 16:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 113 KB; rules::ProcessConditionsCache: 105 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33579 KB;
2026-03-25 17:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 130 KB; TcpIpConnectionsManager: 102 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33626 KB;
2026-03-25 17:00:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:00:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:00:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:00:26 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 134 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33645 KB;
2026-03-25 17:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; ProcessInfo: 646 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 111 KB; BaseEvent: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33915 KB;
2026-03-25 17:03:19 7967594126c0 Info: Events Statistics, From:, 2026-03-25 16:56:46, To:, 2026-03-25 17:03:19, Duration (s):, 393, Events Per Second:, 2.561, Events:, 1007, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 845, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 153, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115117
2026-03-25 17:03:21 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s966ms.
2026-03-25 17:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 395 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 142 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33921 KB;
2026-03-25 17:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; ProcessInfo: 638 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33817 KB;
2026-03-25 17:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; ProcessInfo: 643 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33734 KB;
2026-03-25 17:05:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:05:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:05:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:05:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; ProcessInfo: 647 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33694 KB;
2026-03-25 17:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; ProcessInfo: 649 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 84 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33637 KB;
2026-03-25 17:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; ProcessInfo: 649 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 84 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33630 KB;
2026-03-25 17:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; ProcessInfo: 691 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 92 KB; TcpIpConnectionsManager: 61 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33707 KB;
2026-03-25 17:10:19 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:03:18, To:, 2026-03-25 17:10:19, Duration (s):, 421, Events Per Second:, 1.035, Events:, 436, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 413, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53125
2026-03-25 17:10:20 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s822ms.
2026-03-25 17:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 100 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33344 KB;
2026-03-25 17:10:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:10:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:10:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:10:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2062 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 368 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 142 KB; rules::ProcessConditionsCache: 98 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33345 KB;
2026-03-25 17:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 442 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33622 KB;
2026-03-25 17:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 487 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 121 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33704 KB;
2026-03-25 17:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 236 KB; TcpIpConnectionsManager: 143 KB; cloudutils::CloudData: 142 KB; BaseEvent: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33809 KB;
2026-03-25 17:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 525 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 142 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33785 KB;
2026-03-25 17:15:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:15:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:15:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:15:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; ProcessInfo: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33852 KB;
2026-03-25 17:17:19 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:10:19, To:, 2026-03-25 17:17:19, Duration (s):, 420, Events Per Second:, 1.768, Events:, 743, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 644, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 94, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 87546
2026-03-25 17:17:20 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s866ms.
2026-03-25 17:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 424 KB; rules::ProcessConditionsCache: 369 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33727 KB;
2026-03-25 17:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 446 KB; rules::ProcessConditionsCache: 369 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33773 KB;
2026-03-25 17:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 493 KB; rules::ProcessConditionsCache: 402 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33902 KB;
2026-03-25 17:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 571 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 143 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34017 KB;
2026-03-25 17:20:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:20:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:20:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:20:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 571 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 143 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33996 KB;
2026-03-25 17:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34003 KB;
2026-03-25 17:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 402 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 72 KB; BaseEvent: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33944 KB;
2026-03-25 17:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:24:19 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:17:13, To:, 2026-03-25 17:24:19, Duration (s):, 426, Events Per Second:, 1.255, Events:, 535, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 490, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 44, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 64893
2026-03-25 17:24:20 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s846ms.
2026-03-25 17:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 336 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33250 KB;
2026-03-25 17:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 356 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33326 KB;
2026-03-25 17:25:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:25:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:25:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:25:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 374 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 111 KB; rules::ProcessConditionsCache: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33322 KB;
2026-03-25 17:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 447 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; rules::ProcessConditionsCache: 111 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33523 KB;
2026-03-25 17:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 674 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 230 KB; BaseEvent: 144 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34241 KB;
2026-03-25 17:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 989 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 339 KB; BaseEvent: 301 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34778 KB;
2026-03-25 17:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1283 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 444 KB; BaseEvent: 437 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35257 KB;
2026-03-25 17:30:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:30:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:30:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:30:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:31:19 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:24:28, To:, 2026-03-25 17:31:19, Duration (s):, 411, Events Per Second:, 8.614, Events:, 3543, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2969, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 573, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 391997
2026-03-25 17:31:20 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s160ms.
2026-03-25 17:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1332 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 508 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34858 KB;
2026-03-25 17:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1647 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 494 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; BaseEvent: 161 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 139 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35305 KB;
2026-03-25 17:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 463 KB; rules::ProcessConditionsCache: 400 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; BaseEvent: 280 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35931 KB;
2026-03-25 17:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2206 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 439 KB; TcpIpConnectionsManager: 430 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 351 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36376 KB;
2026-03-25 17:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2376 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 556 KB; BaseEvent: 524 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 362 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 138 KB; rules::ProcessConditionsCache: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36360 KB;
2026-03-25 17:35:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:35:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:35:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:35:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2473 KB; ModuleMetadata: 2064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; BaseEvent: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 297 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 232 KB; BatchSerializer::EventsQueueTag: 151 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36565 KB;
2026-03-25 17:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ProcessInfo: 2740 KB; ModuleMetadata: 2064 KB; BaseEvent: 704 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 280 KB; BatchSerializer::EventsQueueTag: 184 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36838 KB;
2026-03-25 17:37:37 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:31:20, To:, 2026-03-25 17:37:37, Duration (s):, 377, Events Per Second:, 10.732, Events:, 4055, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3348, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 447689
2026-03-25 17:37:39 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s377ms.
2026-03-25 17:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 312 KB; CacheEntry: 293 KB; cloudutils::CloudData: 143 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34603 KB;
2026-03-25 17:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1189 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 336 KB; CacheEntry: 293 KB; BaseEvent: 162 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34711 KB;
2026-03-25 17:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1220 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; TcpIpConnectionsManager: 233 KB; rules::ProcessConditionsCache: 185 KB; BaseEvent: 178 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34680 KB;
2026-03-25 17:40:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:40:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:40:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:40:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2064 KB; ProcessInfo: 1251 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 293 KB; rules::ProcessConditionsCache: 216 KB; BaseEvent: 191 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34679 KB;
2026-03-25 17:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 1276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 236 KB; BaseEvent: 204 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 107 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34691 KB;
2026-03-25 17:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 1316 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 271 KB; BaseEvent: 220 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 111 KB; BatchSerializer::EventsQueueTag: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34792 KB;
2026-03-25 17:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 1316 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 615 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 262 KB; BaseEvent: 220 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 98 KB; BatchSerializer::EventsQueueTag: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34809 KB;
2026-03-25 17:44:37 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:37:36, To:, 2026-03-25 17:44:37, Duration (s):, 421, Events Per Second:, 3.140, Events:, 1325, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1127, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 197, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 150466
2026-03-25 17:44:39 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s975ms.
