Version: 2.8.5555 (Oct 13 2025 18:38:28)
Compiled with: Clang Version: 18.1.3
Npm: 10.8.2
HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB
TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553
2026-03-26 00:00:04 7967594126c0 Info: Events Statistics, From:, 2026-03-25 23:52:59, To:, 2026-03-26 00:00:04, Duration (s):, 425, Events Per Second:, 0.877, Events:, 373, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 326, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46458
2026-03-26 00:00:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s458ms.
2026-03-26 00:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 389 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33666 KB;
2026-03-26 00:00:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:00:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:00:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:00:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 450 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 304 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33833 KB;
2026-03-26 00:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 474 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33830 KB;
2026-03-26 00:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ProcessInfo: 474 KB; ModuleInfoCache: 377 KB; CacheEntry: 304 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33771 KB;
2026-03-26 00:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 344 KB; CacheEntry: 304 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 148 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33988 KB;
2026-03-26 00:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 317 KB; CacheEntry: 304 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33927 KB;
2026-03-26 00:05:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:05:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:05:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:05:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 324 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33952 KB;
2026-03-26 00:07:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:00:04, To:, 2026-03-26 00:07:04, Duration (s):, 420, Events Per Second:, 1.356, Events:, 570, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 473, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 36, Livegrid:, 36, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 64786
2026-03-26 00:07:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s952ms.
2026-03-26 00:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 325 KB; ProcessInfo: 308 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33559 KB;
2026-03-26 00:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 325 KB; ProcessInfo: 308 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33545 KB;
2026-03-26 00:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 325 KB; ProcessInfo: 308 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33544 KB;
2026-03-26 00:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 377 KB; rules::ProcessConditionsCache: 325 KB; ProcessInfo: 308 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33544 KB;
2026-03-26 00:10:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:10:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:10:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:10:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 378 KB; ModuleInfoCache: 377 KB; ProcessInfo: 337 KB; CacheEntry: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33639 KB;
2026-03-26 00:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ProcessInfo: 437 KB; ModuleInfoCache: 378 KB; rules::ProcessConditionsCache: 372 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33821 KB;
2026-03-26 00:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ProcessInfo: 467 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 29 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33549 KB;
2026-03-26 00:14:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:05:44, To:, 2026-03-26 00:14:04, Duration (s):, 500, Events Per Second:, 0.827, Events:, 414, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 413, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51120
2026-03-26 00:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:14:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s854ms.
2026-03-26 00:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 433 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33473 KB;
2026-03-26 00:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ProcessInfo: 470 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 113 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33520 KB;
2026-03-26 00:15:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:15:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:15:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:15:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 470 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33533 KB;
2026-03-26 00:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 471 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 75 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33520 KB;
2026-03-26 00:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 541 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33806 KB;
2026-03-26 00:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 541 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 117 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33738 KB;
2026-03-26 00:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 550 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33710 KB;
2026-03-26 00:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:20:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:21:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:14:10, To:, 2026-03-26 00:21:04, Duration (s):, 414, Events Per Second:, 1.330, Events:, 551, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 433, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 53, Livegrid:, 53, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 64311
2026-03-26 00:21:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s844ms.
2026-03-26 00:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 409 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33517 KB;
2026-03-26 00:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 412 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 111 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33490 KB;
2026-03-26 00:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 436 KB; ModuleInfoCache: 378 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33606 KB;
2026-03-26 00:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 436 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 111 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33527 KB;
2026-03-26 00:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 439 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33535 KB;
2026-03-26 00:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:25:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 440 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 141 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33568 KB;
2026-03-26 00:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 486 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33763 KB;
2026-03-26 00:28:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:21:06, To:, 2026-03-26 00:28:04, Duration (s):, 418, Events Per Second:, 0.466, Events:, 195, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 186, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26376
2026-03-26 00:28:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s570ms.
2026-03-26 00:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 379 KB; ProcessInfo: 327 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33464 KB;
2026-03-26 00:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 379 KB; ProcessInfo: 345 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 5 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33513 KB;
2026-03-26 00:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 379 KB; ProcessInfo: 358 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33547 KB;
2026-03-26 00:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:30:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 380 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33563 KB;
2026-03-26 00:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 405 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33663 KB;
2026-03-26 00:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 406 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 93 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33661 KB;
2026-03-26 00:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 475 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33900 KB;
2026-03-26 00:35:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:28:03, To:, 2026-03-26 00:35:04, Duration (s):, 421, Events Per Second:, 1.652, Events:, 696, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 467, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 97, Livegrid:, 97, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 77514
2026-03-26 00:35:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s896ms.
2026-03-26 00:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 384 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33630 KB;
2026-03-26 00:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:35:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 434 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 287 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33781 KB;
2026-03-26 00:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 437 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 287 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33762 KB;
2026-03-26 00:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 487 KB; rules::ProcessConditionsCache: 392 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33952 KB;
2026-03-26 00:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 489 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33824 KB;
2026-03-26 00:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 536 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33950 KB;
2026-03-26 00:40:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:40:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:40:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:40:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; ProcessInfo: 593 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; TcpIpConnectionsManager: 151 KB; cloudutils::CloudData: 148 KB; BaseEvent: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34195 KB;
2026-03-26 00:42:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:35:04, To:, 2026-03-26 00:42:04, Duration (s):, 420, Events Per Second:, 1.594, Events:, 670, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 524, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 77091
2026-03-26 00:42:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s221ms.
2026-03-26 00:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 421 KB; ModuleInfoCache: 379 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33799 KB;
2026-03-26 00:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 421 KB; ModuleInfoCache: 379 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33776 KB;
2026-03-26 00:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 423 KB; ModuleInfoCache: 379 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33812 KB;
2026-03-26 00:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 379 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33871 KB;
2026-03-26 00:45:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:45:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:45:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:45:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 461 KB; ModuleInfoCache: 379 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33876 KB;
2026-03-26 00:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 379 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33878 KB;
2026-03-26 00:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; ProcessInfo: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 84 KB; rules::ProcessConditionsCache: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33767 KB;
2026-03-26 00:49:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:42:03, To:, 2026-03-26 00:49:04, Duration (s):, 421, Events Per Second:, 1.129, Events:, 476, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 407, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 68, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57110
2026-03-26 00:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:49:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s837ms.
2026-03-26 00:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 395 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 115 KB; rules::ProcessConditionsCache: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33475 KB;
2026-03-26 00:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 402 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 118 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33500 KB;
2026-03-26 00:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:50:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 425 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 101 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33520 KB;
2026-03-26 00:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 425 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 84 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33466 KB;
2026-03-26 00:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 449 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33534 KB;
2026-03-26 00:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 449 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 92 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33512 KB;
2026-03-26 00:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 452 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 80 KB; rules::ProcessConditionsCache: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33511 KB;
2026-03-26 00:55:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 00:55:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 00:55:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 00:55:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 00:56:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:49:03, To:, 2026-03-26 00:56:04, Duration (s):, 421, Events Per Second:, 0.458, Events:, 193, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 192, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24907
2026-03-26 00:56:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s182ms.
2026-03-26 00:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 379 KB; ProcessInfo: 306 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 76 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33327 KB;
2026-03-26 00:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 379 KB; ProcessInfo: 330 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33419 KB;
2026-03-26 00:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 379 KB; ProcessInfo: 330 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33421 KB;
2026-03-26 00:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 00:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 00:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 379 KB; ProcessInfo: 330 KB; CacheEntry: 305 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 102 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33422 KB;
2026-03-26 01:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 379 KB; ProcessInfo: 343 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 113 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33447 KB;
2026-03-26 01:00:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:00:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:00:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:00:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 379 KB; ProcessInfo: 349 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33466 KB;
2026-03-26 01:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 379 KB; ProcessInfo: 371 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33556 KB;
2026-03-26 01:03:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 00:57:14, To:, 2026-03-26 01:03:04, Duration (s):, 350, Events Per Second:, 0.699, Events:, 245, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 214, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30984
2026-03-26 01:03:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s693ms.
2026-03-26 01:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 379 KB; ProcessInfo: 331 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 142 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33436 KB;
2026-03-26 01:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 379 KB; ProcessInfo: 333 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 142 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33442 KB;
2026-03-26 01:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 379 KB; ProcessInfo: 339 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 142 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33443 KB;
2026-03-26 01:05:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:05:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:05:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:05:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 379 KB; ProcessInfo: 339 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33420 KB;
2026-03-26 01:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 379 KB; ProcessInfo: 340 KB; CacheEntry: 305 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33427 KB;
2026-03-26 01:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 386 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33584 KB;
2026-03-26 01:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 430 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33602 KB;
2026-03-26 01:10:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:03:46, To:, 2026-03-26 01:10:04, Duration (s):, 378, Events Per Second:, 0.729, Events:, 276, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 275, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34801
2026-03-26 01:10:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s209ms.
2026-03-26 01:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 379 KB; ProcessInfo: 378 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33539 KB;
2026-03-26 01:10:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:10:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:10:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:10:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2142 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 403 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33568 KB;
2026-03-26 01:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 408 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33566 KB;
2026-03-26 01:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 408 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33571 KB;
2026-03-26 01:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 408 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33565 KB;
2026-03-26 01:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 412 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33573 KB;
2026-03-26 01:15:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:15:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:15:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:15:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 412 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33576 KB;
2026-03-26 01:17:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:10:03, To:, 2026-03-26 01:17:04, Duration (s):, 421, Events Per Second:, 0.244, Events:, 103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 89, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14746
2026-03-26 01:17:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s685ms.
2026-03-26 01:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33420 KB;
2026-03-26 01:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; ProcessInfo: 286 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 146 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; TcpIpConnectionsManager: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33422 KB;
2026-03-26 01:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; ProcessInfo: 298 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33490 KB;
2026-03-26 01:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 379 KB; ProcessInfo: 314 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 193 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33476 KB;
2026-03-26 01:20:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:20:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:20:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:20:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 379 KB; ProcessInfo: 320 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33489 KB;
2026-03-26 01:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 379 KB; ProcessInfo: 330 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33540 KB;
2026-03-26 01:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 379 KB; ProcessInfo: 337 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33502 KB;
2026-03-26 01:24:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:19:18, To:, 2026-03-26 01:24:04, Duration (s):, 286, Events Per Second:, 0.482, Events:, 138, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 137, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 18069
2026-03-26 01:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:24:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s211ms.
2026-03-26 01:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 379 KB; CacheEntry: 305 KB; ProcessInfo: 304 KB; rules::ProcessConditionsCache: 193 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33451 KB;
2026-03-26 01:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 379 KB; ProcessInfo: 306 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33446 KB;
2026-03-26 01:25:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:25:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:25:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:25:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2143 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 379 KB; ProcessInfo: 308 KB; CacheEntry: 305 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 146 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33437 KB;
2026-03-26 01:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 309 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33472 KB;
2026-03-26 01:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 331 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33561 KB;
2026-03-26 01:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 331 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33522 KB;
2026-03-26 01:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 337 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33562 KB;
2026-03-26 01:30:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:30:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:30:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:30:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:31:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:25:01, To:, 2026-03-26 01:31:04, Duration (s):, 363, Events Per Second:, 0.234, Events:, 85, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 84, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 12546
2026-03-26 01:31:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s581ms.
2026-03-26 01:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 309 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33498 KB;
2026-03-26 01:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 333 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33566 KB;
2026-03-26 01:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 333 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33567 KB;
2026-03-26 01:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 333 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33572 KB;
2026-03-26 01:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 337 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 230 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33574 KB;
2026-03-26 01:35:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:35:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:35:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:35:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; ProcessInfo: 343 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 235 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33594 KB;
2026-03-26 01:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 343 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 235 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33599 KB;
2026-03-26 01:38:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:31:05, To:, 2026-03-26 01:38:04, Duration (s):, 419, Events Per Second:, 0.234, Events:, 98, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 83, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 14, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13293
2026-03-26 01:38:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s766ms.
2026-03-26 01:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33523 KB;
2026-03-26 01:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 330 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33588 KB;
2026-03-26 01:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 336 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33607 KB;
2026-03-26 01:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:40:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; ProcessInfo: 337 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; TcpIpConnectionsManager: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33595 KB;
2026-03-26 01:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 337 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; TcpIpConnectionsManager: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33599 KB;
2026-03-26 01:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 337 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; TcpIpConnectionsManager: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33603 KB;
2026-03-26 01:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 544 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 144 KB; BaseEvent: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; rules::ProcessConditionsCache: 65 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33852 KB;
2026-03-26 01:45:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:39:00, To:, 2026-03-26 01:45:04, Duration (s):, 364, Events Per Second:, 2.746, Events:, 1001, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 851, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 149, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 114422
2026-03-26 01:45:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s061ms.
2026-03-26 01:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 190 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33896 KB;
2026-03-26 01:45:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:45:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:45:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:45:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 600 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 190 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33900 KB;
2026-03-26 01:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33823 KB;
2026-03-26 01:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33774 KB;
2026-03-26 01:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; TcpIpConnectionsManager: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33779 KB;
2026-03-26 01:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 613 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; TcpIpConnectionsManager: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33831 KB;
2026-03-26 01:50:44 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:50:44 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:50:44 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:50:44 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 638 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33872 KB;
2026-03-26 01:52:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:50:06, To:, 2026-03-26 01:52:04, Duration (s):, 118, Events Per Second:, 0.827, Events:, 98, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 85, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 13371
2026-03-26 01:52:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s688ms.
2026-03-26 01:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 318 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33555 KB;
2026-03-26 01:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 318 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33556 KB;
2026-03-26 01:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; ProcessInfo: 318 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; TcpIpConnectionsManager: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33546 KB;
2026-03-26 01:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 334 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 263 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; TcpIpConnectionsManager: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33634 KB;
2026-03-26 01:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 01:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 01:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 01:55:45 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 01:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 380 KB; ProcessInfo: 346 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33603 KB;
2026-03-26 01:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 380 KB; ProcessInfo: 351 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33594 KB;
2026-03-26 01:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 380 KB; ProcessInfo: 352 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33594 KB;
2026-03-26 01:59:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 01:54:22, To:, 2026-03-26 01:59:04, Duration (s):, 282, Events Per Second:, 0.492, Events:, 139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 92, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 16880
2026-03-26 01:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 01:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 01:59:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s997ms.
2026-03-26 01:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; ProcessInfo: 287 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33500 KB;
2026-03-26 02:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; ProcessInfo: 299 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33528 KB;
2026-03-26 02:00:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:00:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:00:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:00:46 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 380 KB; ProcessInfo: 324 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 276 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33594 KB;
2026-03-26 02:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 380 KB; ProcessInfo: 349 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33673 KB;
2026-03-26 02:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 380 KB; ProcessInfo: 351 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 302 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33683 KB;
2026-03-26 02:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; ProcessInfo: 353 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 304 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33722 KB;
2026-03-26 02:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 380 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33802 KB;
2026-03-26 02:05:46 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:05:46 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:05:46 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:05:46 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:06:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:00:00, To:, 2026-03-26 02:06:04, Duration (s):, 364, Events Per Second:, 0.669, Events:, 244, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 210, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 33, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30372
2026-03-26 02:06:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s624ms.
2026-03-26 02:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 359 KB; ProcessInfo: 334 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33749 KB;
2026-03-26 02:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 359 KB; ProcessInfo: 334 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33753 KB;
2026-03-26 02:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 380 KB; ProcessInfo: 359 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33826 KB;
2026-03-26 02:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 406 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33903 KB;
2026-03-26 02:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 436 KB; rules::ProcessConditionsCache: 425 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33992 KB;
2026-03-26 02:10:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:10:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:10:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:10:47 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 589 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 436 KB; rules::ProcessConditionsCache: 425 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; TcpIpConnectionsManager: 67 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33971 KB;
2026-03-26 02:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 484 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; BaseEvent: 70 KB; rules::ProcessConditionsCache: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33711 KB;
2026-03-26 02:13:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:06:21, To:, 2026-03-26 02:13:04, Duration (s):, 403, Events Per Second:, 1.323, Events:, 534, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 462, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63142
2026-03-26 02:13:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s862ms.
2026-03-26 02:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; ProcessInfo: 358 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 74 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33527 KB;
2026-03-26 02:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 384 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33600 KB;
2026-03-26 02:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 436 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33737 KB;
2026-03-26 02:15:47 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:15:47 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:15:47 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:15:47 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; BaseEvent: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33954 KB;
2026-03-26 02:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33930 KB;
2026-03-26 02:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 584 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 116 KB; BaseEvent: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34140 KB;
2026-03-26 02:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 677 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; BaseEvent: 150 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 70 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 22 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33978 KB;
2026-03-26 02:20:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:13:25, To:, 2026-03-26 02:20:04, Duration (s):, 399, Events Per Second:, 2.500, Events:, 999, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 827, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 171, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 112342
2026-03-26 02:20:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s008ms.
2026-03-26 02:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33730 KB;
2026-03-26 02:20:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:20:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:20:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:20:48 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 599 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 217 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 73 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33986 KB;
2026-03-26 02:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 696 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 147 KB; BaseEvent: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 76 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34261 KB;
2026-03-26 02:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 793 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 430 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 147 KB; BaseEvent: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 78 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34543 KB;
2026-03-26 02:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; BaseEvent: 224 KB; TcpIpConnectionsManager: 208 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 80 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34627 KB;
2026-03-26 02:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1085 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 306 KB; BaseEvent: 283 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 81 KB; BatchSerializer::EventsQueueTag: 75 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34972 KB;
2026-03-26 02:25:48 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:25:48 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:25:48 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:25:48 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1279 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 380 KB; BaseEvent: 374 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 264 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 141 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35057 KB;
2026-03-26 02:27:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:20:11, To:, 2026-03-26 02:27:04, Duration (s):, 413, Events Per Second:, 6.273, Events:, 2594, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2149, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 444, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 287595
2026-03-26 02:27:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s394ms.
2026-03-26 02:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 272 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34378 KB;
2026-03-26 02:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1067 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 308 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 137 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 5 KB; ProcessInfoCommandLineTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34532 KB;
2026-03-26 02:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1260 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 298 KB; BaseEvent: 188 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35057 KB;
2026-03-26 02:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1433 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 287 KB; BaseEvent: 271 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 139 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35118 KB;
2026-03-26 02:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:30:49 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1652 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; rules::ProcessConditionsCache: 384 KB; ModuleInfoCache: 380 KB; BaseEvent: 378 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 305 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35726 KB;
2026-03-26 02:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1941 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 521 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 338 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 137 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 66 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36137 KB;
2026-03-26 02:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 2063 KB; BaseEvent: 582 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::ProcessConditionsCache: 427 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 318 KB; CacheEntry: 306 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36458 KB;
2026-03-26 02:34:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:27:29, To:, 2026-03-26 02:34:04, Duration (s):, 395, Events Per Second:, 8.969, Events:, 3548, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2924, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 623, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 391400
2026-03-26 02:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:34:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s585ms.
2026-03-26 02:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 982 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 317 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 235 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; ProcessInfoCommandLineTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34492 KB;
2026-03-26 02:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1176 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 297 KB; cloudutils::CloudData: 147 KB; BaseEvent: 113 KB; rules::ProcessConditionsCache: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 84 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34652 KB;
2026-03-26 02:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:35:49 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1343 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 326 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 246 KB; BaseEvent: 191 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; BatchSerializer::EventsQueueTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35074 KB;
2026-03-26 02:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1490 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 349 KB; TcpIpConnectionsManager: 312 KB; CacheEntry: 306 KB; BaseEvent: 266 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35374 KB;
2026-03-26 02:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1684 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 380 KB; BaseEvent: 362 KB; TcpIpConnectionsManager: 328 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35524 KB;
2026-03-26 02:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 2018 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 502 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 376 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 140 KB; rules::ProcessConditionsCache: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36029 KB;
2026-03-26 02:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2151 KB; ModuleMetadata: 2148 KB; BaseEvent: 569 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 341 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 228 KB; BatchSerializer::EventsQueueTag: 159 KB; cloudutils::CloudData: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36351 KB;
2026-03-26 02:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:40:49 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:41:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:34:09, To:, 2026-03-26 02:41:04, Duration (s):, 415, Events Per Second:, 9.018, Events:, 3748, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3173, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 574, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 416305
2026-03-26 02:41:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s615ms.
2026-03-26 02:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1083 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 359 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 54 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34445 KB;
2026-03-26 02:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1251 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 297 KB; rules::ProcessConditionsCache: 259 KB; cloudutils::CloudData: 147 KB; BaseEvent: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34868 KB;
2026-03-26 02:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1423 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 300 KB; BaseEvent: 214 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::ProcessConditionsCache: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34927 KB;
2026-03-26 02:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 380 KB; BaseEvent: 334 KB; CacheEntry: 306 KB; rules::ProcessConditionsCache: 305 KB; TcpIpConnectionsManager: 303 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35595 KB;
2026-03-26 02:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1863 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 431 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 310 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 121 KB; BatchSerializer::EventsQueueTag: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35746 KB;
2026-03-26 02:45:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:45:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:45:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:45:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 2031 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 506 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 341 KB; TcpIpConnectionsManager: 326 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36261 KB;
2026-03-26 02:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2201 KB; ModuleMetadata: 2148 KB; BaseEvent: 594 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; TcpIpConnectionsManager: 290 KB; BatchSerializer::EventsQueueTag: 157 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36204 KB;
2026-03-26 02:48:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:41:09, To:, 2026-03-26 02:48:04, Duration (s):, 415, Events Per Second:, 9.008, Events:, 3744, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3099, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 644, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 412733
2026-03-26 02:48:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s380ms.
2026-03-26 02:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 981 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 352 KB; TcpIpConnectionsManager: 321 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34595 KB;
2026-03-26 02:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1103 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 312 KB; CacheEntry: 306 KB; cloudutils::CloudData: 147 KB; BaseEvent: 107 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34520 KB;
2026-03-26 02:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1324 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 330 KB; TcpIpConnectionsManager: 321 KB; CacheEntry: 306 KB; BaseEvent: 215 KB; cloudutils::CloudData: 147 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35144 KB;
2026-03-26 02:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:50:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2148 KB; ProcessInfo: 1470 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 380 KB; CacheEntry: 306 KB; BaseEvent: 287 KB; TcpIpConnectionsManager: 262 KB; cloudutils::CloudData: 147 KB; rules::ProcessConditionsCache: 82 KB; BatchSerializer::EventsQueueTag: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35063 KB;
2026-03-26 02:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1608 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 380 KB; BaseEvent: 339 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35405 KB;
2026-03-26 02:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1681 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 380 KB; BaseEvent: 377 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35549 KB;
2026-03-26 02:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1755 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; BaseEvent: 416 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 347 KB; CacheEntry: 307 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 146 KB; BatchSerializer::EventsQueueTag: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35704 KB;
2026-03-26 02:55:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:48:05, To:, 2026-03-26 02:55:04, Duration (s):, 419, Events Per Second:, 6.114, Events:, 2566, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2133, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 10, Livegrid:, 10, OriginUrl:, 0, Alarms:, 412, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 285254
2026-03-26 02:55:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s179ms.
2026-03-26 02:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33742 KB;
2026-03-26 02:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 02:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 02:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 02:55:50 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 02:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 694 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 164 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34027 KB;
2026-03-26 02:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 752 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 212 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 148 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34180 KB;
2026-03-26 02:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 148 KB; BaseEvent: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34441 KB;
2026-03-26 02:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 02:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 02:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 195 KB; BaseEvent: 161 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34384 KB;
2026-03-26 03:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1003 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 191 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 128 KB; BatchSerializer::EventsQueueTag: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34502 KB;
2026-03-26 03:00:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:00:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:00:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:00:51 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1399 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; BaseEvent: 373 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 300 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 122 KB; BatchSerializer::EventsQueueTag: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35232 KB;
2026-03-26 03:02:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 02:55:05, To:, 2026-03-26 03:02:04, Duration (s):, 419, Events Per Second:, 6.822, Events:, 2863, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2409, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 453, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 317953
2026-03-26 03:02:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s216ms.
2026-03-26 03:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1136 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 392 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 99 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34626 KB;
2026-03-26 03:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1333 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 438 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 314 KB; CacheEntry: 307 KB; cloudutils::CloudData: 148 KB; BaseEvent: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35206 KB;
2026-03-26 03:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1437 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 428 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 335 KB; CacheEntry: 307 KB; BaseEvent: 196 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35392 KB;
2026-03-26 03:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 253 KB; TcpIpConnectionsManager: 228 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 146 KB; BatchSerializer::EventsQueueTag: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35190 KB;
2026-03-26 03:05:51 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:05:51 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:05:51 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:05:51 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 267 KB; rules::ProcessConditionsCache: 174 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35194 KB;
2026-03-26 03:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1599 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 278 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 126 KB; BatchSerializer::EventsQueueTag: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35230 KB;
2026-03-26 03:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1719 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; BaseEvent: 338 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 307 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 123 KB; BatchSerializer::EventsQueueTag: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35553 KB;
2026-03-26 03:09:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:02:05, To:, 2026-03-26 03:09:04, Duration (s):, 419, Events Per Second:, 4.827, Events:, 2026, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1692, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 333, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 226198
2026-03-26 03:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:09:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s182ms.
2026-03-26 03:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 497 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 307 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33949 KB;
2026-03-26 03:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 602 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33853 KB;
2026-03-26 03:10:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:10:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:10:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:10:52 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 725 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 148 KB; BaseEvent: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34179 KB;
2026-03-26 03:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 772 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 265 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 148 KB; BaseEvent: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34324 KB;
2026-03-26 03:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 821 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 322 KB; CacheEntry: 307 KB; BaseEvent: 151 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 146 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34440 KB;
2026-03-26 03:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 208 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34351 KB;
2026-03-26 03:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 970 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 222 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 72 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34421 KB;
2026-03-26 03:15:52 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:15:52 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:15:52 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:15:52 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:16:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:09:49, To:, 2026-03-26 03:16:04, Duration (s):, 375, Events Per Second:, 3.603, Events:, 1354, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1130, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 223, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 152571
2026-03-26 03:16:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s389ms.
2026-03-26 03:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 177 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33885 KB;
2026-03-26 03:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 638 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 254 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 148 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34066 KB;
2026-03-26 03:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 712 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 148 KB; BaseEvent: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34276 KB;
2026-03-26 03:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 223 KB; rules::ProcessConditionsCache: 196 KB; BaseEvent: 150 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34431 KB;
2026-03-26 03:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 236 KB; rules::ProcessConditionsCache: 204 KB; BaseEvent: 203 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34593 KB;
2026-03-26 03:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:20:53 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 275 KB; BaseEvent: 254 KB; TcpIpConnectionsManager: 246 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34806 KB;
2026-03-26 03:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1179 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::ProcessConditionsCache: 406 KB; ModuleInfoCache: 380 KB; BaseEvent: 317 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 246 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35144 KB;
2026-03-26 03:23:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:16:09, To:, 2026-03-26 03:23:04, Duration (s):, 415, Events Per Second:, 5.359, Events:, 2228, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1884, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 343, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 249106
2026-03-26 03:23:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s813ms.
2026-03-26 03:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 684 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 248 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34024 KB;
2026-03-26 03:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 734 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 218 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34082 KB;
2026-03-26 03:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 266 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 148 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34263 KB;
2026-03-26 03:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:25:53 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 857 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 307 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34352 KB;
2026-03-26 03:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 960 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 427 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 148 KB; BaseEvent: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34638 KB;
2026-03-26 03:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1056 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 190 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 128 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34514 KB;
2026-03-26 03:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 207 KB; rules::ProcessConditionsCache: 174 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34622 KB;
2026-03-26 03:30:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:23:04, To:, 2026-03-26 03:30:04, Duration (s):, 420, Events Per Second:, 3.745, Events:, 1576, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1312, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 263, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 178190
2026-03-26 03:30:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s022ms.
2026-03-26 03:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 681 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34250 KB;
2026-03-26 03:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:30:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 775 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 106 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34106 KB;
2026-03-26 03:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 148 KB; BaseEvent: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34399 KB;
2026-03-26 03:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 262 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 148 KB; BaseEvent: 137 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34473 KB;
2026-03-26 03:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 317 KB; CacheEntry: 307 KB; BaseEvent: 162 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34602 KB;
2026-03-26 03:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1048 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 198 KB; cloudutils::CloudData: 148 KB; TcpIpConnectionsManager: 129 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34772 KB;
2026-03-26 03:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:35:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1191 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 270 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 146 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34797 KB;
2026-03-26 03:37:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:30:09, To:, 2026-03-26 03:37:04, Duration (s):, 415, Events Per Second:, 4.141, Events:, 1722, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1427, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 294, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 192147
2026-03-26 03:37:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s578ms.
2026-03-26 03:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 656 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 257 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34062 KB;
2026-03-26 03:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 715 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34197 KB;
2026-03-26 03:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 879 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 148 KB; BaseEvent: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::ProcessConditionsCache: 35 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34179 KB;
2026-03-26 03:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 215 KB; TcpIpConnectionsManager: 198 KB; BaseEvent: 175 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34626 KB;
2026-03-26 03:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:40:54 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2151 KB; ProcessInfo: 1076 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 268 KB; BaseEvent: 200 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34746 KB;
2026-03-26 03:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1175 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 371 KB; CacheEntry: 307 KB; BaseEvent: 249 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34994 KB;
2026-03-26 03:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1271 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 614 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 298 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 82 KB; rules::ProcessConditionsCache: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34863 KB;
2026-03-26 03:44:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:37:09, To:, 2026-03-26 03:44:04, Duration (s):, 415, Events Per Second:, 5.591, Events:, 2325, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1944, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 380, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 259346
2026-03-26 03:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:44:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s284ms.
2026-03-26 03:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 797 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 413 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 269 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34525 KB;
2026-03-26 03:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 991 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 617 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; TcpIpConnectionsManager: 313 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 148 KB; BaseEvent: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34691 KB;
2026-03-26 03:45:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:45:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:45:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:45:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1064 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 618 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 305 KB; rules::ProcessConditionsCache: 304 KB; BaseEvent: 170 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34886 KB;
2026-03-26 03:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1211 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 242 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::ProcessConditionsCache: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34803 KB;
2026-03-26 03:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1280 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; BaseEvent: 275 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 148 KB; rules::ProcessConditionsCache: 132 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34941 KB;
2026-03-26 03:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1402 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 622 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 380 KB; BaseEvent: 333 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 266 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35295 KB;
2026-03-26 03:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1573 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 402 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 239 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35467 KB;
2026-03-26 03:50:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:50:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:50:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:50:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:51:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:44:05, To:, 2026-03-26 03:51:04, Duration (s):, 419, Events Per Second:, 6.071, Events:, 2549, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2136, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 412, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 282769
2026-03-26 03:51:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s267ms.
2026-03-26 03:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 674 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 238 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34018 KB;
2026-03-26 03:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 294 KB; TcpIpConnectionsManager: 241 KB; cloudutils::CloudData: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34269 KB;
2026-03-26 03:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 962 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 290 KB; rules::ProcessConditionsCache: 224 KB; cloudutils::CloudData: 148 KB; BaseEvent: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34553 KB;
2026-03-26 03:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1057 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 279 KB; rules::ProcessConditionsCache: 211 KB; BaseEvent: 165 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34681 KB;
2026-03-26 03:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1147 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; CacheEntry: 307 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 284 KB; BaseEvent: 202 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34910 KB;
2026-03-26 03:55:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 03:55:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 03:55:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 03:55:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 03:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2153 KB; ProcessInfo: 1230 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 380 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 307 KB; TcpIpConnectionsManager: 266 KB; BaseEvent: 241 KB; cloudutils::CloudData: 148 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35051 KB;
2026-03-26 03:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1420 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 383 KB; BaseEvent: 322 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 279 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35262 KB;
2026-03-26 03:58:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:51:29, To:, 2026-03-26 03:58:04, Duration (s):, 395, Events Per Second:, 5.267, Events:, 2085, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1809, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 275, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 232556
2026-03-26 03:58:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s307ms.
2026-03-26 03:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 646 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 257 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 137 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33993 KB;
2026-03-26 03:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 03:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 03:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 672 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 197 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34010 KB;
2026-03-26 04:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34142 KB;
2026-03-26 04:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:00:55 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 139 KB; BaseEvent: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34470 KB;
2026-03-26 04:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 935 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 174 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::ProcessConditionsCache: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34302 KB;
2026-03-26 04:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 935 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 175 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 139 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::ProcessConditionsCache: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34284 KB;
2026-03-26 04:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 935 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 176 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 88 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::ProcessConditionsCache: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34234 KB;
2026-03-26 04:05:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 03:58:04, To:, 2026-03-26 04:05:04, Duration (s):, 420, Events Per Second:, 2.157, Events:, 908, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 698, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 34, Livegrid:, 34, OriginUrl:, 0, Alarms:, 141, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 102802
2026-03-26 04:05:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s055ms.
2026-03-26 04:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; ProcessInfo: 290 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 52 KB; rules::ProcessConditionsCache: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33324 KB;
2026-03-26 04:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:05:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; ProcessInfo: 290 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 52 KB; rules::ProcessConditionsCache: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33324 KB;
2026-03-26 04:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 678 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 203 KB; BaseEvent: 181 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34134 KB;
2026-03-26 04:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 750 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 234 KB; BaseEvent: 216 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 147 KB; BatchSerializer::EventsQueueTag: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34366 KB;
2026-03-26 04:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 340 KB; TcpIpConnectionsManager: 330 KB; BaseEvent: 314 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35014 KB;
2026-03-26 04:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1101 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; BaseEvent: 369 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34797 KB;
2026-03-26 04:10:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:10:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:10:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:10:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1185 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 412 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 149 KB; BatchSerializer::EventsQueueTag: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35050 KB;
2026-03-26 04:12:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:02:01, To:, 2026-03-26 04:12:04, Duration (s):, 603, Events Per Second:, 4.219, Events:, 2548, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2139, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 408, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 284973
2026-03-26 04:12:07 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s661ms.
2026-03-26 04:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 631 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 233 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34007 KB;
2026-03-26 04:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 705 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 314 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34194 KB;
2026-03-26 04:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 707 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 314 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34163 KB;
2026-03-26 04:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1023 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 247 KB; TcpIpConnectionsManager: 220 KB; BaseEvent: 201 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34714 KB;
2026-03-26 04:15:56 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:15:56 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:15:56 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:15:56 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1379 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; BaseEvent: 375 KB; TcpIpConnectionsManager: 336 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35396 KB;
2026-03-26 04:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1741 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 552 KB; TcpIpConnectionsManager: 487 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36120 KB;
2026-03-26 04:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 2112 KB; BaseEvent: 737 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 513 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 218 KB; BatchSerializer::EventsQueueTag: 193 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36749 KB;
2026-03-26 04:18:27 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:12:17, To:, 2026-03-26 04:18:27, Duration (s):, 370, Events Per Second:, 11.101, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3390, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453469
2026-03-26 04:18:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s303ms.