2026-03-25 17:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 616 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 459 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 365 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33851 KB;
2026-03-25 17:45:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:45:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:45:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:45:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 721 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 294 KB; TcpIpConnectionsManager: 261 KB; BaseEvent: 147 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34325 KB;
2026-03-25 17:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 721 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; TcpIpConnectionsManager: 256 KB; rules::ProcessConditionsCache: 218 KB; BaseEvent: 152 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34200 KB;
2026-03-25 17:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 721 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 209 KB; BaseEvent: 152 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34148 KB;
2026-03-25 17:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 721 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 211 KB; BaseEvent: 154 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 107 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34048 KB;
2026-03-25 17:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 727 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 222 KB; BaseEvent: 157 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 59 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34021 KB;
2026-03-25 17:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:50:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; ProcessInfo: 727 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 222 KB; BaseEvent: 158 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 56 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34023 KB;
2026-03-25 17:51:37 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:44:41, To:, 2026-03-25 17:51:37, Duration (s):, 416, Events Per Second:, 2.367, Events:, 987, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 852, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 134, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 112335
2026-03-25 17:51:38 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s936ms.
2026-03-25 17:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 311 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 224 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33395 KB;
2026-03-25 17:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 323 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33424 KB;
2026-03-25 17:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 323 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33427 KB;
2026-03-25 17:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 324 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33420 KB;
2026-03-25 17:55:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 17:55:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 17:55:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 17:55:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 17:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 327 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33422 KB;
2026-03-25 17:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; ProcessInfo: 353 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33493 KB;
2026-03-25 17:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 377 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; rules::ProcessConditionsCache: 283 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33573 KB;
2026-03-25 17:58:37 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:51:39, To:, 2026-03-25 17:58:37, Duration (s):, 418, Events Per Second:, 0.647, Events:, 271, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33826
2026-03-25 17:58:38 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s687ms.
2026-03-25 17:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 17:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 17:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 417 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33678 KB;
2026-03-25 18:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2065 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 440 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33731 KB;
2026-03-25 18:00:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:00:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:00:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:00:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 522 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33886 KB;
2026-03-25 18:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 80 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33925 KB;
2026-03-25 18:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 547 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 67 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33919 KB;
2026-03-25 18:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:04:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33614 KB;
2026-03-25 18:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; ProcessInfo: 594 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 76 KB; BaseEvent: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33673 KB;
2026-03-25 18:05:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:05:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:05:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:05:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:05:37 7967594126c0 Info: Events Statistics, From:, 2026-03-25 17:58:34, To:, 2026-03-25 18:05:37, Duration (s):, 423, Events Per Second:, 1.441, Events:, 611, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 575, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 31, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 76105
2026-03-25 18:05:38 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s776ms.
2026-03-25 18:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 392 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33414 KB;
2026-03-25 18:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; ProcessInfo: 615 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; rules::ProcessConditionsCache: 310 KB; CacheEntry: 294 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 143 KB; BaseEvent: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34110 KB;
2026-03-25 18:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; ProcessInfo: 834 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; TcpIpConnectionsManager: 303 KB; CacheEntry: 294 KB; BaseEvent: 224 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 130 KB; BatchSerializer::EventsQueueTag: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34347 KB;
2026-03-25 18:09:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:09:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:09:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:09:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; TcpIpConnectionsManager: 266 KB; BaseEvent: 247 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34464 KB;
2026-03-25 18:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; ProcessInfo: 906 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; BaseEvent: 249 KB; rules::ProcessConditionsCache: 168 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34371 KB;
2026-03-25 18:10:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:10:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:10:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:10:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2067 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 367 KB; CacheEntry: 294 KB; BaseEvent: 257 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 100 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34351 KB;
2026-03-25 18:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2078 KB; ProcessInfo: 934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 369 KB; CacheEntry: 295 KB; BaseEvent: 256 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 82 KB; BatchSerializer::EventsQueueTag: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34353 KB;
2026-03-25 18:12:37 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:05:36, To:, 2026-03-25 18:12:37, Duration (s):, 421, Events Per Second:, 3.711, Events:, 1566, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1341, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 224, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 179939
2026-03-25 18:12:39 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s010ms.
2026-03-25 18:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2078 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 369 KB; ProcessInfo: 361 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33521 KB;
2026-03-25 18:14:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:14:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:14:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:14:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28724 KB; ModuleMetadata: 2078 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 411 KB; ModuleInfoCache: 369 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 249 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33629 KB;
2026-03-25 18:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 462 KB; ModuleInfoCache: 369 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 287 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 134 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33808 KB;
2026-03-25 18:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:15:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 515 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 144 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33985 KB;
2026-03-25 18:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 295 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34032 KB;
2026-03-25 18:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 608 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; cloudutils::CloudData: 144 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 125 KB; rules::ProcessConditionsCache: 38 KB; BatchSerializer::EventsQueueTag: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33801 KB;
2026-03-25 18:19:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:19:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:19:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:19:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 649 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 135 KB; rules::ProcessConditionsCache: 60 KB; BatchSerializer::EventsQueueTag: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33839 KB;
2026-03-25 18:19:38 7967594126c0 Info: Events Statistics, From:, 2026-03-25 15:39:57, To:, 2026-03-25 18:19:37, Duration (s):, 9580, Events Per Second:, 0.101, Events:, 969, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 841, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 118, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115294
2026-03-25 18:19:39 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s946ms.
2026-03-25 18:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 511 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33640 KB;
2026-03-25 18:20:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:20:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:20:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:20:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33860 KB;
2026-03-25 18:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 668 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 259 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33992 KB;
2026-03-25 18:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 697 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 288 KB; cloudutils::CloudData: 143 KB; BaseEvent: 101 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34031 KB;
2026-03-25 18:24:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:24:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:24:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:24:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 766 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 342 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; BaseEvent: 129 KB; TcpIpConnectionsManager: 128 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34211 KB;
2026-03-25 18:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 818 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::ProcessConditionsCache: 395 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; BaseEvent: 154 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34350 KB;
2026-03-25 18:25:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:25:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:25:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:25:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 987 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; BaseEvent: 239 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34481 KB;
2026-03-25 18:26:38 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:19:37, To:, 2026-03-25 18:26:38, Duration (s):, 421, Events Per Second:, 3.779, Events:, 1591, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1324, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 220, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 179187
2026-03-25 18:26:39 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s636ms.
2026-03-25 18:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 801 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 267 KB; cloudutils::CloudData: 143 KB; BaseEvent: 118 KB; rules::ProcessConditionsCache: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34115 KB;
2026-03-25 18:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 975 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 370 KB; TcpIpConnectionsManager: 325 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 291 KB; BaseEvent: 198 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34641 KB;
2026-03-25 18:29:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:29:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:29:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:29:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1144 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 370 KB; TcpIpConnectionsManager: 359 KB; CacheEntry: 295 KB; BaseEvent: 261 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34810 KB;
2026-03-25 18:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1343 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 370 KB; BaseEvent: 359 KB; TcpIpConnectionsManager: 331 KB; rules::ProcessConditionsCache: 302 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35238 KB;
2026-03-25 18:30:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:30:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:30:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:30:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 493 KB; ModuleInfoCache: 370 KB; TcpIpConnectionsManager: 367 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35545 KB;
2026-03-25 18:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1781 KB; BaseEvent: 574 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 379 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 324 KB; CacheEntry: 295 KB; BatchSerializer::EventsQueueTag: 155 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36014 KB;
2026-03-25 18:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1925 KB; BaseEvent: 643 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 370 KB; TcpIpConnectionsManager: 333 KB; CacheEntry: 295 KB; BatchSerializer::EventsQueueTag: 175 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35918 KB;
2026-03-25 18:33:38 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:26:33, To:, 2026-03-25 18:33:38, Duration (s):, 425, Events Per Second:, 8.853, Events:, 3763, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3156, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 606, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 416018
2026-03-25 18:33:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s433ms.