2026-03-26 04:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1716 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 515 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 197 KB; BaseEvent: 168 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35614 KB;
2026-03-26 04:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1954 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 461 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 286 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 75 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35818 KB;
2026-03-26 04:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:20:57 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1988 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 383 KB; TcpIpConnectionsManager: 323 KB; CacheEntry: 310 KB; BaseEvent: 305 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 110 KB; BatchSerializer::EventsQueueTag: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35763 KB;
2026-03-26 04:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 2091 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 383 KB; BaseEvent: 356 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 227 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35942 KB;
2026-03-26 04:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 2166 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; BaseEvent: 394 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36058 KB;
2026-03-26 04:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2333 KB; ModuleMetadata: 2173 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; BaseEvent: 476 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 126 KB; rules::ProcessConditionsCache: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36154 KB;
2026-03-26 04:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2410 KB; ModuleMetadata: 2173 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; BaseEvent: 513 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 193 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36364 KB;
2026-03-26 04:25:27 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:18:26, To:, 2026-03-26 04:25:27, Duration (s):, 421, Events Per Second:, 6.699, Events:, 2825, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2329, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 495, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 313074
2026-03-26 04:25:28 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s177ms.
2026-03-26 04:25:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:25:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:25:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:25:58 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34083 KB;
2026-03-26 04:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 828 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 150 KB; BaseEvent: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::ProcessConditionsCache: 58 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34191 KB;
2026-03-26 04:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 978 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 269 KB; rules::ProcessConditionsCache: 227 KB; BaseEvent: 166 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34631 KB;
2026-03-26 04:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1050 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 280 KB; rules::ProcessConditionsCache: 262 KB; BaseEvent: 203 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34788 KB;
2026-03-26 04:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2173 KB; ProcessInfo: 1170 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 382 KB; CacheEntry: 310 KB; BaseEvent: 262 KB; TcpIpConnectionsManager: 256 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35082 KB;
2026-03-26 04:30:58 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:30:58 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:30:58 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:30:58 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1296 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 383 KB; BaseEvent: 328 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 128 KB; BatchSerializer::EventsQueueTag: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34973 KB;
2026-03-26 04:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1393 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 383 KB; BaseEvent: 379 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 236 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35238 KB;
2026-03-26 04:32:27 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:25:37, To:, 2026-03-26 04:32:27, Duration (s):, 410, Events Per Second:, 5.313, Events:, 2182, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1837, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 342, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 242763
2026-03-26 04:32:30 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s455ms.
2026-03-26 04:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 734 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 150 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34249 KB;
2026-03-26 04:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 418 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 150 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34420 KB;
2026-03-26 04:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 951 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 187 KB; rules::ProcessConditionsCache: 175 KB; BaseEvent: 154 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34441 KB;
2026-03-26 04:35:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:35:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:35:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:35:59 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1097 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 310 KB; BaseEvent: 224 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34856 KB;
2026-03-26 04:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1289 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 383 KB; BaseEvent: 313 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 272 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 137 KB; BatchSerializer::EventsQueueTag: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35018 KB;
2026-03-26 04:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1364 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 383 KB; BaseEvent: 350 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 243 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35186 KB;
2026-03-26 04:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; rules::ProcessConditionsCache: 422 KB; BaseEvent: 415 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 274 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35737 KB;
2026-03-26 04:39:27 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:32:37, To:, 2026-03-26 04:39:27, Duration (s):, 410, Events Per Second:, 6.135, Events:, 2520, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2127, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 392, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 283087
2026-03-26 04:39:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s165ms.
2026-03-26 04:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 126 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34159 KB;
2026-03-26 04:40:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:40:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:40:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:40:59 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 970 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 150 KB; BaseEvent: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34574 KB;
2026-03-26 04:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1094 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 424 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 239 KB; BaseEvent: 176 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34913 KB;
2026-03-26 04:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1220 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 242 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 146 KB; BatchSerializer::EventsQueueTag: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34819 KB;
2026-03-26 04:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1340 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 302 KB; rules::ProcessConditionsCache: 280 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35153 KB;
2026-03-26 04:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1415 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 359 KB; BaseEvent: 340 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35334 KB;
2026-03-26 04:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:45:59 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1512 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; BaseEvent: 389 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 104 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35186 KB;
2026-03-26 04:46:27 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:39:26, To:, 2026-03-26 04:46:27, Duration (s):, 421, Events Per Second:, 5.012, Events:, 2114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1747, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 366, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 238493
2026-03-26 04:46:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s252ms.
2026-03-26 04:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 727 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 223 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 150 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34146 KB;
2026-03-26 04:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 963 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 269 KB; BaseEvent: 174 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 73 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34447 KB;
2026-03-26 04:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1155 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 383 KB; TcpIpConnectionsManager: 326 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 301 KB; BaseEvent: 261 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35046 KB;
2026-03-26 04:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1276 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::ProcessConditionsCache: 417 KB; ModuleInfoCache: 383 KB; TcpIpConnectionsManager: 344 KB; CacheEntry: 310 KB; BaseEvent: 307 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35378 KB;
2026-03-26 04:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:50:59 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1446 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; BaseEvent: 398 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 298 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35365 KB;
2026-03-26 04:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1542 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 445 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 293 KB; TcpIpConnectionsManager: 259 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35585 KB;
2026-03-26 04:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1625 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; BaseEvent: 489 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35778 KB;
2026-03-26 04:53:27 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:46:33, To:, 2026-03-26 04:53:27, Duration (s):, 414, Events Per Second:, 6.820, Events:, 2829, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 447, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 312802
2026-03-26 04:53:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s274ms.
2026-03-26 04:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 90 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34028 KB;
2026-03-26 04:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 929 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 288 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 150 KB; BaseEvent: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34543 KB;
2026-03-26 04:56:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 04:56:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 04:56:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 04:56:00 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 04:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1001 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 207 KB; BaseEvent: 180 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34733 KB;
2026-03-26 04:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1095 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 224 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34560 KB;
2026-03-26 04:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1220 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 269 KB; rules::ProcessConditionsCache: 255 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34984 KB;
2026-03-26 04:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 04:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 04:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1346 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 383 KB; BaseEvent: 336 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 283 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35220 KB;
2026-03-26 05:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1504 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; BaseEvent: 411 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 259 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35249 KB;
2026-03-26 05:00:27 7967594126c0 Info: Events Statistics, From:, 2026-03-26 04:53:33, To:, 2026-03-26 05:00:27, Duration (s):, 414, Events Per Second:, 5.663, Events:, 2349, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1967, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 377, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 261800
2026-03-26 05:00:29 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s190ms.
2026-03-26 05:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:01:00 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 769 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34109 KB;
2026-03-26 05:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 150 KB; BaseEvent: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34605 KB;
2026-03-26 05:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1326 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 332 KB; TcpIpConnectionsManager: 321 KB; CacheEntry: 310 KB; BaseEvent: 310 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35303 KB;
2026-03-26 05:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1683 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 484 KB; TcpIpConnectionsManager: 436 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35987 KB;
2026-03-26 05:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 2057 KB; BaseEvent: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; TcpIpConnectionsManager: 520 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 310 KB; BatchSerializer::EventsQueueTag: 175 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36672 KB;
2026-03-26 05:05:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:00:29, To:, 2026-03-26 05:05:51, Duration (s):, 322, Events Per Second:, 12.649, Events:, 4073, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3359, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 448814
2026-03-26 05:05:53 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s834ms.
2026-03-26 05:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:06:00 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1543 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 500 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 150 KB; BaseEvent: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35355 KB;
2026-03-26 05:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1913 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; TcpIpConnectionsManager: 515 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 269 KB; rules::ProcessConditionsCache: 268 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35975 KB;
2026-03-26 05:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2225 KB; ModuleMetadata: 2175 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; TcpIpConnectionsManager: 482 KB; BaseEvent: 422 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36382 KB;
2026-03-26 05:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2395 KB; ModuleMetadata: 2175 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 499 KB; TcpIpConnectionsManager: 402 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 371 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36748 KB;
2026-03-26 05:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2552 KB; ModuleMetadata: 2175 KB; BaseEvent: 574 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 305 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36673 KB;
2026-03-26 05:11:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:11:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:11:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:11:01 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2633 KB; ModuleMetadata: 2175 KB; BaseEvent: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 206 KB; TcpIpConnectionsManager: 205 KB; BatchSerializer::EventsQueueTag: 164 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36791 KB;
2026-03-26 05:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2731 KB; ModuleMetadata: 2175 KB; BaseEvent: 663 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 312 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 185 KB; BatchSerializer::EventsQueueTag: 176 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 37039 KB;
2026-03-26 05:12:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:05:50, To:, 2026-03-26 05:12:51, Duration (s):, 421, Events Per Second:, 8.973, Events:, 3778, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3139, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 638, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 417942
2026-03-26 05:12:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s226ms.
2026-03-26 05:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 681 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33972 KB;
2026-03-26 05:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 753 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 150 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34130 KB;
2026-03-26 05:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 859 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 260 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 150 KB; BaseEvent: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34395 KB;
2026-03-26 05:16:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:16:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:16:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:16:01 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1029 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 216 KB; BaseEvent: 205 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34449 KB;
2026-03-26 05:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1147 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 262 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34803 KB;
2026-03-26 05:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1365 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 401 KB; ModuleInfoCache: 383 KB; BaseEvent: 371 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 266 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35436 KB;
2026-03-26 05:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1420 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; BaseEvent: 397 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 220 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 107 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35128 KB;
2026-03-26 05:19:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:12:54, To:, 2026-03-26 05:19:51, Duration (s):, 417, Events Per Second:, 5.888, Events:, 2456, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2047, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 408, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 272207
2026-03-26 05:19:53 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s252ms.
2026-03-26 05:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 253 KB; TcpIpConnectionsManager: 244 KB; cloudutils::CloudData: 150 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34301 KB;
2026-03-26 05:21:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:21:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:21:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:21:01 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 934 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 150 KB; BaseEvent: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34230 KB;
2026-03-26 05:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1103 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 275 KB; rules::ProcessConditionsCache: 220 KB; BaseEvent: 175 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34736 KB;
2026-03-26 05:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1270 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::ProcessConditionsCache: 402 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 275 KB; BaseEvent: 259 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35196 KB;
2026-03-26 05:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1392 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; BaseEvent: 316 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 298 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 136 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35149 KB;
2026-03-26 05:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1467 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 383 KB; BaseEvent: 356 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 220 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35271 KB;
2026-03-26 05:26:01 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:26:01 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:26:01 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:26:01 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2175 KB; ProcessInfo: 1659 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 450 KB; rules::ProcessConditionsCache: 422 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35796 KB;
2026-03-26 05:26:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:19:53, To:, 2026-03-26 05:26:51, Duration (s):, 418, Events Per Second:, 6.435, Events:, 2691, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2247, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 443, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 298438
2026-03-26 05:26:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s359ms.
2026-03-26 05:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2176 KB; ProcessInfo: 680 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33915 KB;
2026-03-26 05:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 150 KB; BaseEvent: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34380 KB;
2026-03-26 05:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 967 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 414 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 207 KB; BaseEvent: 151 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34721 KB;
2026-03-26 05:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1167 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 254 KB; BaseEvent: 247 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34920 KB;
2026-03-26 05:31:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:31:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:31:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:31:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1338 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 422 KB; ModuleInfoCache: 383 KB; BaseEvent: 332 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 266 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35385 KB;
2026-03-26 05:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1490 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; BaseEvent: 404 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 277 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35376 KB;
2026-03-26 05:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1548 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; BaseEvent: 434 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35484 KB;
2026-03-26 05:33:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:27:01, To:, 2026-03-26 05:33:51, Duration (s):, 410, Events Per Second:, 6.319, Events:, 2592, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2138, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 451, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 286898
2026-03-26 05:33:53 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s169ms.
2026-03-26 05:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 685 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 332 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34144 KB;
2026-03-26 05:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 784 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 150 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34356 KB;
2026-03-26 05:36:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:36:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:36:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:36:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 95 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34169 KB;
2026-03-26 05:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 976 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 222 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 150 KB; BaseEvent: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34507 KB;
2026-03-26 05:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1073 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 310 KB; BaseEvent: 190 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34756 KB;
2026-03-26 05:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1192 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 240 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; rules::ProcessConditionsCache: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34633 KB;
2026-03-26 05:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1269 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 274 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 110 KB; BatchSerializer::EventsQueueTag: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34839 KB;
2026-03-26 05:40:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:33:49, To:, 2026-03-26 05:40:51, Duration (s):, 422, Events Per Second:, 4.822, Events:, 2036, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1717, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 317, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 228272
2026-03-26 05:40:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s074ms.
2026-03-26 05:41:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:41:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:41:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:41:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 848 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 249 KB; cloudutils::CloudData: 150 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34543 KB;
2026-03-26 05:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 945 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 251 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 123 KB; BaseEvent: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34404 KB;
2026-03-26 05:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1016 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 248 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 150 KB; BaseEvent: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34598 KB;
2026-03-26 05:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1089 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 281 KB; BaseEvent: 185 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34707 KB;
2026-03-26 05:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1189 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 234 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34980 KB;
2026-03-26 05:46:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:46:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:46:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:46:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1260 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 271 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::ProcessConditionsCache: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34761 KB;
2026-03-26 05:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 1310 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 294 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 146 KB; rules::ProcessConditionsCache: 117 KB; BatchSerializer::EventsQueueTag: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34920 KB;
2026-03-26 05:47:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:40:53, To:, 2026-03-26 05:47:51, Duration (s):, 418, Events Per Second:, 4.074, Events:, 1704, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1409, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 294, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 190085
2026-03-26 05:47:52 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s997ms.
2026-03-26 05:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 141 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33760 KB;
2026-03-26 05:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 630 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 62 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34028 KB;
2026-03-26 05:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 653 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34087 KB;
2026-03-26 05:51:02 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:51:02 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:51:02 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:51:02 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; rules::ProcessConditionsCache: 384 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 144 KB; BaseEvent: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34382 KB;
2026-03-26 05:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 804 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; cloudutils::CloudData: 150 KB; BaseEvent: 129 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 65 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::ProcessConditionsCache: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34086 KB;
2026-03-26 05:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 901 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 175 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 68 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34388 KB;
2026-03-26 05:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 972 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; BaseEvent: 203 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34509 KB;
2026-03-26 05:54:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:48:25, To:, 2026-03-26 05:54:51, Duration (s):, 386, Events Per Second:, 3.521, Events:, 1360, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1140, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 217, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 153451
2026-03-26 05:54:53 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s983ms.
2026-03-26 05:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33962 KB;
2026-03-26 05:56:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 05:56:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 05:56:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 05:56:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 05:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 273 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33923 KB;
2026-03-26 05:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 383 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 310 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 143 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34111 KB;
2026-03-26 05:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2178 KB; ProcessInfo: 678 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::ProcessConditionsCache: 402 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34212 KB;
2026-03-26 05:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 05:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 05:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 130 KB; BaseEvent: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34189 KB;
2026-03-26 06:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 857 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 182 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 149 KB; BaseEvent: 146 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34321 KB;
2026-03-26 06:01:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:01:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:01:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:01:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 920 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 217 KB; BaseEvent: 166 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34425 KB;
2026-03-26 06:01:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 05:54:50, To:, 2026-03-26 06:01:51, Duration (s):, 421, Events Per Second:, 2.844, Events:, 1198, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1044, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 151, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 140655
2026-03-26 06:01:53 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s031ms.
2026-03-26 06:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 290 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33958 KB;
2026-03-26 06:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 246 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33855 KB;
2026-03-26 06:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 700 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 400 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 149 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34297 KB;
2026-03-26 06:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 149 KB; BaseEvent: 147 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34322 KB;
2026-03-26 06:06:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:06:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:06:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:06:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 882 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 195 KB; rules::ProcessConditionsCache: 192 KB; BaseEvent: 163 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34411 KB;
2026-03-26 06:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 383 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 244 KB; BaseEvent: 187 KB; TcpIpConnectionsManager: 152 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34503 KB;
2026-03-26 06:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 931 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 242 KB; BaseEvent: 187 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 92 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34445 KB;
2026-03-26 06:08:51 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:01:38, To:, 2026-03-26 06:08:51, Duration (s):, 433, Events Per Second:, 3.282, Events:, 1422, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1213, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 13, Livegrid:, 13, OriginUrl:, 0, Alarms:, 182, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 164661
2026-03-26 06:08:53 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s587ms.
2026-03-26 06:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 540 KB; ModuleInfoCache: 384 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 310 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33933 KB;
2026-03-26 06:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 621 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BatchSerializer::EventsQueueTag: 14 KB; rules::ProcessConditionsCache: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33743 KB;
2026-03-26 06:11:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:11:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:11:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:11:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 737 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 150 KB; TcpIpConnectionsManager: 149 KB; cloudutils::CloudData: 149 KB; BaseEvent: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34111 KB;
2026-03-26 06:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 301 KB; TcpIpConnectionsManager: 197 KB; BaseEvent: 166 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34539 KB;
2026-03-26 06:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 1241 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 384 KB; BaseEvent: 345 KB; TcpIpConnectionsManager: 317 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35248 KB;
2026-03-26 06:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 1621 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; BaseEvent: 518 KB; TcpIpConnectionsManager: 456 KB; ModuleInfoCache: 384 KB; rules::ProcessConditionsCache: 338 KB; CacheEntry: 310 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 140 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36033 KB;
2026-03-26 06:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 1956 KB; BaseEvent: 685 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; TcpIpConnectionsManager: 536 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 271 KB; BatchSerializer::EventsQueueTag: 184 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36578 KB;
2026-03-26 06:15:38 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:09:00, To:, 2026-03-26 06:15:38, Duration (s):, 398, Events Per Second:, 10.463, Events:, 4172, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3485, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 680, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461878
2026-03-26 06:15:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s242ms.
2026-03-26 06:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:16:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 1646 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 541 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 149 KB; BaseEvent: 132 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35553 KB;
2026-03-26 06:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2179 KB; ProcessInfo: 2001 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 512 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; BaseEvent: 306 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36089 KB;
2026-03-26 06:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2314 KB; ModuleMetadata: 2179 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 492 KB; BaseEvent: 461 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36527 KB;
2026-03-26 06:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2540 KB; ModuleMetadata: 2179 KB; BaseEvent: 574 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; TcpIpConnectionsManager: 438 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; BatchSerializer::EventsQueueTag: 152 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36675 KB;
2026-03-26 06:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2651 KB; ModuleMetadata: 2181 KB; BaseEvent: 627 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 384 KB; TcpIpConnectionsManager: 335 KB; CacheEntry: 310 KB; BatchSerializer::EventsQueueTag: 166 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36881 KB;
2026-03-26 06:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:21:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2730 KB; ModuleMetadata: 2181 KB; BaseEvent: 654 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 277 KB; TcpIpConnectionsManager: 248 KB; BatchSerializer::EventsQueueTag: 174 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 37022 KB;
2026-03-26 06:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2802 KB; ModuleMetadata: 2181 KB; BaseEvent: 688 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; rules::ProcessConditionsCache: 299 KB; TcpIpConnectionsManager: 202 KB; BatchSerializer::EventsQueueTag: 185 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 37105 KB;
2026-03-26 06:22:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:15:37, To:, 2026-03-26 06:22:38, Duration (s):, 421, Events Per Second:, 9.380, Events:, 3958, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3289, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 662, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 437088
2026-03-26 06:22:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s100ms.
2026-03-26 06:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2181 KB; ProcessInfo: 625 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 384 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34113 KB;
2026-03-26 06:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2181 KB; ProcessInfo: 722 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 150 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33968 KB;
2026-03-26 06:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2181 KB; ProcessInfo: 797 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 384 KB; CacheEntry: 310 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34182 KB;
2026-03-26 06:26:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:26:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:26:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:26:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 822 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 136 KB; BaseEvent: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34254 KB;
2026-03-26 06:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 966 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 384 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 311 KB; BaseEvent: 227 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 149 KB; BatchSerializer::EventsQueueTag: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34726 KB;
2026-03-26 06:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; rules::ProcessConditionsCache: 414 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; BaseEvent: 260 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34909 KB;
2026-03-26 06:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 1188 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 384 KB; BaseEvent: 330 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 218 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34975 KB;
2026-03-26 06:29:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:22:49, To:, 2026-03-26 06:29:39, Duration (s):, 410, Events Per Second:, 4.532, Events:, 1858, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 74, Livegrid:, 74, OriginUrl:, 0, Alarms:, 285, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 203553
2026-03-26 06:29:41 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s138ms.
2026-03-26 06:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 662 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 204 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34005 KB;
2026-03-26 06:31:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:31:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:31:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:31:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 204 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33946 KB;
2026-03-26 06:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 204 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33886 KB;
2026-03-26 06:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 690 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33953 KB;
2026-03-26 06:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 691 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33966 KB;
2026-03-26 06:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 747 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 288 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34132 KB;
2026-03-26 06:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:36:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 878 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 149 KB; BaseEvent: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34303 KB;
2026-03-26 06:36:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:30:13, To:, 2026-03-26 06:36:39, Duration (s):, 386, Events Per Second:, 1.749, Events:, 675, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 552, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 22, Livegrid:, 22, OriginUrl:, 0, Alarms:, 78, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79154
2026-03-26 06:36:39 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s780ms.
2026-03-26 06:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33839 KB;
2026-03-26 06:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2182 KB; ProcessInfo: 609 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 246 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34024 KB;
2026-03-26 06:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2184 KB; ProcessInfo: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 207 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 149 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34029 KB;
2026-03-26 06:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2184 KB; ProcessInfo: 681 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34084 KB;
2026-03-26 06:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:41:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2184 KB; ProcessInfo: 754 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 277 KB; cloudutils::CloudData: 149 KB; BaseEvent: 135 KB; TcpIpConnectionsManager: 107 KB; BatchSerializer::EventsQueueTag: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34256 KB;
2026-03-26 06:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2184 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 384 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 311 KB; BaseEvent: 183 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 125 KB; BatchSerializer::EventsQueueTag: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34541 KB;
2026-03-26 06:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2185 KB; ProcessInfo: 876 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; BaseEvent: 195 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 136 KB; BatchSerializer::EventsQueueTag: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34626 KB;
2026-03-26 06:43:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:36:37, To:, 2026-03-26 06:43:39, Duration (s):, 422, Events Per Second:, 2.739, Events:, 1156, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 900, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 66, Livegrid:, 66, OriginUrl:, 0, Alarms:, 123, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 131283
2026-03-26 06:43:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s006ms.
2026-03-26 06:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2185 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 464 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33571 KB;
2026-03-26 06:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2185 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 490 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33631 KB;
2026-03-26 06:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:46:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2185 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 525 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 97 KB; rules::ProcessConditionsCache: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33702 KB;
2026-03-26 06:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2185 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 531 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 93 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33705 KB;
2026-03-26 06:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2185 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 531 KB; ModuleInfoCache: 384 KB; CacheEntry: 311 KB; cloudutils::CloudData: 149 KB; rules::ProcessConditionsCache: 93 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33702 KB;
2026-03-26 06:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 93 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33707 KB;
2026-03-26 06:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 104 KB; TcpIpConnectionsManager: 61 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33731 KB;
2026-03-26 06:50:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:43:50, To:, 2026-03-26 06:50:39, Duration (s):, 409, Events Per Second:, 0.677, Events:, 277, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 238, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 33864
2026-03-26 06:50:39 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s637ms.
2026-03-26 06:51:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:51:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:51:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:51:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 385 KB; ProcessInfo: 376 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33648 KB;
2026-03-26 06:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 450 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; rules::ProcessConditionsCache: 259 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33877 KB;
2026-03-26 06:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; ProcessInfo: 593 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 210 KB; cloudutils::CloudData: 150 KB; BaseEvent: 120 KB; rules::ProcessConditionsCache: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34023 KB;
2026-03-26 06:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; ProcessInfo: 616 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 150 KB; BaseEvent: 138 KB; rules::ProcessConditionsCache: 81 KB; BatchSerializer::EventsQueueTag: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33990 KB;
2026-03-26 06:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; ProcessInfo: 643 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 150 KB; BaseEvent: 150 KB; rules::ProcessConditionsCache: 105 KB; BatchSerializer::EventsQueueTag: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34054 KB;
2026-03-26 06:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 06:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 06:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 06:56:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 06:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2187 KB; ProcessInfo: 644 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; BaseEvent: 152 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 115 KB; rules::ProcessConditionsCache: 105 KB; BatchSerializer::EventsQueueTag: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33998 KB;
2026-03-26 06:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2190 KB; ProcessInfo: 646 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 385 KB; CacheEntry: 311 KB; BaseEvent: 156 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 64 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33971 KB;
2026-03-26 06:57:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:50:53, To:, 2026-03-26 06:57:39, Duration (s):, 406, Events Per Second:, 2.310, Events:, 938, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 791, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 136, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106860
2026-03-26 06:57:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s995ms.
2026-03-26 06:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2190 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; ProcessInfo: 346 KB; CacheEntry: 311 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 135 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33529 KB;
2026-03-26 06:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 06:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 06:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2192 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 385 KB; ProcessInfo: 346 KB; CacheEntry: 312 KB; cloudutils::CloudData: 150 KB; rules::ProcessConditionsCache: 135 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33536 KB;
2026-03-26 07:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2192 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 387 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33637 KB;
2026-03-26 07:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:01:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2192 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 409 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 149 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33661 KB;
2026-03-26 07:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2193 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 462 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 118 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33827 KB;
2026-03-26 07:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2193 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 490 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 260 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 118 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33907 KB;
2026-03-26 07:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2193 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 514 KB; ModuleInfoCache: 385 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 103 KB; BaseEvent: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33961 KB;
2026-03-26 07:04:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 06:57:57, To:, 2026-03-26 07:04:39, Duration (s):, 402, Events Per Second:, 1.492, Events:, 600, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 503, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 8, Livegrid:, 8, OriginUrl:, 0, Alarms:, 80, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70281
2026-03-26 07:04:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s832ms.
2026-03-26 07:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2195 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 425 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 312 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33779 KB;
2026-03-26 07:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:06:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2196 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 425 KB; ModuleInfoCache: 385 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 312 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33773 KB;
2026-03-26 07:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2196 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 425 KB; ModuleInfoCache: 386 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 312 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33765 KB;
2026-03-26 07:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2198 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 450 KB; ModuleInfoCache: 386 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 312 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33836 KB;
2026-03-26 07:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2198 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 549 KB; ModuleInfoCache: 386 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 263 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 87 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34037 KB;
2026-03-26 07:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2198 KB; ProcessInfo: 729 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 386 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 303 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 150 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 96 KB; BaseEvent: 79 KB; ProcessInfoCommandLineTag: 50 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34421 KB;
2026-03-26 07:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:11:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2198 KB; ProcessInfo: 806 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 386 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 228 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 150 KB; BaseEvent: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; ProcessInfoCommandLineTag: 50 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34396 KB;
2026-03-26 07:11:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:05:00, To:, 2026-03-26 07:11:39, Duration (s):, 399, Events Per Second:, 2.636, Events:, 1052, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 977, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 62, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 127689
2026-03-26 07:11:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s951ms.
2026-03-26 07:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2198 KB; ProcessInfo: 666 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 386 KB; CacheEntry: 312 KB; TcpIpConnectionsManager: 230 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34080 KB;
2026-03-26 07:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2198 KB; ProcessInfo: 738 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 386 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 259 KB; TcpIpConnectionsManager: 218 KB; cloudutils::CloudData: 150 KB; ProcessInfoCommandLineTag: 51 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34276 KB;
2026-03-26 07:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2198 KB; ProcessInfo: 750 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 386 KB; CacheEntry: 312 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 53 KB; ProcessInfoCommandLineTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34232 KB;
2026-03-26 07:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2200 KB; ProcessInfo: 772 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 150 KB; TcpIpConnectionsManager: 116 KB; BaseEvent: 60 KB; ProcessInfoCommandLineTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34250 KB;
2026-03-26 07:16:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:16:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:16:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:16:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 818 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 386 KB; rules::ProcessConditionsCache: 337 KB; CacheEntry: 313 KB; cloudutils::CloudData: 151 KB; TcpIpConnectionsManager: 121 KB; BaseEvent: 77 KB; ProcessInfoCommandLineTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34405 KB;
2026-03-26 07:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 295 KB; cloudutils::CloudData: 151 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 84 KB; ProcessInfoCommandLineTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34371 KB;
2026-03-26 07:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1141 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 262 KB; TcpIpConnectionsManager: 244 KB; BaseEvent: 229 KB; cloudutils::CloudData: 151 KB; BatchSerializer::EventsQueueTag: 66 KB; ProcessInfoCommandLineTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34958 KB;
2026-03-26 07:18:39 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:11:39, To:, 2026-03-26 07:18:39, Duration (s):, 420, Events Per Second:, 3.771, Events:, 1584, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1339, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 234, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 177880
2026-03-26 07:18:40 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s972ms.
2026-03-26 07:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1007 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 386 KB; TcpIpConnectionsManager: 371 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 151 KB; BaseEvent: 127 KB; BatchSerializer::EventsQueueTag: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34677 KB;
2026-03-26 07:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1387 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 499 KB; ModuleInfoCache: 386 KB; BaseEvent: 316 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 151 KB; BatchSerializer::EventsQueueTag: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35453 KB;
2026-03-26 07:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:21:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1740 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 528 KB; BaseEvent: 487 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 151 KB; BatchSerializer::EventsQueueTag: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36027 KB;
2026-03-26 07:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 2106 KB; BaseEvent: 662 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 536 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 250 KB; BatchSerializer::EventsQueueTag: 175 KB; cloudutils::CloudData: 151 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36694 KB;
2026-03-26 07:22:46 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:18:38, To:, 2026-03-26 07:22:46, Duration (s):, 248, Events Per Second:, 16.549, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3412, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 698, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455232
2026-03-26 07:22:49 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s694ms.
2026-03-26 07:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1628 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 151 KB; BaseEvent: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35607 KB;
2026-03-26 07:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2201 KB; ProcessInfo: 1968 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 657 KB; TcpIpConnectionsManager: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; BaseEvent: 274 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36238 KB;
2026-03-26 07:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2247 KB; ModuleMetadata: 2201 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 533 KB; BaseEvent: 411 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36484 KB;
2026-03-26 07:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:26:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2366 KB; ModuleMetadata: 2201 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 470 KB; TcpIpConnectionsManager: 408 KB; ModuleInfoCache: 386 KB; CacheEntry: 313 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 150 KB; BatchSerializer::EventsQueueTag: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36692 KB;
2026-03-26 07:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2366 KB; ModuleMetadata: 2204 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 556 KB; BaseEvent: 474 KB; ModuleInfoCache: 386 KB; CacheEntry: 315 KB; rules::ProcessConditionsCache: 297 KB; TcpIpConnectionsManager: 257 KB; cloudutils::CloudData: 151 KB; BatchSerializer::EventsQueueTag: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36556 KB;
2026-03-26 07:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2460 KB; ModuleMetadata: 2206 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 510 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 386 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 151 KB; BatchSerializer::EventsQueueTag: 142 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36704 KB;
2026-03-26 07:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ProcessInfo: 2511 KB; ModuleMetadata: 2206 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; BaseEvent: 537 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 386 KB; CacheEntry: 315 KB; cloudutils::CloudData: 151 KB; TcpIpConnectionsManager: 149 KB; BatchSerializer::EventsQueueTag: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36724 KB;
2026-03-26 07:29:46 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:22:45, To:, 2026-03-26 07:29:46, Duration (s):, 421, Events Per Second:, 7.437, Events:, 3135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2596, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 25, Livegrid:, 25, OriginUrl:, 0, Alarms:, 488, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 346952
2026-03-26 07:29:47 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s135ms.
2026-03-26 07:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2206 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 536 KB; ModuleInfoCache: 386 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 220 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 151 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33923 KB;
2026-03-26 07:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:31:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2206 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 541 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 386 KB; CacheEntry: 315 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 151 KB; rules::ProcessConditionsCache: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33776 KB;
2026-03-26 07:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2209 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 541 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 126 KB; rules::ProcessConditionsCache: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33746 KB;
2026-03-26 07:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2209 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 387 KB; CacheEntry: 315 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 108 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33788 KB;
2026-03-26 07:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2210 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33934 KB;
2026-03-26 07:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2210 KB; ProcessInfo: 611 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 126 KB; rules::ProcessConditionsCache: 88 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33868 KB;
2026-03-26 07:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:36:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2212 KB; ProcessInfo: 611 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 86 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33868 KB;
2026-03-26 07:36:46 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:29:52, To:, 2026-03-26 07:36:46, Duration (s):, 414, Events Per Second:, 0.996, Events:, 413, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 9, Livegrid:, 9, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 49180
2026-03-26 07:36:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s580ms.
2026-03-26 07:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2212 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 392 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33678 KB;
2026-03-26 07:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2212 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 392 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 110 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33597 KB;
2026-03-26 07:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2212 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 494 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33863 KB;
2026-03-26 07:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2212 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 152 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34102 KB;
2026-03-26 07:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:41:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2214 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 387 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 258 KB; TcpIpConnectionsManager: 213 KB; cloudutils::CloudData: 152 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34217 KB;
2026-03-26 07:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2217 KB; ProcessInfo: 630 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; TcpIpConnectionsManager: 179 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 152 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34100 KB;
2026-03-26 07:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2217 KB; ProcessInfo: 700 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 293 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 152 KB; BaseEvent: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34332 KB;
2026-03-26 07:43:46 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:37:05, To:, 2026-03-26 07:43:46, Duration (s):, 401, Events Per Second:, 2.368, Events:, 951, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 893, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 111953
2026-03-26 07:43:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s931ms.
2026-03-26 07:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2218 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 415 KB; ModuleInfoCache: 388 KB; CacheEntry: 316 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33757 KB;
2026-03-26 07:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2218 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 468 KB; ModuleInfoCache: 389 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33962 KB;
2026-03-26 07:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:46:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2220 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 468 KB; ModuleInfoCache: 390 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 306 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33943 KB;
2026-03-26 07:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2220 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 468 KB; ModuleInfoCache: 390 KB; CacheEntry: 317 KB; rules::ProcessConditionsCache: 306 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33911 KB;
2026-03-26 07:48:23 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2221 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 468 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 306 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33899 KB;
2026-03-26 07:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2221 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 468 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 306 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33899 KB;
2026-03-26 07:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2221 KB; ProcessInfo: 765 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 373 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 272 KB; rules::ProcessConditionsCache: 248 KB; cloudutils::CloudData: 152 KB; BaseEvent: 140 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34938 KB;
2026-03-26 07:50:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:43:46, To:, 2026-03-26 07:50:46, Duration (s):, 420, Events Per Second:, 2.549, Events:, 1072, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 946, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 117, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 130756
2026-03-26 07:50:49 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s138ms.