2026-03-25 18:34:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:34:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:34:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:34:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1075 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 345 KB; TcpIpConnectionsManager: 317 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; BaseEvent: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34684 KB;
2026-03-25 18:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1370 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 374 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 266 KB; BaseEvent: 260 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35165 KB;
2026-03-25 18:35:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:35:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:35:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:35:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1825 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; TcpIpConnectionsManager: 530 KB; BaseEvent: 449 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::ProcessConditionsCache: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35770 KB;
2026-03-25 18:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2113 KB; ModuleMetadata: 2078 KB; BaseEvent: 604 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 417 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; BatchSerializer::EventsQueueTag: 161 KB; cloudutils::CloudData: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36646 KB;
2026-03-25 18:38:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:33:39, To:, 2026-03-25 18:38:03, Duration (s):, 264, Events Per Second:, 15.649, Events:, 4137, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3451, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 685, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456050
2026-03-25 18:38:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s333ms.
2026-03-25 18:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1490 KB; TcpIpConnectionsManager: 595 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 21 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34982 KB;
2026-03-25 18:39:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:39:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:39:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:39:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1684 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 490 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 217 KB; BaseEvent: 151 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35383 KB;
2026-03-25 18:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 1887 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 399 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; BaseEvent: 252 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35454 KB;
2026-03-25 18:40:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:40:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:40:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:40:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 2004 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; BaseEvent: 295 KB; TcpIpConnectionsManager: 290 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35679 KB;
2026-03-25 18:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; ProcessInfo: 2032 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 370 KB; BaseEvent: 312 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 236 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 132 KB; BatchSerializer::EventsQueueTag: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35600 KB;
2026-03-25 18:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2081 KB; ModuleMetadata: 2078 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 370 KB; BaseEvent: 339 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35674 KB;
2026-03-25 18:44:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:44:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:44:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:44:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2081 KB; ModuleMetadata: 2078 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 370 KB; BaseEvent: 339 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 121 KB; BatchSerializer::EventsQueueTag: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35623 KB;
2026-03-25 18:45:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:38:02, To:, 2026-03-25 18:45:03, Duration (s):, 421, Events Per Second:, 4.754, Events:, 2004, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1705, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 298, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 224926
2026-03-25 18:45:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s089ms.
2026-03-25 18:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 370 KB; ProcessInfo: 327 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33382 KB;
2026-03-25 18:45:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:45:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:45:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:45:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 370 KB; ProcessInfo: 337 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33384 KB;
2026-03-25 18:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2078 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 411 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 95 KB; BaseEvent: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33598 KB;
2026-03-25 18:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 531 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 144 KB; cloudutils::CloudData: 143 KB; BaseEvent: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33978 KB;
2026-03-25 18:49:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:49:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:49:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:49:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 603 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 143 KB; BaseEvent: 126 KB; rules::ProcessConditionsCache: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33784 KB;
2026-03-25 18:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 608 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 143 KB; BaseEvent: 127 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33794 KB;
2026-03-25 18:50:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:50:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:50:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:50:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 633 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; BaseEvent: 140 KB; TcpIpConnectionsManager: 108 KB; rules::ProcessConditionsCache: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33826 KB;
2026-03-25 18:52:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:45:58, To:, 2026-03-25 18:52:03, Duration (s):, 365, Events Per Second:, 2.270, Events:, 830, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 698, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 129, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 94079
2026-03-25 18:52:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s287ms.
2026-03-25 18:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 370 KB; ProcessInfo: 340 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 90 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33313 KB;
2026-03-25 18:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 370 KB; ProcessInfo: 340 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 92 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33319 KB;
2026-03-25 18:54:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:54:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:54:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:54:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 370 KB; ProcessInfo: 352 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 95 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33315 KB;
2026-03-25 18:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 370 KB; ProcessInfo: 355 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 95 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33322 KB;
2026-03-25 18:55:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 18:55:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 18:55:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 18:55:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 18:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 370 KB; ProcessInfo: 356 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 99 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33355 KB;
2026-03-25 18:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 380 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 97 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33349 KB;
2026-03-25 18:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 450 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33561 KB;
2026-03-25 18:59:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:53:15, To:, 2026-03-25 18:59:03, Duration (s):, 348, Events Per Second:, 0.858, Events:, 299, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 276, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36604
2026-03-25 18:59:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:59:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 178, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 18:59:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:59:04 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 18:59:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s105ms.
2026-03-25 18:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 370 KB; ProcessInfo: 365 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 151 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33433 KB;
2026-03-25 19:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 400 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33486 KB;
2026-03-25 19:00:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:00:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:00:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:00:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 428 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 193 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33532 KB;
2026-03-25 19:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 480 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 241 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33687 KB;
2026-03-25 19:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 143 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33961 KB;
2026-03-25 19:04:04 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:04:04 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:04:04 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 577 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 295 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 143 KB; BaseEvent: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33940 KB;
2026-03-25 19:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 652 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 143 KB; BaseEvent: 112 KB; BatchSerializer::EventsQueueTag: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34117 KB;
2026-03-25 19:05:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:05:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:05:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:05:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:06:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 18:59:38, To:, 2026-03-25 19:06:03, Duration (s):, 385, Events Per Second:, 2.350, Events:, 906, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 800, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 105, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 104388
2026-03-25 19:06:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s915ms.
2026-03-25 19:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 519 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33592 KB;
2026-03-25 19:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 143 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33605 KB;
2026-03-25 19:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 123 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33576 KB;
2026-03-25 19:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 650 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33814 KB;
2026-03-25 19:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 729 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 370 KB; CacheEntry: 295 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 143 KB; TcpIpConnectionsManager: 116 KB; BaseEvent: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34014 KB;
2026-03-25 19:10:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:10:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:10:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:10:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2079 KB; ProcessInfo: 825 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 370 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 295 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 146 KB; cloudutils::CloudData: 143 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34312 KB;
2026-03-25 19:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 407 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 200 KB; BaseEvent: 193 KB; cloudutils::CloudData: 145 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34633 KB;
2026-03-25 19:13:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:06:02, To:, 2026-03-25 19:13:03, Duration (s):, 421, Events Per Second:, 3.899, Events:, 1644, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1415, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 228, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 185605
2026-03-25 19:13:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s932ms.