2026-03-26 07:51:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:51:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:51:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:51:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2221 KB; ProcessInfo: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; TcpIpConnectionsManager: 377 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 307 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 152 KB; BaseEvent: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34786 KB;
2026-03-26 07:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2221 KB; ProcessInfo: 969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 469 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; cloudutils::CloudData: 152 KB; BaseEvent: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 82 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35086 KB;
2026-03-26 07:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2221 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; TcpIpConnectionsManager: 362 KB; CacheEntry: 318 KB; BaseEvent: 165 KB; cloudutils::CloudData: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 82 KB; rules::ProcessConditionsCache: 80 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34784 KB;
2026-03-26 07:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2223 KB; ProcessInfo: 1066 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 218 KB; BaseEvent: 180 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 69 KB; BatchSerializer::EventsQueueTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34665 KB;
2026-03-26 07:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2223 KB; ProcessInfo: 1094 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; BaseEvent: 193 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 126 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 72 KB; BatchSerializer::EventsQueueTag: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34639 KB;
2026-03-26 07:56:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 07:56:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 07:56:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 07:56:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 07:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2223 KB; ProcessInfo: 1142 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; BaseEvent: 217 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 75 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34761 KB;
2026-03-26 07:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2225 KB; ProcessInfo: 1148 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; BaseEvent: 219 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 71 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34735 KB;
2026-03-26 07:57:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:50:45, To:, 2026-03-26 07:57:47, Duration (s):, 422, Events Per Second:, 3.466, Events:, 1463, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1261, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 195, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 171304
2026-03-26 07:57:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s936ms.
2026-03-26 07:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2225 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 415 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33803 KB;
2026-03-26 07:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 07:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 07:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2225 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 420 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33759 KB;
2026-03-26 08:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2226 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 461 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33885 KB;
2026-03-26 08:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:01:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2226 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 487 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 299 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33915 KB;
2026-03-26 08:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2226 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 512 KB; ModuleInfoCache: 390 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 318 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34008 KB;
2026-03-26 08:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2226 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 512 KB; ModuleInfoCache: 390 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 318 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33995 KB;
2026-03-26 08:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2226 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 512 KB; ModuleInfoCache: 390 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 318 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 65 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33983 KB;
2026-03-26 08:04:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 07:58:03, To:, 2026-03-26 08:04:47, Duration (s):, 404, Events Per Second:, 0.878, Events:, 355, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 246, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 36, Livegrid:, 36, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 42309
2026-03-26 08:04:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s847ms.
2026-03-26 08:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2226 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 390 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 318 KB; ProcessInfo: 299 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33677 KB;
2026-03-26 08:06:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:06:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:06:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:06:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2226 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 390 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 318 KB; ProcessInfo: 299 KB; cloudutils::CloudData: 152 KB; TcpIpConnectionsManager: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33677 KB;
2026-03-26 08:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 390 KB; rules::ProcessConditionsCache: 353 KB; ProcessInfo: 323 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33742 KB;
2026-03-26 08:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 447 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 44 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33717 KB;
2026-03-26 08:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 519 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 74 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33875 KB;
2026-03-26 08:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 534 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 96 KB; BaseEvent: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33930 KB;
2026-03-26 08:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:11:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 569 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 103 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33887 KB;
2026-03-26 08:11:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:02:07, To:, 2026-03-26 08:11:47, Duration (s):, 580, Events Per Second:, 1.932, Events:, 1121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 999, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 115, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 129596
2026-03-26 08:11:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s995ms.
2026-03-26 08:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 765 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 153 KB; BaseEvent: 104 KB; rules::ProcessConditionsCache: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34235 KB;
2026-03-26 08:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 390 KB; TcpIpConnectionsManager: 384 KB; CacheEntry: 318 KB; BaseEvent: 281 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 74 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34949 KB;
2026-03-26 08:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1462 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 508 KB; BaseEvent: 447 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35590 KB;
2026-03-26 08:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1828 KB; BaseEvent: 629 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; TcpIpConnectionsManager: 499 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; BatchSerializer::EventsQueueTag: 164 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 22 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36165 KB;
2026-03-26 08:16:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:11:48, To:, 2026-03-26 08:16:02, Duration (s):, 254, Events Per Second:, 16.152, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452826
2026-03-26 08:16:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s241ms.
2026-03-26 08:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:16:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1483 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 505 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35493 KB;
2026-03-26 08:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 1850 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 518 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; BaseEvent: 225 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36082 KB;
2026-03-26 08:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 2201 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; TcpIpConnectionsManager: 512 KB; BaseEvent: 402 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36624 KB;
2026-03-26 08:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ProcessInfo: 2347 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; BaseEvent: 466 KB; TcpIpConnectionsManager: 444 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 135 KB; BatchSerializer::EventsQueueTag: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36525 KB;
2026-03-26 08:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ProcessInfo: 2354 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; BaseEvent: 470 KB; ModuleInfoCache: 390 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 289 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 144 KB; BatchSerializer::EventsQueueTag: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36397 KB;
2026-03-26 08:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:21:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ProcessInfo: 2455 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 513 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36544 KB;
2026-03-26 08:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ProcessInfo: 2455 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; BaseEvent: 516 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 140 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36455 KB;
2026-03-26 08:23:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:16:01, To:, 2026-03-26 08:23:02, Duration (s):, 421, Events Per Second:, 6.972, Events:, 2942, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2459, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 480, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 326629
2026-03-26 08:23:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s108ms.
2026-03-26 08:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 409 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33753 KB;
2026-03-26 08:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 434 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 251 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33791 KB;
2026-03-26 08:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 509 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 320 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34002 KB;
2026-03-26 08:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:26:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 511 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 309 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33998 KB;
2026-03-26 08:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 583 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34197 KB;
2026-03-26 08:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 619 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 388 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34265 KB;
2026-03-26 08:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2228 KB; ProcessInfo: 668 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 144 KB; BaseEvent: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::ProcessConditionsCache: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34000 KB;
2026-03-26 08:30:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:23:13, To:, 2026-03-26 08:30:02, Duration (s):, 409, Events Per Second:, 1.746, Events:, 716, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 618, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 95, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 83351
2026-03-26 08:30:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s775ms.
2026-03-26 08:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 431 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 108 KB; rules::ProcessConditionsCache: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33617 KB;
2026-03-26 08:31:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:31:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:31:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:31:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 487 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 120 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33747 KB;
2026-03-26 08:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 493 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 135 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33765 KB;
2026-03-26 08:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 224 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34021 KB;
2026-03-26 08:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 129 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33910 KB;
2026-03-26 08:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 174 KB; rules::ProcessConditionsCache: 162 KB; cloudutils::CloudData: 153 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34047 KB;
2026-03-26 08:36:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:36:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:36:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:36:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 179 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 153 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34139 KB;
2026-03-26 08:37:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:30:02, To:, 2026-03-26 08:37:02, Duration (s):, 420, Events Per Second:, 2.021, Events:, 851, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 761, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 81, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 98431
2026-03-26 08:37:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s814ms.
2026-03-26 08:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 487 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 256 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33921 KB;
2026-03-26 08:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 537 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34081 KB;
2026-03-26 08:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 313 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 152 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34173 KB;
2026-03-26 08:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 631 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34175 KB;
2026-03-26 08:41:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:41:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:41:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:41:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 656 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34218 KB;
2026-03-26 08:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 721 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; rules::ProcessConditionsCache: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33968 KB;
2026-03-26 08:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 145 KB; BaseEvent: 139 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34324 KB;
2026-03-26 08:44:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:37:33, To:, 2026-03-26 08:44:02, Duration (s):, 389, Events Per Second:, 2.872, Events:, 1120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 979, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 140, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 128439
2026-03-26 08:44:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s945ms.
2026-03-26 08:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 593 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 240 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34042 KB;
2026-03-26 08:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 653 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 322 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 212 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34236 KB;
2026-03-26 08:46:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:46:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:46:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:46:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 706 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 322 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 153 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34301 KB;
2026-03-26 08:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 752 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 153 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34417 KB;
2026-03-26 08:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 778 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 153 KB; BaseEvent: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34427 KB;
2026-03-26 08:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 807 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 357 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34454 KB;
2026-03-26 08:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 153 KB; BaseEvent: 120 KB; rules::ProcessConditionsCache: 84 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34328 KB;
2026-03-26 08:51:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:44:05, To:, 2026-03-26 08:51:03, Duration (s):, 418, Events Per Second:, 2.065, Events:, 863, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 784, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 78, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 99839
2026-03-26 08:51:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s943ms.
2026-03-26 08:51:10 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:51:10 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:51:10 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:51:10 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 437 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33667 KB;
2026-03-26 08:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 486 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 134 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33796 KB;
2026-03-26 08:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 533 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33945 KB;
2026-03-26 08:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 193 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 153 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34011 KB;
2026-03-26 08:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 580 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33975 KB;
2026-03-26 08:56:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 08:56:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 08:56:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 08:56:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 08:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 611 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34054 KB;
2026-03-26 08:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 612 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34011 KB;
2026-03-26 08:58:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:51:27, To:, 2026-03-26 08:58:03, Duration (s):, 396, Events Per Second:, 1.326, Events:, 525, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 478, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63256
2026-03-26 08:58:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s789ms.
2026-03-26 08:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; ProcessInfo: 362 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33681 KB;
2026-03-26 08:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 08:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 08:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 423 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33844 KB;
2026-03-26 09:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 283 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33995 KB;
2026-03-26 09:01:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:01:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:01:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:01:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; rules::ProcessConditionsCache: 298 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 102 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34025 KB;
2026-03-26 09:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34163 KB;
2026-03-26 09:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 599 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 318 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34189 KB;
2026-03-26 09:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; ProcessInfo: 678 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 153 KB; BaseEvent: 120 KB; BatchSerializer::EventsQueueTag: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34427 KB;
2026-03-26 09:05:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 08:58:02, To:, 2026-03-26 09:05:03, Duration (s):, 421, Events Per Second:, 2.209, Events:, 930, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 844, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 83, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 110487
2026-03-26 09:05:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s927ms.
2026-03-26 09:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 509 KB; ModuleInfoCache: 391 KB; CacheEntry: 318 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33834 KB;
2026-03-26 09:06:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:06:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:06:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:06:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33958 KB;
2026-03-26 09:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 603 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33981 KB;
2026-03-26 09:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 627 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 71 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33972 KB;
2026-03-26 09:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 741 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 106 KB; BaseEvent: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34189 KB;
2026-03-26 09:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 838 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 205 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 152 KB; BaseEvent: 126 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34433 KB;
2026-03-26 09:11:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:11:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:11:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:11:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 891 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 218 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 152 KB; BaseEvent: 148 KB; BatchSerializer::EventsQueueTag: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34526 KB;
2026-03-26 09:12:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:04:54, To:, 2026-03-26 09:12:03, Duration (s):, 429, Events Per Second:, 2.610, Events:, 1120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1044, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 133535
2026-03-26 09:12:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s945ms.
2026-03-26 09:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33945 KB;
2026-03-26 09:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 712 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34448 KB;
2026-03-26 09:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 286 KB; TcpIpConnectionsManager: 254 KB; BaseEvent: 200 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34787 KB;
2026-03-26 09:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1242 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; TcpIpConnectionsManager: 367 KB; BaseEvent: 331 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35281 KB;
2026-03-26 09:16:11 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:16:11 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:16:11 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:16:11 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1602 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; BaseEvent: 493 KB; TcpIpConnectionsManager: 484 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35954 KB;
2026-03-26 09:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1702 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 548 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; TcpIpConnectionsManager: 405 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36120 KB;
2026-03-26 09:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1802 KB; BaseEvent: 589 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 391 KB; TcpIpConnectionsManager: 346 KB; CacheEntry: 319 KB; BatchSerializer::EventsQueueTag: 161 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36010 KB;
2026-03-26 09:19:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:12:06, To:, 2026-03-26 09:19:03, Duration (s):, 417, Events Per Second:, 8.613, Events:, 3592, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3009, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 582, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 398343
2026-03-26 09:19:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s163ms.
2026-03-26 09:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 261 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34322 KB;
2026-03-26 09:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 948 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 251 KB; cloudutils::CloudData: 152 KB; BaseEvent: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34694 KB;
2026-03-26 09:21:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:21:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:21:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:21:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1069 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 262 KB; BaseEvent: 160 KB; cloudutils::CloudData: 152 KB; rules::ProcessConditionsCache: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34633 KB;
2026-03-26 09:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1144 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 216 KB; BaseEvent: 199 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34795 KB;
2026-03-26 09:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1238 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 250 KB; BaseEvent: 240 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35007 KB;
2026-03-26 09:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1313 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 312 KB; BaseEvent: 277 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35168 KB;
2026-03-26 09:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1352 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 319 KB; BaseEvent: 290 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 152 KB; BatchSerializer::EventsQueueTag: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35254 KB;
2026-03-26 09:26:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:19:02, To:, 2026-03-26 09:26:03, Duration (s):, 421, Events Per Second:, 4.332, Events:, 1824, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1535, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 286, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 204938
2026-03-26 09:26:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s984ms.
2026-03-26 09:26:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:26:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:26:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:26:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 583 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::ProcessConditionsCache: 36 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33825 KB;
2026-03-26 09:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 694 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 153 KB; BaseEvent: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34251 KB;
2026-03-26 09:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 863 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 264 KB; BaseEvent: 186 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34726 KB;
2026-03-26 09:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 257 KB; BaseEvent: 223 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34898 KB;
2026-03-26 09:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1095 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; BaseEvent: 314 KB; TcpIpConnectionsManager: 254 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34954 KB;
2026-03-26 09:31:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:31:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:31:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:31:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1158 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 391 KB; BaseEvent: 347 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 234 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35050 KB;
2026-03-26 09:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 1208 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 391 KB; BaseEvent: 372 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 291 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35177 KB;
2026-03-26 09:33:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:26:06, To:, 2026-03-26 09:33:03, Duration (s):, 417, Events Per Second:, 5.071, Events:, 2115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1637, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 98, Livegrid:, 98, OriginUrl:, 0, Alarms:, 281, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 233721
2026-03-26 09:33:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s094ms.
2026-03-26 09:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 517 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34048 KB;
2026-03-26 09:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 517 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33954 KB;
2026-03-26 09:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 166 KB; cloudutils::CloudData: 153 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34224 KB;
2026-03-26 09:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:36:12 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 619 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 368 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34212 KB;
2026-03-26 09:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 644 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::ProcessConditionsCache: 392 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34272 KB;
2026-03-26 09:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2231 KB; ProcessInfo: 705 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33983 KB;
2026-03-26 09:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 804 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; BaseEvent: 154 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 143 KB; TcpIpConnectionsManager: 139 KB; BatchSerializer::EventsQueueTag: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34329 KB;
2026-03-26 09:40:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:33:02, To:, 2026-03-26 09:40:03, Duration (s):, 421, Events Per Second:, 2.344, Events:, 987, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 779, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 62, Livegrid:, 62, OriginUrl:, 0, Alarms:, 83, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115294
2026-03-26 09:40:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s964ms.
2026-03-26 09:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33925 KB;
2026-03-26 09:41:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:41:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:41:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:41:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 170 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33962 KB;
2026-03-26 09:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 599 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 195 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34077 KB;
2026-03-26 09:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 189 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 153 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34087 KB;
2026-03-26 09:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34073 KB;
2026-03-26 09:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 655 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34091 KB;
2026-03-26 09:46:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:46:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:46:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:46:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 716 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 257 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34289 KB;
2026-03-26 09:47:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:40:02, To:, 2026-03-26 09:47:03, Duration (s):, 421, Events Per Second:, 1.605, Events:, 676, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 610, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 9, Livegrid:, 9, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79210
2026-03-26 09:47:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s790ms.
2026-03-26 09:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 391 KB; ProcessInfo: 386 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33747 KB;
2026-03-26 09:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 420 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 251 KB; TcpIpConnectionsManager: 156 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33859 KB;
2026-03-26 09:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 423 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33795 KB;
2026-03-26 09:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 231 KB; cloudutils::CloudData: 153 KB; BaseEvent: 131 KB; rules::ProcessConditionsCache: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34253 KB;
2026-03-26 09:51:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:51:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:51:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:51:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 791 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 253 KB; rules::ProcessConditionsCache: 229 KB; BaseEvent: 180 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34526 KB;
2026-03-26 09:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 843 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 282 KB; TcpIpConnectionsManager: 257 KB; BaseEvent: 206 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34674 KB;
2026-03-26 09:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; ProcessInfo: 853 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 277 KB; BaseEvent: 210 KB; TcpIpConnectionsManager: 154 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34575 KB;
2026-03-26 09:54:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:47:11, To:, 2026-03-26 09:54:03, Duration (s):, 412, Events Per Second:, 3.072, Events:, 1266, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1088, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 177, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 143055
2026-03-26 09:54:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s047ms.
2026-03-26 09:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 392 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 303 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33835 KB;
2026-03-26 09:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 402 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 314 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33862 KB;
2026-03-26 09:56:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 09:56:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 09:56:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 09:56:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 09:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2232 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 409 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33869 KB;
2026-03-26 09:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 411 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 317 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33865 KB;
2026-03-26 09:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 420 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33893 KB;
2026-03-26 09:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 09:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 09:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 420 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33887 KB;
2026-03-26 10:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 434 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 334 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33927 KB;
2026-03-26 10:01:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 09:54:02, To:, 2026-03-26 10:01:03, Duration (s):, 421, Events Per Second:, 0.724, Events:, 305, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 225, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 28, Livegrid:, 28, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37979
2026-03-26 10:01:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s663ms.
2026-03-26 10:01:13 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:01:13 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:01:13 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:01:13 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 446 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33730 KB;
2026-03-26 10:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 697 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 243 KB; BaseEvent: 155 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34500 KB;
2026-03-26 10:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 391 KB; TcpIpConnectionsManager: 323 KB; CacheEntry: 319 KB; BaseEvent: 251 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34715 KB;
2026-03-26 10:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 1045 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 391 KB; TcpIpConnectionsManager: 358 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 319 KB; BaseEvent: 317 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35180 KB;
2026-03-26 10:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 1170 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::ProcessConditionsCache: 423 KB; ModuleInfoCache: 391 KB; BaseEvent: 383 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 279 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35384 KB;
2026-03-26 10:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:06:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 1291 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; BaseEvent: 435 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 265 KB; cloudutils::CloudData: 153 KB; rules::ProcessConditionsCache: 135 KB; BatchSerializer::EventsQueueTag: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35271 KB;
2026-03-26 10:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 1410 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 488 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 266 KB; rules::ProcessConditionsCache: 249 KB; cloudutils::CloudData: 153 KB; BatchSerializer::EventsQueueTag: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35582 KB;
2026-03-26 10:08:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:01:05, To:, 2026-03-26 10:08:03, Duration (s):, 418, Events Per Second:, 7.253, Events:, 3033, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2559, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 471, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 335760
2026-03-26 10:08:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s144ms.
2026-03-26 10:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 247 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34327 KB;
2026-03-26 10:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 784 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 384 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 201 KB; cloudutils::CloudData: 153 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34473 KB;
2026-03-26 10:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 791 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 142 KB; BaseEvent: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34447 KB;
2026-03-26 10:11:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:11:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:11:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:11:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 386 KB; CacheEntry: 319 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 106 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34395 KB;
2026-03-26 10:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 799 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 391 KB; rules::ProcessConditionsCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 68 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34375 KB;
2026-03-26 10:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 91 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34073 KB;
2026-03-26 10:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; ProcessInfo: 847 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 116 KB; BaseEvent: 67 KB; rules::ProcessConditionsCache: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34117 KB;
2026-03-26 10:15:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:08:12, To:, 2026-03-26 10:15:03, Duration (s):, 411, Events Per Second:, 1.469, Events:, 604, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 554, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72177
2026-03-26 10:15:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s865ms.
2026-03-26 10:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 391 KB; ProcessInfo: 380 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 124 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33588 KB;
2026-03-26 10:16:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:16:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:16:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:16:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 391 KB; ProcessInfo: 383 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 112 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33596 KB;
2026-03-26 10:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 391 KB; ProcessInfo: 386 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 71 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33567 KB;
2026-03-26 10:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2234 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 398 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 71 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33578 KB;
2026-03-26 10:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 398 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 71 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33587 KB;
2026-03-26 10:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 439 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 106 KB; TcpIpConnectionsManager: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33705 KB;
2026-03-26 10:21:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:21:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:21:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:21:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 467 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33802 KB;
2026-03-26 10:22:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:15:07, To:, 2026-03-26 10:22:03, Duration (s):, 416, Events Per Second:, 0.617, Events:, 257, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 242, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 10, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 32926
2026-03-26 10:22:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s633ms.
2026-03-26 10:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 391 KB; ProcessInfo: 378 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 119 KB; rules::ProcessConditionsCache: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33620 KB;
2026-03-26 10:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 391 KB; ProcessInfo: 386 KB; CacheEntry: 319 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 111 KB; TcpIpConnectionsManager: 104 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33640 KB;
2026-03-26 10:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 431 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33815 KB;
2026-03-26 10:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 483 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 203 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 154 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33908 KB;
2026-03-26 10:26:14 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:26:14 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:26:14 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:26:14 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2235 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 508 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 168 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 140 KB; BaseEvent: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33898 KB;
2026-03-26 10:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2237 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 391 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 140 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33917 KB;
2026-03-26 10:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2237 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 140 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33976 KB;
2026-03-26 10:29:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:22:01, To:, 2026-03-26 10:29:03, Duration (s):, 422, Events Per Second:, 1.120, Events:, 473, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 449, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 21, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56932
2026-03-26 10:29:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s808ms.
2026-03-26 10:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2237 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 392 KB; ProcessInfo: 355 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33651 KB;
2026-03-26 10:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; ProcessInfo: 367 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33682 KB;
2026-03-26 10:31:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:31:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:31:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:31:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 434 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 276 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 140 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33918 KB;
2026-03-26 10:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 439 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33815 KB;
2026-03-26 10:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 503 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 225 KB; TcpIpConnectionsManager: 193 KB; cloudutils::CloudData: 155 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34015 KB;
2026-03-26 10:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 508 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 155 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33962 KB;
2026-03-26 10:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 543 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 153 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34057 KB;
2026-03-26 10:36:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:29:40, To:, 2026-03-26 10:36:03, Duration (s):, 383, Events Per Second:, 1.456, Events:, 558, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 541, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67665
2026-03-26 10:36:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s904ms.
2026-03-26 10:36:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:36:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:36:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:36:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 392 KB; ProcessInfo: 389 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33755 KB;
2026-03-26 10:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; ProcessInfo: 389 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33750 KB;
2026-03-26 10:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 439 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 254 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33892 KB;
2026-03-26 10:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 760 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 202 KB; BaseEvent: 174 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 155 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34404 KB;
2026-03-26 10:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 1107 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; TcpIpConnectionsManager: 365 KB; BaseEvent: 332 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 155 KB; BatchSerializer::EventsQueueTag: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35133 KB;
2026-03-26 10:41:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:41:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:41:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:41:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 1271 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; TcpIpConnectionsManager: 422 KB; BaseEvent: 409 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; BatchSerializer::EventsQueueTag: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35594 KB;
2026-03-26 10:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 1273 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; BaseEvent: 411 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 309 KB; cloudutils::CloudData: 155 KB; BatchSerializer::EventsQueueTag: 114 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35467 KB;
2026-03-26 10:43:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:36:02, To:, 2026-03-26 10:43:03, Duration (s):, 421, Events Per Second:, 5.743, Events:, 2419, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2050, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 368, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 272010
2026-03-26 10:43:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s099ms.
2026-03-26 10:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 596 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 171 KB; cloudutils::CloudData: 155 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34130 KB;
2026-03-26 10:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 621 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 117 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34101 KB;
2026-03-26 10:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 627 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 328 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34093 KB;
2026-03-26 10:46:15 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:46:15 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:46:15 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:46:15 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 641 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 363 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34165 KB;
2026-03-26 10:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 653 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 330 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34127 KB;
2026-03-26 10:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 660 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34152 KB;
2026-03-26 10:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 763 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 137 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 21 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34057 KB;
2026-03-26 10:50:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:42:58, To:, 2026-03-26 10:50:03, Duration (s):, 425, Events Per Second:, 1.848, Events:, 786, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 692, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 93, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 92116
2026-03-26 10:50:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s805ms.
2026-03-26 10:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 611 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 209 KB; cloudutils::CloudData: 155 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34152 KB;
2026-03-26 10:51:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:51:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:51:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:51:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 712 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 339 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 247 KB; cloudutils::CloudData: 155 KB; BaseEvent: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34430 KB;
2026-03-26 10:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 744 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 392 KB; rules::ProcessConditionsCache: 367 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 219 KB; cloudutils::CloudData: 155 KB; BaseEvent: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34485 KB;
2026-03-26 10:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 776 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 160 KB; cloudutils::CloudData: 155 KB; BaseEvent: 105 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34155 KB;
2026-03-26 10:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 846 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 139 KB; BaseEvent: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34380 KB;
2026-03-26 10:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 155 KB; BaseEvent: 154 KB; rules::ProcessConditionsCache: 120 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34470 KB;
2026-03-26 10:56:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 10:56:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 10:56:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 10:56:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 10:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; TcpIpConnectionsManager: 180 KB; BaseEvent: 175 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 146 KB; BatchSerializer::EventsQueueTag: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34535 KB;
2026-03-26 10:57:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:50:01, To:, 2026-03-26 10:57:03, Duration (s):, 422, Events Per Second:, 2.709, Events:, 1144, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1007, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 136, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 132600
2026-03-26 10:57:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s939ms.
2026-03-26 10:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 439 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 147 KB; rules::ProcessConditionsCache: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33772 KB;
2026-03-26 10:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 497 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 243 KB; TcpIpConnectionsManager: 157 KB; cloudutils::CloudData: 155 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33975 KB;
2026-03-26 10:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 10:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 10:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 546 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 204 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 142 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33988 KB;
2026-03-26 11:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 147 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34050 KB;
2026-03-26 11:01:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:01:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:01:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:01:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 597 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 142 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34100 KB;
2026-03-26 11:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 609 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 97 KB; BaseEvent: 66 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34080 KB;
2026-03-26 11:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; ProcessInfo: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 274 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34169 KB;
2026-03-26 11:04:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 10:57:32, To:, 2026-03-26 11:04:03, Duration (s):, 391, Events Per Second:, 1.347, Events:, 527, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 491, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 63353
2026-03-26 11:04:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s795ms.
2026-03-26 11:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; ProcessInfo: 370 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33747 KB;
2026-03-26 11:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 408 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 274 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33845 KB;
2026-03-26 11:06:16 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:06:16 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:06:16 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:06:16 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 424 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 280 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33874 KB;
2026-03-26 11:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2239 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 430 KB; ModuleInfoCache: 392 KB; CacheEntry: 319 KB; rules::ProcessConditionsCache: 274 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33874 KB;
2026-03-26 11:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 434 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33875 KB;
2026-03-26 11:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 490 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33951 KB;
2026-03-26 11:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 524 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 296 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 101 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34044 KB;
2026-03-26 11:11:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:04:22, To:, 2026-03-26 11:11:03, Duration (s):, 401, Events Per Second:, 1.101, Events:, 442, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 425, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 12, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55968
2026-03-26 11:11:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s792ms.
2026-03-26 11:11:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:11:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:11:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:11:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 408 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33858 KB;
2026-03-26 11:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 434 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 298 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33911 KB;
2026-03-26 11:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 644 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 132 KB; BaseEvent: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34175 KB;
2026-03-26 11:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 964 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 316 KB; BaseEvent: 268 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 73 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34759 KB;
2026-03-26 11:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 1182 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 408 KB; ModuleInfoCache: 392 KB; BaseEvent: 367 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 154 KB; BatchSerializer::EventsQueueTag: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35393 KB;
2026-03-26 11:16:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:16:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:16:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:16:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 1252 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; BaseEvent: 389 KB; TcpIpConnectionsManager: 369 KB; CacheEntry: 320 KB; cloudutils::CloudData: 154 KB; BatchSerializer::EventsQueueTag: 107 KB; rules::ProcessConditionsCache: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35293 KB;
2026-03-26 11:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 1326 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 420 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 277 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 139 KB; BatchSerializer::EventsQueueTag: 117 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35340 KB;
2026-03-26 11:18:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:11:01, To:, 2026-03-26 11:18:03, Duration (s):, 422, Events Per Second:, 5.972, Events:, 2522, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2148, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 373, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 281684
2026-03-26 11:18:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s179ms.
2026-03-26 11:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 531 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 197 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 154 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33941 KB;
2026-03-26 11:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 578 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 215 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 154 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34053 KB;
2026-03-26 11:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 586 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33935 KB;
2026-03-26 11:21:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:21:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:21:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:21:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 613 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 149 KB; rules::ProcessConditionsCache: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34000 KB;
2026-03-26 11:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 137 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33977 KB;
2026-03-26 11:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; ProcessInfo: 621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33950 KB;
2026-03-26 11:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1727 KB; ProcessInfo: 682 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35335 KB;
2026-03-26 11:25:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:18:14, To:, 2026-03-26 11:25:03, Duration (s):, 409, Events Per Second:, 1.336, Events:, 547, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 506, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 39, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65548
2026-03-26 11:25:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s982ms.
2026-03-26 11:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 398 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33765 KB;
2026-03-26 11:26:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:26:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:26:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:26:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2240 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 408 KB; ModuleInfoCache: 392 KB; CacheEntry: 320 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33797 KB;
2026-03-26 11:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2243 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 464 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 262 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33971 KB;
2026-03-26 11:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2243 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 464 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33873 KB;
2026-03-26 11:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2243 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 487 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 149 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33917 KB;
2026-03-26 11:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2243 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 518 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33989 KB;
2026-03-26 11:31:17 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:31:17 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:31:17 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:31:17 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 552 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34063 KB;
2026-03-26 11:32:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:25:05, To:, 2026-03-26 11:32:03, Duration (s):, 418, Events Per Second:, 1.087, Events:, 455, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 441, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55442
2026-03-26 11:32:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s792ms.
2026-03-26 11:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 395 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 249 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33826 KB;
2026-03-26 11:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 400 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33807 KB;
2026-03-26 11:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 415 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33820 KB;
2026-03-26 11:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 418 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33819 KB;
2026-03-26 11:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:36:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 442 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33874 KB;
2026-03-26 11:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 442 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33868 KB;
2026-03-26 11:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 442 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33872 KB;
2026-03-26 11:39:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:32:02, To:, 2026-03-26 11:39:03, Duration (s):, 421, Events Per Second:, 0.389, Events:, 164, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 161, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 21831
2026-03-26 11:39:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s640ms.
2026-03-26 11:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 353 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 239 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33762 KB;
2026-03-26 11:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 359 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 246 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33784 KB;
2026-03-26 11:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:41:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2245 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 371 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 250 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33772 KB;
2026-03-26 11:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2246 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 418 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 305 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33936 KB;
2026-03-26 11:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2246 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 477 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34076 KB;
2026-03-26 11:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; rules::ProcessConditionsCache: 412 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 153 KB; BaseEvent: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34317 KB;
2026-03-26 11:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 693 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 153 KB; BaseEvent: 149 KB; rules::ProcessConditionsCache: 98 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34275 KB;
2026-03-26 11:46:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:39:03, To:, 2026-03-26 11:46:03, Duration (s):, 420, Events Per Second:, 3.894, Events:, 1637, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 218, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 185456
2026-03-26 11:46:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s969ms.
2026-03-26 11:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:46:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 819 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 385 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 298 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34590 KB;
2026-03-26 11:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 821 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 387 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 261 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34561 KB;
2026-03-26 11:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 822 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 387 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34498 KB;
2026-03-26 11:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 822 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 385 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34380 KB;
2026-03-26 11:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 876 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; rules::ProcessConditionsCache: 49 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34164 KB;
2026-03-26 11:51:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:51:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:51:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:51:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 888 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 47 KB; rules::ProcessConditionsCache: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34145 KB;
2026-03-26 11:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; ProcessInfo: 938 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 111 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34332 KB;
2026-03-26 11:53:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:46:05, To:, 2026-03-26 11:53:03, Duration (s):, 418, Events Per Second:, 1.095, Events:, 458, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 412, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54887
2026-03-26 11:53:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms.
2026-03-26 11:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 390 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 125 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33622 KB;
2026-03-26 11:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 100 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33616 KB;
2026-03-26 11:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 467 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33899 KB;
2026-03-26 11:56:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 11:56:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 11:56:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 11:56:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 11:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2248 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 153 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33784 KB;
2026-03-26 11:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 499 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33882 KB;
2026-03-26 11:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 502 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 127 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33871 KB;
2026-03-26 11:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 11:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 11:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 142 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33900 KB;
2026-03-26 12:00:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 11:53:03, To:, 2026-03-26 12:00:03, Duration (s):, 420, Events Per Second:, 1.332, Events:, 560, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 499, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 60, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67222
2026-03-26 12:00:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s786ms.
2026-03-26 12:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 364 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; TcpIpConnectionsManager: 154 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34186 KB;
2026-03-26 12:01:18 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:01:18 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:01:18 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:01:18 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; ProcessInfo: 907 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; rules::ProcessConditionsCache: 353 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 308 KB; BaseEvent: 222 KB; cloudutils::CloudData: 154 KB; BatchSerializer::EventsQueueTag: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34916 KB;
2026-03-26 12:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; ProcessInfo: 1195 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 413 KB; ModuleInfoCache: 393 KB; BaseEvent: 366 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 154 KB; BatchSerializer::EventsQueueTag: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35368 KB;
2026-03-26 12:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; ProcessInfo: 1367 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 456 KB; BaseEvent: 432 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 154 KB; BatchSerializer::EventsQueueTag: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35616 KB;
2026-03-26 12:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; ProcessInfo: 1368 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 438 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 300 KB; cloudutils::CloudData: 154 KB; BatchSerializer::EventsQueueTag: 120 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35377 KB;
2026-03-26 12:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; ProcessInfo: 1395 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 453 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; TcpIpConnectionsManager: 189 KB; cloudutils::CloudData: 154 KB; BatchSerializer::EventsQueueTag: 126 KB; rules::ProcessConditionsCache: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35342 KB;
2026-03-26 12:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:06:19 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; ProcessInfo: 1398 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 473 KB; ModuleInfoCache: 393 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 134 KB; BatchSerializer::EventsQueueTag: 132 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35299 KB;
2026-03-26 12:07:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:00:05, To:, 2026-03-26 12:07:03, Duration (s):, 418, Events Per Second:, 6.591, Events:, 2758, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2271, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 37, Livegrid:, 37, OriginUrl:, 0, Alarms:, 412, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 304076
2026-03-26 12:07:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s189ms.
2026-03-26 12:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 336 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33599 KB;
2026-03-26 12:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2250 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 336 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33588 KB;
2026-03-26 12:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2251 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 336 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33589 KB;
2026-03-26 12:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2251 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 393 KB; ProcessInfo: 336 KB; CacheEntry: 321 KB; cloudutils::CloudData: 154 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33589 KB;
2026-03-26 12:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:11:19 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2251 KB; ProcessInfo: 575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 394 KB; CacheEntry: 322 KB; rules::ProcessConditionsCache: 261 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 154 KB; BaseEvent: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34188 KB;
2026-03-26 12:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; ProcessInfo: 581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 267 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 155 KB; BaseEvent: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34234 KB;
2026-03-26 12:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; ProcessInfo: 583 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 261 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 155 KB; BaseEvent: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34232 KB;
2026-03-26 12:14:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:05:44, To:, 2026-03-26 12:14:03, Duration (s):, 499, Events Per Second:, 1.323, Events:, 661, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 613, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79896
2026-03-26 12:14:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s829ms.