2026-03-25 19:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 672 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 191 KB; cloudutils::CloudData: 145 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33951 KB;
2026-03-25 19:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 772 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 145 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34225 KB;
2026-03-25 19:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 145 KB; BaseEvent: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34436 KB;
2026-03-25 19:15:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:15:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:15:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:15:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 145 KB; BaseEvent: 130 KB; rules::ProcessConditionsCache: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34246 KB;
2026-03-25 19:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 937 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 145 KB; BaseEvent: 134 KB; rules::ProcessConditionsCache: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34202 KB;
2026-03-25 19:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; rules::ProcessConditionsCache: 143 KB; TcpIpConnectionsManager: 136 KB; BaseEvent: 135 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34248 KB;
2026-03-25 19:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; ProcessInfo: 985 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; BaseEvent: 147 KB; cloudutils::CloudData: 145 KB; rules::ProcessConditionsCache: 121 KB; TcpIpConnectionsManager: 107 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34257 KB;
2026-03-25 19:20:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:13:04, To:, 2026-03-25 19:20:03, Duration (s):, 419, Events Per Second:, 2.180, Events:, 915, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 800, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 114, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 103768
2026-03-25 19:20:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s932ms.
2026-03-25 19:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 375 KB; ProcessInfo: 326 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; rules::ProcessConditionsCache: 121 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33411 KB;
2026-03-25 19:20:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:20:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:20:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:20:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 375 KB; ProcessInfo: 326 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; rules::ProcessConditionsCache: 119 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33407 KB;
2026-03-25 19:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 375 KB; ProcessInfo: 351 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 5 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33445 KB;
2026-03-25 19:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 375 KB; ProcessInfo: 356 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; rules::ProcessConditionsCache: 128 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33424 KB;
2026-03-25 19:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 403 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33637 KB;
2026-03-25 19:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 405 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 128 KB; rules::ProcessConditionsCache: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33529 KB;
2026-03-25 19:25:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:25:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:25:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:25:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2117 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 418 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33540 KB;
2026-03-25 19:27:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:20:13, To:, 2026-03-25 19:27:03, Duration (s):, 410, Events Per Second:, 0.636, Events:, 261, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 260, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32247
2026-03-25 19:27:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s638ms.
2026-03-25 19:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 375 KB; ProcessInfo: 358 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33467 KB;
2026-03-25 19:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 386 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33537 KB;
2026-03-25 19:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 386 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 152 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33499 KB;
2026-03-25 19:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 428 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33620 KB;
2026-03-25 19:30:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:30:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:30:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:30:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 445 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33633 KB;
2026-03-25 19:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 445 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 93 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33620 KB;
2026-03-25 19:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 450 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 82 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33622 KB;
2026-03-25 19:34:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:27:15, To:, 2026-03-25 19:34:03, Duration (s):, 408, Events Per Second:, 0.923, Events:, 377, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 353, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 45740
2026-03-25 19:34:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s795ms.
2026-03-25 19:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 375 KB; ProcessInfo: 309 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33432 KB;
2026-03-25 19:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 375 KB; ProcessInfo: 334 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33480 KB;
2026-03-25 19:35:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:35:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:35:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:35:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 375 KB; ProcessInfo: 334 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33477 KB;
2026-03-25 19:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 375 KB; ProcessInfo: 334 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33446 KB;
2026-03-25 19:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 384 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33583 KB;
2026-03-25 19:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 434 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 93 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33740 KB;
2026-03-25 19:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 475 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33798 KB;
2026-03-25 19:40:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:40:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:40:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:40:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:41:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:34:11, To:, 2026-03-25 19:41:03, Duration (s):, 412, Events Per Second:, 1.139, Events:, 470, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 421, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 48, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56763
2026-03-25 19:41:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s844ms.
2026-03-25 19:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 405 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 306 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33640 KB;
2026-03-25 19:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 405 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 306 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33622 KB;
2026-03-25 19:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 427 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33698 KB;
2026-03-25 19:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 428 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 306 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33669 KB;
2026-03-25 19:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 437 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33698 KB;
2026-03-25 19:45:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:45:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:45:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:45:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 440 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 310 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33681 KB;
2026-03-25 19:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 462 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33731 KB;
2026-03-25 19:48:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:42:50, To:, 2026-03-25 19:48:03, Duration (s):, 313, Events Per Second:, 0.577, Events:, 181, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 180, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23234
2026-03-25 19:48:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s626ms.
2026-03-25 19:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 321 KB; ProcessInfo: 317 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33556 KB;
2026-03-25 19:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 375 KB; ProcessInfo: 365 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 145 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33745 KB;
2026-03-25 19:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 375 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33668 KB;
2026-03-25 19:50:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:50:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:50:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:50:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 384 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33705 KB;
2026-03-25 19:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 430 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 365 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 145 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33833 KB;
2026-03-25 19:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 452 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33822 KB;
2026-03-25 19:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 452 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33777 KB;
2026-03-25 19:55:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:48:02, To:, 2026-03-25 19:55:03, Duration (s):, 421, Events Per Second:, 1.017, Events:, 429, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 428, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52160
2026-03-25 19:55:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s851ms.
2026-03-25 19:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 375 KB; ProcessInfo: 343 KB; rules::ProcessConditionsCache: 322 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33610 KB;
2026-03-25 19:55:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 19:55:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 19:55:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 19:55:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 19:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 375 KB; ProcessInfo: 353 KB; rules::ProcessConditionsCache: 317 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33604 KB;
2026-03-25 19:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 442 KB; rules::ProcessConditionsCache: 399 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33849 KB;
2026-03-25 19:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; ProcessInfo: 593 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 145 KB; BaseEvent: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33900 KB;
2026-03-25 19:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 19:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 19:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; ProcessInfo: 616 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 145 KB; BaseEvent: 125 KB; BatchSerializer::EventsQueueTag: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33946 KB;
2026-03-25 20:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 177 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 145 KB; BaseEvent: 130 KB; BatchSerializer::EventsQueueTag: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33954 KB;
2026-03-25 20:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:00:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 145 KB; BaseEvent: 130 KB; TcpIpConnectionsManager: 80 KB; BatchSerializer::EventsQueueTag: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33880 KB;
2026-03-25 20:02:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 19:55:02, To:, 2026-03-25 20:02:03, Duration (s):, 421, Events Per Second:, 1.997, Events:, 842, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 690, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 105, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 98123
2026-03-25 20:02:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s891ms.
2026-03-25 20:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33356 KB;
2026-03-25 20:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33356 KB;
2026-03-25 20:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33354 KB;
2026-03-25 20:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33354 KB;
2026-03-25 20:05:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:05:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:05:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:05:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33354 KB;
2026-03-25 20:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 375 KB; ProcessInfo: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33429 KB;
2026-03-25 20:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 375 KB; ProcessInfo: 326 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33433 KB;
2026-03-25 20:09:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:01:54, To:, 2026-03-25 20:09:03, Duration (s):, 429, Events Per Second:, 0.202, Events:, 87, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 85, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 1, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13165
2026-03-25 20:09:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s682ms.