2026-03-26 12:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; ProcessInfo: 317 KB; rules::ProcessConditionsCache: 256 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33733 KB;
2026-03-26 12:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; ProcessInfo: 370 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33865 KB;
2026-03-26 12:16:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:16:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:16:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:16:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; ProcessInfo: 373 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33872 KB;
2026-03-26 12:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 411 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 326 KB; CacheEntry: 324 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33992 KB;
2026-03-26 12:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 415 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33941 KB;
2026-03-26 12:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 421 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 302 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33970 KB;
2026-03-26 12:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 428 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 302 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33959 KB;
2026-03-26 12:21:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:14:03, To:, 2026-03-26 12:21:03, Duration (s):, 420, Events Per Second:, 0.911, Events:, 383, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 357, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46494
2026-03-26 12:21:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s811ms.
2026-03-26 12:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:21:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; ProcessInfo: 352 KB; CacheEntry: 324 KB; rules::ProcessConditionsCache: 323 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33830 KB;
2026-03-26 12:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 402 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33750 KB;
2026-03-26 12:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 402 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33649 KB;
2026-03-26 12:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 406 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33650 KB;
2026-03-26 12:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 408 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33641 KB;
2026-03-26 12:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:26:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2267 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 411 KB; ModuleInfoCache: 397 KB; CacheEntry: 324 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33624 KB;
2026-03-26 12:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2268 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 436 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 69 KB; rules::ProcessConditionsCache: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33709 KB;
2026-03-26 12:28:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:21:30, To:, 2026-03-26 12:28:03, Duration (s):, 393, Events Per Second:, 1.118, Events:, 440, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 271, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 72, Livegrid:, 72, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48262
2026-03-26 12:28:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s911ms.
2026-03-26 12:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2268 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; ProcessInfo: 370 KB; CacheEntry: 325 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 127 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33685 KB;
2026-03-26 12:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2268 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; ProcessInfo: 373 KB; CacheEntry: 325 KB; cloudutils::CloudData: 155 KB; rules::ProcessConditionsCache: 121 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33681 KB;
2026-03-26 12:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2268 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 405 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 156 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33781 KB;
2026-03-26 12:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:31:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2268 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 428 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 155 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33874 KB;
2026-03-26 12:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 458 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 111 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33899 KB;
2026-03-26 12:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34019 KB;
2026-03-26 12:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 128 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34018 KB;
2026-03-26 12:35:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:28:02, To:, 2026-03-26 12:35:03, Duration (s):, 421, Events Per Second:, 1.127, Events:, 475, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 24, Livegrid:, 24, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 55680
2026-03-26 12:35:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s790ms.
2026-03-26 12:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; ProcessInfo: 393 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33875 KB;
2026-03-26 12:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:36:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; ProcessInfo: 393 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 217 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33793 KB;
2026-03-26 12:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 425 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 259 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33910 KB;
2026-03-26 12:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 506 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 325 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 151 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34181 KB;
2026-03-26 12:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 325 KB; rules::ProcessConditionsCache: 292 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34239 KB;
2026-03-26 12:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2271 KB; ProcessInfo: 638 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 156 KB; BaseEvent: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34462 KB;
2026-03-26 12:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:41:20 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2271 KB; ProcessInfo: 652 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 155 KB; BaseEvent: 125 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34403 KB;
2026-03-26 12:42:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:35:03, To:, 2026-03-26 12:42:03, Duration (s):, 420, Events Per Second:, 2.377, Events:, 1000, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 816, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 69, Livegrid:, 69, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 113856
2026-03-26 12:42:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s971ms.
2026-03-26 12:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2275 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34096 KB;
2026-03-26 12:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2275 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 527 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34131 KB;
2026-03-26 12:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2275 KB; ProcessInfo: 624 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 86 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34045 KB;
2026-03-26 12:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2275 KB; ProcessInfo: 697 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 141 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34248 KB;
2026-03-26 12:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:46:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2275 KB; ProcessInfo: 1105 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; TcpIpConnectionsManager: 387 KB; CacheEntry: 327 KB; BaseEvent: 261 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 156 KB; BatchSerializer::EventsQueueTag: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35158 KB;
2026-03-26 12:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2275 KB; ProcessInfo: 1440 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 477 KB; BaseEvent: 428 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 141 KB; BatchSerializer::EventsQueueTag: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 21 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35710 KB;
2026-03-26 12:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28741 KB; ModuleMetadata: 2275 KB; ProcessInfo: 1781 KB; BaseEvent: 599 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; BatchSerializer::EventsQueueTag: 165 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36332 KB;
2026-03-26 12:49:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:42:09, To:, 2026-03-26 12:49:03, Duration (s):, 414, Events Per Second:, 9.687, Events:, 4017, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 623, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 444889
2026-03-26 12:49:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s128ms.
2026-03-26 12:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; ProcessInfo: 1411 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 513 KB; ModuleInfoCache: 397 KB; rules::ProcessConditionsCache: 358 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35393 KB;
2026-03-26 12:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; ProcessInfo: 1633 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 423 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 156 KB; BaseEvent: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35482 KB;
2026-03-26 12:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:51:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; ProcessInfo: 1849 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 402 KB; ModuleInfoCache: 397 KB; TcpIpConnectionsManager: 379 KB; CacheEntry: 327 KB; BaseEvent: 230 KB; cloudutils::CloudData: 156 KB; BatchSerializer::EventsQueueTag: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36008 KB;
2026-03-26 12:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; ProcessInfo: 1971 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; TcpIpConnectionsManager: 328 KB; CacheEntry: 327 KB; BaseEvent: 288 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 139 KB; BatchSerializer::EventsQueueTag: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35891 KB;
2026-03-26 12:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; ProcessInfo: 2028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; BaseEvent: 310 KB; TcpIpConnectionsManager: 272 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 156 KB; BatchSerializer::EventsQueueTag: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35975 KB;
2026-03-26 12:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; ProcessInfo: 2028 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; BaseEvent: 312 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 139 KB; BatchSerializer::EventsQueueTag: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35833 KB;
2026-03-26 12:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; ProcessInfo: 2035 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 397 KB; CacheEntry: 327 KB; BaseEvent: 314 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 143 KB; TcpIpConnectionsManager: 120 KB; BatchSerializer::EventsQueueTag: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35797 KB;
2026-03-26 12:56:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:49:03, To:, 2026-03-26 12:56:03, Duration (s):, 420, Events Per Second:, 4.269, Events:, 1796, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1514, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 279, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 204284
2026-03-26 12:56:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s975ms.
2026-03-26 12:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 12:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 12:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 12:56:21 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 12:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 397 KB; ProcessInfo: 367 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33740 KB;
2026-03-26 12:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; ProcessInfo: 395 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33793 KB;
2026-03-26 12:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; ProcessInfo: 395 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 195 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33804 KB;
2026-03-26 12:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 12:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 12:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 406 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 197 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33830 KB;
2026-03-26 13:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33919 KB;
2026-03-26 13:01:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:01:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:01:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:01:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 471 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 260 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 92 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33988 KB;
2026-03-26 13:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2275 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 475 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; BaseEvent: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34015 KB;
2026-03-26 13:03:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 12:56:02, To:, 2026-03-26 13:03:03, Duration (s):, 421, Events Per Second:, 1.136, Events:, 479, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 412, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 59083
2026-03-26 13:03:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s887ms.
2026-03-26 13:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 398 KB; ProcessInfo: 389 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 298 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33882 KB;
2026-03-26 13:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 428 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 349 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34130 KB;
2026-03-26 13:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 318 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 139 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34008 KB;
2026-03-26 13:06:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:06:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:06:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:06:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 375 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34098 KB;
2026-03-26 13:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 316 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34013 KB;
2026-03-26 13:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 474 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 322 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34020 KB;
2026-03-26 13:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 660 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 89 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34144 KB;
2026-03-26 13:10:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:03:03, To:, 2026-03-26 13:10:03, Duration (s):, 420, Events Per Second:, 1.742, Events:, 733, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 685, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 89307
2026-03-26 13:10:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s796ms.
2026-03-26 13:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33957 KB;
2026-03-26 13:11:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:11:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:11:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:11:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 200 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33960 KB;
2026-03-26 13:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 597 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34091 KB;
2026-03-26 13:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 644 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 184 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 156 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34181 KB;
2026-03-26 13:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 244 KB; TcpIpConnectionsManager: 198 KB; cloudutils::CloudData: 156 KB; BaseEvent: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34368 KB;
2026-03-26 13:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 709 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 170 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 150 KB; BaseEvent: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34236 KB;
2026-03-26 13:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:16:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 722 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34246 KB;
2026-03-26 13:17:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:10:03, To:, 2026-03-26 13:17:03, Duration (s):, 420, Events Per Second:, 1.609, Events:, 677, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 640, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 82370
2026-03-26 13:17:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s776ms.
2026-03-26 13:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; ProcessInfo: 383 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 155 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33741 KB;
2026-03-26 13:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 461 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33967 KB;
2026-03-26 13:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 464 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 241 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33967 KB;
2026-03-26 13:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 241 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 103 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33969 KB;
2026-03-26 13:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 674 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 324 KB; cloudutils::CloudData: 156 KB; BaseEvent: 110 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 40 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34357 KB;
2026-03-26 13:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:21:22 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 675 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 322 KB; cloudutils::CloudData: 156 KB; BaseEvent: 111 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 41 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34348 KB;
2026-03-26 13:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 677 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 322 KB; cloudutils::CloudData: 156 KB; BaseEvent: 113 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 41 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34348 KB;
2026-03-26 13:24:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:17:02, To:, 2026-03-26 13:24:03, Duration (s):, 421, Events Per Second:, 2.086, Events:, 880, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 736, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 54, Livegrid:, 54, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 101863
2026-03-26 13:24:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s958ms.
2026-03-26 13:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 326 KB; ProcessInfo: 317 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33809 KB;
2026-03-26 13:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 322 KB; ProcessInfo: 320 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33803 KB;
2026-03-26 13:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 324 KB; ProcessInfo: 324 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33819 KB;
2026-03-26 13:26:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:26:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:26:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:26:23 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; ProcessInfo: 324 KB; rules::ProcessConditionsCache: 320 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33812 KB;
2026-03-26 13:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; ProcessInfo: 331 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 322 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33821 KB;
2026-03-26 13:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 398 KB; ProcessInfo: 353 KB; rules::ProcessConditionsCache: 329 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33871 KB;
2026-03-26 13:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; ProcessInfo: 390 KB; rules::ProcessConditionsCache: 346 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33969 KB;
2026-03-26 13:31:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:24:06, To:, 2026-03-26 13:31:03, Duration (s):, 417, Events Per Second:, 0.663, Events:, 277, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 263, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35582
2026-03-26 13:31:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s658ms.
2026-03-26 13:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 399 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33982 KB;
2026-03-26 13:31:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:31:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:31:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:31:23 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 423 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33694 KB;
2026-03-26 13:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 452 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 123 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33760 KB;
2026-03-26 13:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 527 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 143 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33968 KB;
2026-03-26 13:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 565 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34099 KB;
2026-03-26 13:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 732 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 182 KB; BaseEvent: 168 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34589 KB;
2026-03-26 13:36:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:36:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:36:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:36:23 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2276 KB; ProcessInfo: 998 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; BaseEvent: 298 KB; TcpIpConnectionsManager: 261 KB; rules::ProcessConditionsCache: 246 KB; cloudutils::CloudData: 156 KB; BatchSerializer::EventsQueueTag: 81 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34992 KB;
2026-03-26 13:38:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:31:03, To:, 2026-03-26 13:38:03, Duration (s):, 420, Events Per Second:, 4.161, Events:, 1751, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1454, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 16, Livegrid:, 16, OriginUrl:, 0, Alarms:, 264, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 198447
2026-03-26 13:38:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s012ms.
2026-03-26 13:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 794 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 297 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34497 KB;
2026-03-26 13:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 890 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; rules::ProcessConditionsCache: 336 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 246 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 63 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34622 KB;
2026-03-26 13:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 919 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 309 KB; TcpIpConnectionsManager: 169 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34560 KB;
2026-03-26 13:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 931 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 305 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 146 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34551 KB;
2026-03-26 13:41:23 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:41:23 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:41:23 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:41:23 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 956 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 327 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34604 KB;
2026-03-26 13:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 1036 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 156 KB; BaseEvent: 80 KB; rules::ProcessConditionsCache: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34482 KB;
2026-03-26 13:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 1042 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 151 KB; BaseEvent: 86 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34465 KB;
2026-03-26 13:45:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:38:03, To:, 2026-03-26 13:45:03, Duration (s):, 420, Events Per Second:, 1.718, Events:, 723, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 686, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 89233
2026-03-26 13:45:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s839ms.
2026-03-26 13:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33853 KB;
2026-03-26 13:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 468 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33819 KB;
2026-03-26 13:46:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:46:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:46:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:46:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 470 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 128 KB; rules::ProcessConditionsCache: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33786 KB;
2026-03-26 13:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 475 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33795 KB;
2026-03-26 13:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 659 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 151 KB; BaseEvent: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34307 KB;
2026-03-26 13:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 953 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 274 KB; BaseEvent: 256 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 156 KB; BatchSerializer::EventsQueueTag: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34847 KB;
2026-03-26 13:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2278 KB; ProcessInfo: 1386 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 556 KB; TcpIpConnectionsManager: 479 KB; BaseEvent: 454 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 308 KB; cloudutils::CloudData: 156 KB; BatchSerializer::EventsQueueTag: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35866 KB;
2026-03-26 13:51:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:51:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:51:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:51:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:52:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:45:10, To:, 2026-03-26 13:52:03, Duration (s):, 413, Events Per Second:, 7.738, Events:, 3202, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2694, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 505, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 354569
2026-03-26 13:52:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s118ms.
2026-03-26 13:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 1307 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 487 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; rules::ProcessConditionsCache: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34999 KB;
2026-03-26 13:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 1368 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; TcpIpConnectionsManager: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35065 KB;
2026-03-26 13:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 1440 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 261 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 156 KB; BaseEvent: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35093 KB;
2026-03-26 13:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 1446 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 143 KB; BaseEvent: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34991 KB;
2026-03-26 13:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 1470 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 133 KB; BaseEvent: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35019 KB;
2026-03-26 13:56:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 13:56:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 13:56:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 13:56:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 13:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 1481 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35011 KB;
2026-03-26 13:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 1553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 289 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 126 KB; BaseEvent: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35233 KB;
2026-03-26 13:59:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:52:03, To:, 2026-03-26 13:59:03, Duration (s):, 420, Events Per Second:, 1.773, Events:, 746, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 651, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 92, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 86556
2026-03-26 13:59:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s803ms.
2026-03-26 13:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 13:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 13:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 428 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; rules::ProcessConditionsCache: 318 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33981 KB;
2026-03-26 14:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 515 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 57 KB; rules::ProcessConditionsCache: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33899 KB;
2026-03-26 14:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 143 KB; rules::ProcessConditionsCache: 67 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33929 KB;
2026-03-26 14:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:01:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 72 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33945 KB;
2026-03-26 14:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 562 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 69 KB; BaseEvent: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33931 KB;
2026-03-26 14:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 586 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 72 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33950 KB;
2026-03-26 14:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; ProcessInfo: 611 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 116 KB; rules::ProcessConditionsCache: 105 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34036 KB;
2026-03-26 14:06:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 13:59:13, To:, 2026-03-26 14:06:03, Duration (s):, 410, Events Per Second:, 1.361, Events:, 559, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 520, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67031
2026-03-26 14:06:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s809ms.
2026-03-26 14:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; ProcessInfo: 358 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 108 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33628 KB;
2026-03-26 14:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:06:24 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; ProcessInfo: 396 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 108 KB; rules::ProcessConditionsCache: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33720 KB;
2026-03-26 14:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 421 KB; ModuleInfoCache: 399 KB; CacheEntry: 327 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 121 KB; rules::ProcessConditionsCache: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33783 KB;
2026-03-26 14:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2281 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 467 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 156 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33839 KB;
2026-03-26 14:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2281 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 472 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33844 KB;
2026-03-26 14:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2281 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 110 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33831 KB;
2026-03-26 14:11:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:11:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:11:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:11:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2281 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 143 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33913 KB;
2026-03-26 14:13:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:06:15, To:, 2026-03-26 14:13:03, Duration (s):, 408, Events Per Second:, 1.453, Events:, 594, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 540, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 49, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 71169
2026-03-26 14:13:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s815ms.
2026-03-26 14:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2281 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 424 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33875 KB;
2026-03-26 14:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2281 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 472 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 324 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 157 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 6 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34104 KB;
2026-03-26 14:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 210 KB; TcpIpConnectionsManager: 167 KB; cloudutils::CloudData: 157 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33969 KB;
2026-03-26 14:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 478 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33927 KB;
2026-03-26 14:16:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:16:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:16:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:16:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 508 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 232 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34019 KB;
2026-03-26 14:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; ProcessInfo: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 262 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34108 KB;
2026-03-26 14:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 256 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34113 KB;
2026-03-26 14:20:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:13:05, To:, 2026-03-26 14:20:03, Duration (s):, 418, Events Per Second:, 1.005, Events:, 421, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 394, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51183
2026-03-26 14:20:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s786ms.
2026-03-26 14:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; ProcessInfo: 393 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 290 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33919 KB;
2026-03-26 14:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; ProcessInfo: 395 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 292 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33903 KB;
2026-03-26 14:21:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:21:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:21:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:21:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 470 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 384 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34152 KB;
2026-03-26 14:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 343 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34155 KB;
2026-03-26 14:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 530 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 157 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34224 KB;
2026-03-26 14:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 345 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 136 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34203 KB;
2026-03-26 14:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; ProcessInfo: 564 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 373 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 102 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34253 KB;
2026-03-26 14:26:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:26:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:26:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:26:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:27:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:20:04, To:, 2026-03-26 14:27:03, Duration (s):, 419, Events Per Second:, 1.524, Events:, 640, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 578, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 59, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 76010
2026-03-26 14:27:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s818ms.