2026-03-25 20:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; ProcessInfo: 351 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33469 KB;
2026-03-25 20:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 378 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33520 KB;
2026-03-25 20:10:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:10:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:10:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:10:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2120 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 378 KB; ModuleInfoCache: 375 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33522 KB;
2026-03-25 20:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 425 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33729 KB;
2026-03-25 20:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 450 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33700 KB;
2026-03-25 20:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ProcessInfo: 450 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33699 KB;
2026-03-25 20:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 456 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33701 KB;
2026-03-25 20:15:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:15:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:15:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:15:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:16:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:09:19, To:, 2026-03-25 20:16:03, Duration (s):, 404, Events Per Second:, 0.969, Events:, 392, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47748
2026-03-25 20:16:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s775ms.
2026-03-25 20:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; ProcessInfo: 282 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33422 KB;
2026-03-25 20:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; ProcessInfo: 283 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33435 KB;
2026-03-25 20:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; ProcessInfo: 284 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33442 KB;
2026-03-25 20:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 375 KB; ProcessInfo: 306 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33495 KB;
2026-03-25 20:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 375 KB; ProcessInfo: 312 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 254 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33504 KB;
2026-03-25 20:20:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:20:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:20:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:20:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 375 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 370 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33762 KB;
2026-03-25 20:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 375 KB; ProcessInfo: 374 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 274 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33638 KB;
2026-03-25 20:23:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:17:00, To:, 2026-03-25 20:23:03, Duration (s):, 363, Events Per Second:, 0.726, Events:, 264, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 263, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32128
2026-03-25 20:23:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s987ms.
2026-03-25 20:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 375 KB; ProcessInfo: 340 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33549 KB;
2026-03-25 20:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 375 KB; ProcessInfo: 352 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33561 KB;
2026-03-25 20:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 378 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 268 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33596 KB;
2026-03-25 20:25:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:25:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:25:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:25:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 378 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33598 KB;
2026-03-25 20:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 384 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33606 KB;
2026-03-25 20:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 418 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 331 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33704 KB;
2026-03-25 20:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 424 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 300 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33688 KB;
2026-03-25 20:30:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:23:29, To:, 2026-03-25 20:30:03, Duration (s):, 394, Events Per Second:, 0.821, Events:, 324, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 277, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37588
2026-03-25 20:30:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s554ms.
2026-03-25 20:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 375 KB; ProcessInfo: 343 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33611 KB;
2026-03-25 20:30:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:30:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:30:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:30:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 377 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33676 KB;
2026-03-25 20:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 380 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33640 KB;
2026-03-25 20:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 380 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33624 KB;
2026-03-25 20:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 402 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33698 KB;
2026-03-25 20:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; ProcessInfo: 599 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; TcpIpConnectionsManager: 159 KB; BaseEvent: 156 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 107 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33920 KB;
2026-03-25 20:35:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:35:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:35:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:35:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; ProcessInfo: 599 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; TcpIpConnectionsManager: 159 KB; BaseEvent: 155 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 107 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33923 KB;
2026-03-25 20:37:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:30:12, To:, 2026-03-25 20:37:03, Duration (s):, 411, Events Per Second:, 2.140, Events:, 881, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 644, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 72, Livegrid:, 72, OriginUrl:, 0, Alarms:, 92, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 96425
2026-03-25 20:37:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s822ms.
2026-03-25 20:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 505 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33590 KB;
2026-03-25 20:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33592 KB;
2026-03-25 20:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 116 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33668 KB;
2026-03-25 20:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 116 KB; TcpIpConnectionsManager: 84 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33676 KB;
2026-03-25 20:40:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:40:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:40:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:40:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33822 KB;
2026-03-25 20:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; ProcessInfo: 628 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 123 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33782 KB;
2026-03-25 20:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; ProcessInfo: 640 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 123 KB; TcpIpConnectionsManager: 118 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33829 KB;
2026-03-25 20:44:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:38:04, To:, 2026-03-25 20:44:03, Duration (s):, 359, Events Per Second:, 1.357, Events:, 488, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 365, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54823
2026-03-25 20:44:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s876ms.
2026-03-25 20:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 375 KB; ProcessInfo: 327 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 124 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33401 KB;
2026-03-25 20:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; ProcessInfo: 353 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33410 KB;
2026-03-25 20:45:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:45:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:45:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:45:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 375 KB; ProcessInfo: 361 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33418 KB;
2026-03-25 20:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 375 KB; ProcessInfo: 365 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33421 KB;
2026-03-25 20:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 375 KB; ProcessInfo: 365 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33400 KB;
2026-03-25 20:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ProcessInfo: 389 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33443 KB;
2026-03-25 20:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 489 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 146 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33781 KB;
2026-03-25 20:50:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:50:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:50:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:50:36 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:51:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:44:25, To:, 2026-03-25 20:51:03, Duration (s):, 398, Events Per Second:, 1.111, Events:, 443, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 417, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52401
2026-03-25 20:51:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s842ms.
2026-03-25 20:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 411 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 202 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 146 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33604 KB;
2026-03-25 20:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 411 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33562 KB;
2026-03-25 20:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 417 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33535 KB;
2026-03-25 20:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 439 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33561 KB;
2026-03-25 20:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 443 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33587 KB;
2026-03-25 20:55:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 20:55:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 20:55:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 20:55:36 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 20:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 456 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33595 KB;
2026-03-25 20:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 468 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33583 KB;
2026-03-25 20:58:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:50:57, To:, 2026-03-25 20:58:03, Duration (s):, 426, Events Per Second:, 0.441, Events:, 188, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 187, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23677
2026-03-25 20:58:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s623ms.
2026-03-25 20:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33386 KB;
2026-03-25 20:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 20:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 20:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; ProcessInfo: 301 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33379 KB;
2026-03-25 21:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 375 KB; ProcessInfo: 315 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33409 KB;
2026-03-25 21:00:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:00:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:00:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:00:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 375 KB; ProcessInfo: 362 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33486 KB;
2026-03-25 21:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; ProcessInfo: 362 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33491 KB;
2026-03-25 21:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 375 KB; ProcessInfo: 362 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33495 KB;
2026-03-25 21:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 375 KB; ProcessInfo: 367 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33505 KB;
2026-03-25 21:05:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 20:58:29, To:, 2026-03-25 21:05:03, Duration (s):, 394, Events Per Second:, 0.537, Events:, 212, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 203, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26192
2026-03-25 21:05:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s557ms.
2026-03-25 21:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; ProcessInfo: 290 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33407 KB;
2026-03-25 21:05:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:05:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:05:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:05:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; ProcessInfo: 292 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33413 KB;
2026-03-25 21:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 375 KB; ProcessInfo: 314 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33440 KB;
2026-03-25 21:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 375 KB; ProcessInfo: 314 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33434 KB;
2026-03-25 21:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 375 KB; ProcessInfo: 317 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33444 KB;
2026-03-25 21:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 384 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33556 KB;
2026-03-25 21:10:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:10:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:10:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:10:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2123 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 456 KB; ModuleInfoCache: 375 KB; CacheEntry: 301 KB; rules::ProcessConditionsCache: 282 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33762 KB;
2026-03-25 21:12:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:05:58, To:, 2026-03-25 21:12:03, Duration (s):, 365, Events Per Second:, 1.304, Events:, 477, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 453, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 21, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 58529
2026-03-25 21:12:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s577ms.
2026-03-25 21:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 431 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 282 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33689 KB;
2026-03-25 21:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 453 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 282 KB; TcpIpConnectionsManager: 146 KB; cloudutils::CloudData: 145 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33728 KB;
2026-03-25 21:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 455 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33705 KB;
2026-03-25 21:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 458 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 280 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33679 KB;
2026-03-25 21:15:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:15:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:15:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:15:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 464 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33677 KB;
2026-03-25 21:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 481 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 282 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33693 KB;
2026-03-25 21:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 506 KB; ModuleInfoCache: 375 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 302 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33792 KB;
2026-03-25 21:19:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:12:03, To:, 2026-03-25 21:19:03, Duration (s):, 420, Events Per Second:, 0.528, Events:, 222, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 219, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 28622
2026-03-25 21:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:19:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s328ms.
2026-03-25 21:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 375 KB; ProcessInfo: 323 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 282 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33530 KB;
2026-03-25 21:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 375 KB; ProcessInfo: 329 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33526 KB;
2026-03-25 21:20:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:20:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:20:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:20:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 375 KB; ProcessInfo: 329 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33516 KB;
2026-03-25 21:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 375 KB; ProcessInfo: 329 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33505 KB;
2026-03-25 21:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 375 KB; ProcessInfo: 330 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 145 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33524 KB;
2026-03-25 21:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 375 KB; ProcessInfo: 345 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33583 KB;
2026-03-25 21:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 375 KB; ProcessInfo: 348 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33590 KB;
2026-03-25 21:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:26:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:19:25, To:, 2026-03-25 21:26:03, Duration (s):, 398, Events Per Second:, 0.278, Events:, 111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 64, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14039
2026-03-25 21:26:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s689ms.
2026-03-25 21:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33513 KB;
2026-03-25 21:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33504 KB;
2026-03-25 21:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33508 KB;
2026-03-25 21:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::ProcessConditionsCache: 418 KB; ProcessInfo: 402 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33854 KB;
2026-03-25 21:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 437 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 139 KB; BaseEvent: 53 KB; rules::ProcessConditionsCache: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33518 KB;
2026-03-25 21:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 484 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 146 KB; rules::ProcessConditionsCache: 120 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33715 KB;
2026-03-25 21:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 484 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 144 KB; BaseEvent: 64 KB; rules::ProcessConditionsCache: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33595 KB;
2026-03-25 21:33:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:26:14, To:, 2026-03-25 21:33:03, Duration (s):, 409, Events Per Second:, 1.247, Events:, 511, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 469, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 41, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60286
2026-03-25 21:33:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s938ms.
2026-03-25 21:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 375 KB; ProcessInfo: 340 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33326 KB;
2026-03-25 21:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 375 KB; ProcessInfo: 367 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33393 KB;
2026-03-25 21:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 375 KB; ProcessInfo: 370 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33370 KB;
2026-03-25 21:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 390 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33411 KB;
2026-03-25 21:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ProcessInfo: 412 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33436 KB;
2026-03-25 21:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 425 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 115 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33477 KB;
2026-03-25 21:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 475 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33573 KB;
2026-03-25 21:40:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:33:11, To:, 2026-03-25 21:40:03, Duration (s):, 412, Events Per Second:, 0.925, Events:, 382, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46842
2026-03-25 21:40:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s875ms.
2026-03-25 21:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 402 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33579 KB;
2026-03-25 21:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 402 KB; ModuleInfoCache: 375 KB; CacheEntry: 302 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33448 KB;
2026-03-25 21:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 428 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33531 KB;
2026-03-25 21:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 428 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 125 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33509 KB;
2026-03-25 21:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 428 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33479 KB;
2026-03-25 21:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 449 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 82 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33518 KB;
2026-03-25 21:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 472 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 98 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33550 KB;
2026-03-25 21:47:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:40:03, To:, 2026-03-25 21:47:03, Duration (s):, 420, Events Per Second:, 0.872, Events:, 367, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 366, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44476
2026-03-25 21:47:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s859ms.
2026-03-25 21:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 376 KB; ProcessInfo: 346 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33395 KB;
2026-03-25 21:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 376 KB; ProcessInfo: 364 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33400 KB;
2026-03-25 21:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 376 KB; ProcessInfo: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 125 KB; rules::ProcessConditionsCache: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33474 KB;
2026-03-25 21:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ProcessInfo: 403 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 118 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33456 KB;
2026-03-25 21:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 430 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33532 KB;
2026-03-25 21:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 450 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33551 KB;
2026-03-25 21:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 472 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33651 KB;
2026-03-25 21:54:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:47:07, To:, 2026-03-25 21:54:03, Duration (s):, 416, Events Per Second:, 0.883, Events:, 368, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 367, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 44288
2026-03-25 21:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:54:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s841ms.
2026-03-25 21:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 376 KB; ProcessInfo: 349 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33438 KB;
2026-03-25 21:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 376 KB; ProcessInfo: 353 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33408 KB;
2026-03-25 21:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 21:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 21:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 21:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 21:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 376 KB; ProcessInfo: 358 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 87 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33384 KB;
2026-03-25 21:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 376 KB; ProcessInfo: 373 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 84 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33389 KB;
2026-03-25 21:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 378 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 84 KB; rules::ProcessConditionsCache: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33400 KB;
2026-03-25 21:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 21:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 21:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 424 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 128 KB; rules::ProcessConditionsCache: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33538 KB;
2026-03-25 22:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 459 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 97 KB; BaseEvent: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33583 KB;
2026-03-25 22:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:01:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 21:54:04, To:, 2026-03-25 22:01:03, Duration (s):, 419, Events Per Second:, 0.819, Events:, 344, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 338, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 3, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42724
2026-03-25 22:01:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s106ms.
2026-03-25 22:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 376 KB; ProcessInfo: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33479 KB;
2026-03-25 22:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 400 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33497 KB;
2026-03-25 22:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ProcessInfo: 415 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 116 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33512 KB;
2026-03-25 22:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 415 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33482 KB;
2026-03-25 22:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 468 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 149 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 97 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33618 KB;
2026-03-25 22:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ProcessInfo: 471 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 149 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 88 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33619 KB;
2026-03-25 22:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ProcessInfo: 472 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33614 KB;
2026-03-25 22:08:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:01:17, To:, 2026-03-25 22:08:03, Duration (s):, 406, Events Per Second:, 0.732, Events:, 298, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 273, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36595
2026-03-25 22:08:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s696ms.
2026-03-25 22:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; ProcessInfo: 280 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33327 KB;
2026-03-25 22:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; ProcessInfo: 295 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33413 KB;
2026-03-25 22:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 376 KB; ProcessInfo: 353 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33481 KB;
2026-03-25 22:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 376 KB; ProcessInfo: 355 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33504 KB;
2026-03-25 22:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 376 KB; ProcessInfo: 355 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33494 KB;
2026-03-25 22:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 376 KB; ProcessInfo: 368 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33512 KB;
2026-03-25 22:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 376 KB; ProcessInfo: 368 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33525 KB;
2026-03-25 22:15:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:08:28, To:, 2026-03-25 22:15:03, Duration (s):, 395, Events Per Second:, 0.763, Events:, 302, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 301, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38092
2026-03-25 22:15:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s758ms.
2026-03-25 22:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 376 KB; ProcessInfo: 314 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33411 KB;
2026-03-25 22:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 376 KB; ProcessInfo: 318 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33433 KB;
2026-03-25 22:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 376 KB; ProcessInfo: 364 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33516 KB;
2026-03-25 22:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 376 KB; ProcessInfo: 374 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33510 KB;
2026-03-25 22:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 376 KB; ProcessInfo: 374 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33514 KB;
2026-03-25 22:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 392 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33520 KB;
2026-03-25 22:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:20:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ProcessInfo: 414 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33563 KB;
2026-03-25 22:22:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:15:33, To:, 2026-03-25 22:22:03, Duration (s):, 390, Events Per Second:, 0.709, Events:, 277, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 274, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33643
2026-03-25 22:22:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s710ms.
2026-03-25 22:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2126 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 376 KB; ProcessInfo: 318 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33423 KB;
2026-03-25 22:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2128 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 376 KB; ProcessInfo: 318 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33436 KB;
2026-03-25 22:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2128 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 376 KB; ProcessInfo: 318 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33436 KB;
2026-03-25 22:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2128 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 376 KB; ProcessInfo: 320 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33439 KB;
2026-03-25 22:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:25:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2128 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 376 KB; ProcessInfo: 323 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33449 KB;
2026-03-25 22:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 376 KB; ProcessInfo: 323 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33444 KB;
2026-03-25 22:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 376 KB; ProcessInfo: 323 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33449 KB;
2026-03-25 22:29:03 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:22:05, To:, 2026-03-25 22:29:03, Duration (s):, 418, Events Per Second:, 0.041, Events:, 17, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 14, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 3680
2026-03-25 22:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:29:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s197ms.
2026-03-25 22:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; ProcessInfo: 279 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33410 KB;
2026-03-25 22:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 376 KB; ProcessInfo: 355 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33645 KB;
2026-03-25 22:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:30:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 376 KB; ProcessInfo: 358 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33550 KB;
2026-03-25 22:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 405 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 275 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33742 KB;
2026-03-25 22:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ProcessInfo: 477 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 147 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33897 KB;
2026-03-25 22:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 302 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 147 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34012 KB;
2026-03-25 22:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 260 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 147 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33940 KB;
2026-03-25 22:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:35:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:36:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:28:57, To:, 2026-03-25 22:36:03, Duration (s):, 426, Events Per Second:, 1.639, Events:, 700, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 677, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 81344
2026-03-25 22:36:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s701ms.
2026-03-25 22:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 393 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33646 KB;
2026-03-25 22:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 417 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 5 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33637 KB;
2026-03-25 22:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 462 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 292 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33749 KB;
2026-03-25 22:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ProcessInfo: 505 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33771 KB;
2026-03-25 22:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ProcessInfo: 511 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 259 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33769 KB;
2026-03-25 22:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:40:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 262 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33813 KB;
2026-03-25 22:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 259 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 85 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33795 KB;
2026-03-25 22:43:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:36:06, To:, 2026-03-25 22:43:04, Duration (s):, 418, Events Per Second:, 1.110, Events:, 464, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 451, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56455
2026-03-25 22:43:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s890ms.
2026-03-25 22:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 376 KB; ProcessInfo: 334 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 288 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33563 KB;
2026-03-25 22:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 376 KB; ProcessInfo: 358 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33611 KB;
2026-03-25 22:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 376 KB; ProcessInfo: 361 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33618 KB;
2026-03-25 22:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:45:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 376 KB; ProcessInfo: 373 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33630 KB;
2026-03-25 22:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2129 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ProcessInfo: 383 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33632 KB;
2026-03-25 22:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 384 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33638 KB;
2026-03-25 22:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 384 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33628 KB;
2026-03-25 22:50:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:43:44, To:, 2026-03-25 22:50:04, Duration (s):, 380, Events Per Second:, 0.405, Events:, 154, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 139, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 20870
2026-03-25 22:50:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s296ms.
2026-03-25 22:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 302 KB; ProcessInfo: 290 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33514 KB;
2026-03-25 22:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:50:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 302 KB; ProcessInfo: 290 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33514 KB;
2026-03-25 22:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 302 KB; ProcessInfo: 290 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33517 KB;
2026-03-25 22:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 302 KB; ProcessInfo: 296 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33556 KB;
2026-03-25 22:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 302 KB; ProcessInfo: 298 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33547 KB;
2026-03-25 22:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 376 KB; rules::ProcessConditionsCache: 347 KB; ProcessInfo: 345 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33666 KB;
2026-03-25 22:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 22:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 22:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 22:55:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 22:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 376 KB; ProcessInfo: 376 KB; rules::ProcessConditionsCache: 354 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33736 KB;
2026-03-25 22:57:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:50:58, To:, 2026-03-25 22:57:04, Duration (s):, 366, Events Per Second:, 2.259, Events:, 827, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 709, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 115, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 95190
2026-03-25 22:57:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s532ms.
2026-03-25 22:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; TcpIpConnectionsManager: 216 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33823 KB;
2026-03-25 22:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 194 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33787 KB;
2026-03-25 22:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 22:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 22:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; ProcessInfo: 575 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 192 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33763 KB;
2026-03-25 23:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33711 KB;
2026-03-25 23:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:00:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33719 KB;
2026-03-25 23:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33717 KB;
2026-03-25 23:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; ProcessInfo: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33897 KB;
2026-03-25 23:04:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 22:58:37, To:, 2026-03-25 23:04:04, Duration (s):, 327, Events Per Second:, 0.703, Events:, 230, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 218, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29957
2026-03-25 23:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:04:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s038ms.
2026-03-25 23:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 376 KB; ProcessInfo: 349 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33553 KB;
2026-03-25 23:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2131 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 377 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 268 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33631 KB;
2026-03-25 23:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:05:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 378 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33616 KB;
2026-03-25 23:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ProcessInfo: 380 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33576 KB;
2026-03-25 23:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ProcessInfo: 380 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33563 KB;
2026-03-25 23:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 423 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33634 KB;
2026-03-25 23:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ProcessInfo: 428 KB; ModuleInfoCache: 376 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 277 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33648 KB;
2026-03-25 23:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:10:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:11:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:04:14, To:, 2026-03-25 23:11:04, Duration (s):, 410, Events Per Second:, 0.524, Events:, 215, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 202, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27902
2026-03-25 23:11:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s792ms.
2026-03-25 23:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 377 KB; ProcessInfo: 324 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33514 KB;
2026-03-25 23:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 377 KB; ProcessInfo: 326 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 280 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33522 KB;
2026-03-25 23:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 377 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33663 KB;
2026-03-25 23:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 383 KB; ModuleInfoCache: 377 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33676 KB;
2026-03-25 23:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 387 KB; ModuleInfoCache: 377 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 283 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33679 KB;
2026-03-25 23:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:15:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 132 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ExtendedTcpIpConnectionInfo: 18 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 10 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33903 KB;
2026-03-25 23:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 447 KB; ModuleInfoCache: 377 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 296 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 14 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33819 KB;
2026-03-25 23:18:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:11:21, To:, 2026-03-25 23:18:04, Duration (s):, 403, Events Per Second:, 0.841, Events:, 339, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 332, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 40231
2026-03-25 23:18:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s708ms.
2026-03-25 23:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 377 KB; ProcessInfo: 337 KB; CacheEntry: 302 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; ExtendedTcpIpConnectionInfo: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33663 KB;
2026-03-25 23:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 384 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 324 KB; CacheEntry: 302 KB; TcpIpConnectionsManager: 163 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; ExtendedTcpIpConnectionInfo: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33818 KB;
2026-03-25 23:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 396 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 302 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 124 KB; ExtendedTcpIpConnectionInfo: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33848 KB;
2026-03-25 23:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 398 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 320 KB; CacheEntry: 302 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 122 KB; ExtendedTcpIpConnectionInfo: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33829 KB;
2026-03-25 23:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 412 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 302 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; ExtendedTcpIpConnectionInfo: 42 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33869 KB;
2026-03-25 23:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2134 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 434 KB; rules::ProcessConditionsCache: 382 KB; ModuleInfoCache: 377 KB; CacheEntry: 302 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; ExtendedTcpIpConnectionInfo: 42 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33954 KB;
2026-03-25 23:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2135 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1314 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 304 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 128 KB; BaseEvent: 51 KB; ExtendedTcpIpConnectionInfo: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34691 KB;
2026-03-25 23:25:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:18:35, To:, 2026-03-25 23:25:04, Duration (s):, 389, Events Per Second:, 0.899, Events:, 350, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 315, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 27, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42375
2026-03-25 23:25:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s907ms.
2026-03-25 23:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2135 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1315 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 345 KB; ProcessInfo: 339 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 125 KB; ExtendedTcpIpConnectionInfo: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34496 KB;
2026-03-25 23:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2135 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1317 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 347 KB; ProcessInfo: 339 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ExtendedTcpIpConnectionInfo: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34490 KB;
2026-03-25 23:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2137 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1303 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 345 KB; ProcessInfo: 339 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; ExtendedTcpIpConnectionInfo: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34446 KB;
2026-03-25 23:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2137 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1342 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 345 KB; ProcessInfo: 339 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; ExtendedTcpIpConnectionInfo: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34484 KB;
2026-03-25 23:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2137 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1343 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 345 KB; ProcessInfo: 339 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; ExtendedTcpIpConnectionInfo: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34491 KB;
2026-03-25 23:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2137 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1345 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 380 KB; ModuleInfoCache: 377 KB; ProcessInfo: 371 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; ExtendedTcpIpConnectionInfo: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34596 KB;
2026-03-25 23:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1349 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 413 KB; ProcessInfo: 403 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; ExtendedTcpIpConnectionInfo: 42 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34698 KB;
2026-03-25 23:32:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:25:14, To:, 2026-03-25 23:32:04, Duration (s):, 410, Events Per Second:, 0.422, Events:, 173, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 146, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 22290
2026-03-25 23:32:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s107ms.
2026-03-25 23:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1350 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 413 KB; ModuleInfoCache: 377 KB; ProcessInfo: 340 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; ExtendedTcpIpConnectionInfo: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34601 KB;
2026-03-25 23:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1257 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 413 KB; ModuleInfoCache: 377 KB; ProcessInfo: 343 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; ExtendedTcpIpConnectionInfo: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34501 KB;
2026-03-25 23:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 377 KB; ProcessInfo: 365 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; ExtendedTcpIpConnectionInfo: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33422 KB;
2026-03-25 23:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 377 KB; ProcessInfo: 368 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; ExtendedTcpIpConnectionInfo: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33411 KB;
2026-03-25 23:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 377 KB; ProcessInfo: 371 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33348 KB;
2026-03-25 23:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 377 KB; ProcessInfo: 371 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33314 KB;
2026-03-25 23:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 377 KB; ProcessInfo: 373 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33319 KB;
2026-03-25 23:39:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:32:19, To:, 2026-03-25 23:39:04, Duration (s):, 405, Events Per Second:, 0.528, Events:, 214, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 27340
2026-03-25 23:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:39:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s727ms.
2026-03-25 23:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 377 KB; ProcessInfo: 342 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 96 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33377 KB;
2026-03-25 23:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 377 KB; ProcessInfo: 351 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33354 KB;
2026-03-25 23:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:40:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 377 KB; ProcessInfo: 352 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 84 KB; rules::ProcessConditionsCache: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33346 KB;
2026-03-25 23:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2139 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 377 KB; ProcessInfo: 352 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 79 KB; rules::ProcessConditionsCache: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33347 KB;
2026-03-25 23:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 377 KB; ProcessInfo: 352 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; rules::ProcessConditionsCache: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BaseEvent: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33334 KB;
2026-03-25 23:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 380 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33421 KB;
2026-03-25 23:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ProcessInfo: 383 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33432 KB;
2026-03-25 23:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:45:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:46:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:39:10, To:, 2026-03-25 23:46:04, Duration (s):, 414, Events Per Second:, 0.420, Events:, 174, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 159, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 23029
2026-03-25 23:46:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s722ms.
2026-03-25 23:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 377 KB; ProcessInfo: 305 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33318 KB;
2026-03-25 23:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 377 KB; ProcessInfo: 305 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 80 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33294 KB;
2026-03-25 23:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 377 KB; ProcessInfo: 331 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 109 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33375 KB;
2026-03-25 23:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 377 KB; ProcessInfo: 355 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33456 KB;
2026-03-25 23:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 377 KB; ProcessInfo: 359 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33470 KB;
2026-03-25 23:50:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:50:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:50:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:50:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 383 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 142 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33521 KB;
2026-03-25 23:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 383 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 137 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33531 KB;
2026-03-25 23:53:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:47:52, To:, 2026-03-25 23:53:04, Duration (s):, 312, Events Per Second:, 0.689, Events:, 215, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 191, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 21, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26785
2026-03-25 23:53:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s734ms.
2026-03-25 23:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 377 KB; ProcessInfo: 308 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 142 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33413 KB;
2026-03-25 23:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 377 KB; ProcessInfo: 311 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33419 KB;
2026-03-25 23:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 377 KB; ProcessInfo: 312 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33421 KB;
2026-03-25 23:55:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-25 23:55:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-25 23:55:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-25 23:55:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-25 23:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2140 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 377 KB; ProcessInfo: 326 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33420 KB;
2026-03-25 23:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 377 KB; ProcessInfo: 352 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33486 KB;
2026-03-25 23:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 377 KB; ProcessInfo: 352 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 166 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33492 KB;
2026-03-25 23:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-25 23:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-25 23:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 377 KB; ProcessInfo: 365 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33528 KB;