2026-03-26 14:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 446 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 131 KB; rules::ProcessConditionsCache: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33799 KB;
2026-03-26 14:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33870 KB;
2026-03-26 14:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 496 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33922 KB;
2026-03-26 14:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 125 KB; rules::ProcessConditionsCache: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33907 KB;
2026-03-26 14:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 534 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 148 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33976 KB;
2026-03-26 14:31:25 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:31:25 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:31:25 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:31:25 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 550 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 115 KB; rules::ProcessConditionsCache: 106 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33938 KB;
2026-03-26 14:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 139 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34082 KB;
2026-03-26 14:34:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:27:02, To:, 2026-03-26 14:34:03, Duration (s):, 421, Events Per Second:, 2.344, Events:, 989, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 884, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 102, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 115128
2026-03-26 14:34:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s949ms.
2026-03-26 14:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 622 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 365 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 233 KB; cloudutils::CloudData: 157 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34359 KB;
2026-03-26 14:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 1013 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 399 KB; TcpIpConnectionsManager: 380 KB; CacheEntry: 328 KB; BaseEvent: 220 KB; cloudutils::CloudData: 157 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35182 KB;
2026-03-26 14:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 1327 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 477 KB; ModuleInfoCache: 399 KB; BaseEvent: 376 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; BatchSerializer::EventsQueueTag: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35737 KB;
2026-03-26 14:36:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:36:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:36:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:36:26 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 1573 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 500 KB; TcpIpConnectionsManager: 484 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 157 KB; BatchSerializer::EventsQueueTag: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36048 KB;
2026-03-26 14:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 1600 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 514 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 318 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 157 KB; BatchSerializer::EventsQueueTag: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35976 KB;
2026-03-26 14:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 1733 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; BaseEvent: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 321 KB; TcpIpConnectionsManager: 239 KB; cloudutils::CloudData: 157 KB; BatchSerializer::EventsQueueTag: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36118 KB;
2026-03-26 14:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2284 KB; ProcessInfo: 1799 KB; BaseEvent: 587 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; rules::ProcessConditionsCache: 372 KB; CacheEntry: 328 KB; BatchSerializer::EventsQueueTag: 162 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 154 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36196 KB;
2026-03-26 14:41:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:34:05, To:, 2026-03-26 14:41:03, Duration (s):, 418, Events Per Second:, 8.309, Events:, 3481, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2927, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 549, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 387501
2026-03-26 14:41:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s103ms.
2026-03-26 14:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2285 KB; ProcessInfo: 609 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 399 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 195 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34049 KB;
2026-03-26 14:41:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:41:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:41:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:41:26 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 693 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 189 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 158 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34261 KB;
2026-03-26 14:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 702 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 181 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 158 KB; BaseEvent: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34274 KB;
2026-03-26 14:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 702 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 110 KB; BaseEvent: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34204 KB;
2026-03-26 14:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 709 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 158 KB; BaseEvent: 79 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34194 KB;
2026-03-26 14:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 756 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34329 KB;
2026-03-26 14:46:26 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:46:26 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:46:26 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:46:26 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 768 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 20 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34308 KB;
2026-03-26 14:48:03 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:41:05, To:, 2026-03-26 14:48:03, Duration (s):, 418, Events Per Second:, 2.962, Events:, 1241, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1069, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 169, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 139756
2026-03-26 14:48:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s937ms.
2026-03-26 14:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 691 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 269 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 112 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34243 KB;
2026-03-26 14:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:49:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:49:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:49:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 813 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 294 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 158 KB; BaseEvent: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34580 KB;
2026-03-26 14:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 819 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 269 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 158 KB; BaseEvent: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34578 KB;
2026-03-26 14:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 872 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 288 KB; TcpIpConnectionsManager: 159 KB; cloudutils::CloudData: 158 KB; BaseEvent: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34615 KB;
2026-03-26 14:51:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:51:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:51:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:51:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 158 KB; BaseEvent: 137 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34529 KB;
2026-03-26 14:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2292 KB; ProcessInfo: 898 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 307 KB; cloudutils::CloudData: 158 KB; BaseEvent: 149 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34606 KB;
2026-03-26 14:54:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:54:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:54:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:54:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2293 KB; ProcessInfo: 900 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 312 KB; cloudutils::CloudData: 158 KB; BaseEvent: 150 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34603 KB;
2026-03-26 14:55:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:48:03, To:, 2026-03-26 14:55:03, Duration (s):, 420, Events Per Second:, 2.010, Events:, 846, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 714, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 129, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 97261
2026-03-26 14:55:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s852ms.
2026-03-26 14:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2293 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; ProcessInfo: 336 KB; CacheEntry: 328 KB; rules::ProcessConditionsCache: 314 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33852 KB;
2026-03-26 14:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2293 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; ProcessInfo: 371 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 328 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33953 KB;
2026-03-26 14:56:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 14:56:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 14:56:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 14:56:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 14:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2293 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 400 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 340 KB; CacheEntry: 328 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33983 KB;
2026-03-26 14:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2293 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 428 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 328 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34099 KB;
2026-03-26 14:59:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:59:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 14:59:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:59:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 14:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2293 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 474 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 157 KB; rules::ProcessConditionsCache: 99 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33926 KB;
2026-03-26 15:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2293 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 515 KB; ModuleInfoCache: 400 KB; CacheEntry: 328 KB; cloudutils::CloudData: 157 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 91 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33952 KB;
2026-03-26 15:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 568 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 106 KB; BaseEvent: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34039 KB;
2026-03-26 15:01:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:01:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:01:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:01:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:02:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 14:55:45, To:, 2026-03-26 15:02:04, Duration (s):, 379, Events Per Second:, 1.815, Events:, 688, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 657, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 81185
2026-03-26 15:02:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s803ms.
2026-03-26 15:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 480 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 156 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33949 KB;
2026-03-26 15:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 481 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 126 KB; rules::ProcessConditionsCache: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33831 KB;
2026-03-26 15:04:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:04:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:04:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:04:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 483 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 111 KB; rules::ProcessConditionsCache: 106 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33833 KB;
2026-03-26 15:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 489 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 112 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33829 KB;
2026-03-26 15:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 512 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 108 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33852 KB;
2026-03-26 15:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:06:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 588 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34087 KB;
2026-03-26 15:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 593 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34105 KB;
2026-03-26 15:09:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:02:06, To:, 2026-03-26 15:09:04, Duration (s):, 418, Events Per Second:, 1.416, Events:, 592, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 557, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 74110
2026-03-26 15:09:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s766ms.
2026-03-26 15:09:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:09:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:09:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:09:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34041 KB;
2026-03-26 15:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 508 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33967 KB;
2026-03-26 15:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; ModuleInfoCache: 400 KB; CacheEntry: 329 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34042 KB;
2026-03-26 15:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:11:27 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34163 KB;
2026-03-26 15:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 612 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34200 KB;
2026-03-26 15:14:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:14:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:14:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:14:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 660 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 317 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 139 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34341 KB;
2026-03-26 15:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 685 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 304 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 144 KB; BaseEvent: 76 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 22 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34360 KB;
2026-03-26 15:16:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:09:02, To:, 2026-03-26 15:16:04, Duration (s):, 422, Events Per Second:, 1.343, Events:, 567, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 519, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 70159
2026-03-26 15:16:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s807ms.
2026-03-26 15:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 406 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 298 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33939 KB;
2026-03-26 15:16:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:16:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:16:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:16:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 650 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 254 KB; TcpIpConnectionsManager: 234 KB; cloudutils::CloudData: 158 KB; BaseEvent: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34395 KB;
2026-03-26 15:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; TcpIpConnectionsManager: 336 KB; CacheEntry: 330 KB; BaseEvent: 263 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 100 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34849 KB;
2026-03-26 15:19:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:19:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:19:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:19:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 1133 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; TcpIpConnectionsManager: 397 KB; BaseEvent: 344 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 158 KB; BatchSerializer::EventsQueueTag: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35374 KB;
2026-03-26 15:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 1336 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 442 KB; ModuleInfoCache: 400 KB; TcpIpConnectionsManager: 387 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; BatchSerializer::EventsQueueTag: 120 KB; rules::ProcessConditionsCache: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35518 KB;
2026-03-26 15:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2295 KB; ProcessInfo: 1480 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 515 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 292 KB; rules::ProcessConditionsCache: 257 KB; cloudutils::CloudData: 158 KB; BatchSerializer::EventsQueueTag: 140 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35814 KB;
2026-03-26 15:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:21:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2296 KB; ProcessInfo: 1552 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; BaseEvent: 542 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 347 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 243 KB; cloudutils::CloudData: 158 KB; BatchSerializer::EventsQueueTag: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35959 KB;
2026-03-26 15:23:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:16:04, To:, 2026-03-26 15:23:04, Duration (s):, 420, Events Per Second:, 7.632, Events:, 3206, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2683, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 516, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 355570
2026-03-26 15:23:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s148ms.
2026-03-26 15:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2296 KB; ProcessInfo: 662 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 371 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 158 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34364 KB;
2026-03-26 15:24:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:24:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:24:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:24:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 688 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 391 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 143 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34368 KB;
2026-03-26 15:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 694 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 393 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34372 KB;
2026-03-26 15:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 696 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 386 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34314 KB;
2026-03-26 15:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:26:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 705 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 391 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34326 KB;
2026-03-26 15:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 706 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 391 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34332 KB;
2026-03-26 15:29:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:29:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:29:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:29:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 719 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 397 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34368 KB;
2026-03-26 15:30:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:23:04, To:, 2026-03-26 15:30:04, Duration (s):, 420, Events Per Second:, 0.547, Events:, 230, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 205, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 30296
2026-03-26 15:30:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s646ms.
2026-03-26 15:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 400 KB; ProcessInfo: 336 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33943 KB;
2026-03-26 15:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; ProcessInfo: 359 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33608 KB;
2026-03-26 15:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:31:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 400 KB; ProcessInfo: 364 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33601 KB;
2026-03-26 15:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 400 KB; ProcessInfo: 373 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33633 KB;
2026-03-26 15:34:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:34:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:34:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:34:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 431 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 164 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33875 KB;
2026-03-26 15:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 506 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 175 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 158 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34049 KB;
2026-03-26 15:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 534 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 198 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 158 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BaseEvent: 56 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34100 KB;
2026-03-26 15:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:36:28 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:37:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:30:08, To:, 2026-03-26 15:37:04, Duration (s):, 416, Events Per Second:, 1.480, Events:, 616, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 579, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72941
2026-03-26 15:37:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s797ms.
2026-03-26 15:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 484 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33905 KB;
2026-03-26 15:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 496 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33878 KB;
2026-03-26 15:39:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:39:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:39:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:39:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 546 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 135 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33939 KB;
2026-03-26 15:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34010 KB;
2026-03-26 15:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 635 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 250 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34207 KB;
2026-03-26 15:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:41:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 829 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 158 KB; BaseEvent: 149 KB; BatchSerializer::EventsQueueTag: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34737 KB;
2026-03-26 15:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 213 KB; BaseEvent: 171 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 56 KB; BatchSerializer::EventsQueueTag: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34483 KB;
2026-03-26 15:44:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:37:14, To:, 2026-03-26 15:44:04, Duration (s):, 410, Events Per Second:, 2.950, Events:, 1210, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1049, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 160, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 138684
2026-03-26 15:44:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s924ms.
2026-03-26 15:44:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:44:05 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:44:05 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:44:05 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 691 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 234 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 158 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34220 KB;
2026-03-26 15:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 826 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 264 KB; TcpIpConnectionsManager: 221 KB; cloudutils::CloudData: 158 KB; BaseEvent: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34508 KB;
2026-03-26 15:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 856 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 264 KB; TcpIpConnectionsManager: 197 KB; cloudutils::CloudData: 158 KB; BaseEvent: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34535 KB;
2026-03-26 15:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:46:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 904 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 295 KB; TcpIpConnectionsManager: 202 KB; cloudutils::CloudData: 158 KB; BaseEvent: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34643 KB;
2026-03-26 15:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 158 KB; BaseEvent: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34746 KB;
2026-03-26 15:49:05 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:49:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:49:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:49:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 960 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 323 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 136 KB; BaseEvent: 127 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34704 KB;
2026-03-26 15:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 992 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; BaseEvent: 143 KB; TcpIpConnectionsManager: 116 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34765 KB;
2026-03-26 15:51:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:44:05, To:, 2026-03-26 15:51:04, Duration (s):, 419, Events Per Second:, 2.211, Events:, 927, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 820, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 106, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 106593
2026-03-26 15:51:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s997ms.
2026-03-26 15:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 421 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33708 KB;
2026-03-26 15:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:51:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 423 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33670 KB;
2026-03-26 15:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 546 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 141 KB; BaseEvent: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34050 KB;
2026-03-26 15:54:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:54:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:54:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:54:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 894 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 284 KB; BaseEvent: 234 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 143 KB; BatchSerializer::EventsQueueTag: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34722 KB;
2026-03-26 15:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 1239 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 412 KB; BaseEvent: 402 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; BatchSerializer::EventsQueueTag: 107 KB; rules::ProcessConditionsCache: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35373 KB;
2026-03-26 15:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 1461 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; BaseEvent: 510 KB; TcpIpConnectionsManager: 454 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 328 KB; cloudutils::CloudData: 158 KB; BatchSerializer::EventsQueueTag: 136 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35992 KB;
2026-03-26 15:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 15:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 15:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 15:56:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 15:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 1524 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; BaseEvent: 538 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 380 KB; TcpIpConnectionsManager: 348 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; BatchSerializer::EventsQueueTag: 145 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36038 KB;
2026-03-26 15:58:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:51:03, To:, 2026-03-26 15:58:04, Duration (s):, 421, Events Per Second:, 7.662, Events:, 3227, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2701, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 523, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 358851
2026-03-26 15:58:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s129ms.
2026-03-26 15:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 813 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 262 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34271 KB;
2026-03-26 15:59:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:59:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 15:59:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:59:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 15:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 815 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34150 KB;
2026-03-26 16:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 153 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34348 KB;
2026-03-26 16:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 926 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34377 KB;
2026-03-26 16:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:01:29 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 964 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 156 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34468 KB;
2026-03-26 16:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 964 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34442 KB;
2026-03-26 16:04:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:04:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:04:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:04:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; ProcessInfo: 964 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 77 KB; BaseEvent: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34399 KB;
2026-03-26 16:05:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 15:58:03, To:, 2026-03-26 16:05:04, Duration (s):, 421, Events Per Second:, 1.040, Events:, 438, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56523
2026-03-26 16:05:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s845ms.
2026-03-26 16:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33629 KB;
2026-03-26 16:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2298 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; ProcessInfo: 311 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33629 KB;
2026-03-26 16:06:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:06:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:06:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:06:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 418 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 239 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33931 KB;
2026-03-26 16:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 442 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 250 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 143 KB; BaseEvent: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33994 KB;
2026-03-26 16:09:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:09:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:09:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:09:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; ProcessInfo: 581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 400 KB; rules::ProcessConditionsCache: 399 KB; CacheEntry: 330 KB; TcpIpConnectionsManager: 230 KB; cloudutils::CloudData: 158 KB; BaseEvent: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34466 KB;
2026-03-26 16:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; ProcessInfo: 611 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 304 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 158 KB; BaseEvent: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34337 KB;
2026-03-26 16:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; ProcessInfo: 611 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 298 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 157 KB; BaseEvent: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34316 KB;
2026-03-26 16:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:11:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:12:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:02:03, To:, 2026-03-26 16:12:04, Duration (s):, 601, Events Per Second:, 1.337, Events:, 804, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 755, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 94739
2026-03-26 16:12:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s831ms.
2026-03-26 16:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 434 KB; ModuleInfoCache: 400 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33962 KB;
2026-03-26 16:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 437 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 299 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33919 KB;
2026-03-26 16:14:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:14:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:14:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:14:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 468 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 13 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34011 KB;
2026-03-26 16:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 497 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34099 KB;
2026-03-26 16:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 497 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 350 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34102 KB;
2026-03-26 16:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:16:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 525 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34176 KB;
2026-03-26 16:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 649 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 401 KB; rules::ProcessConditionsCache: 378 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34263 KB;
2026-03-26 16:19:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:12:46, To:, 2026-03-26 16:19:04, Duration (s):, 378, Events Per Second:, 0.764, Events:, 289, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 252, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36680
2026-03-26 16:19:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s627ms.
2026-03-26 16:19:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:19:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:19:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:19:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2300 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; ProcessInfo: 364 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 48 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33667 KB;
2026-03-26 16:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2301 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 401 KB; ProcessInfo: 395 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33691 KB;
2026-03-26 16:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2301 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 420 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33772 KB;
2026-03-26 16:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:21:30 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2301 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 420 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 94 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33748 KB;
2026-03-26 16:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2301 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 421 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 94 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33735 KB;
2026-03-26 16:24:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:24:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:24:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:24:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2301 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 455 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; rules::ProcessConditionsCache: 103 KB; TcpIpConnectionsManager: 95 KB; BaseEvent: 33 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33801 KB;
2026-03-26 16:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2301 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 480 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; cloudutils::CloudData: 158 KB; TcpIpConnectionsManager: 120 KB; rules::ProcessConditionsCache: 108 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33860 KB;
2026-03-26 16:26:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:19:03, To:, 2026-03-26 16:26:04, Duration (s):, 421, Events Per Second:, 1.073, Events:, 452, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57924
2026-03-26 16:26:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s851ms.
2026-03-26 16:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2301 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 427 KB; ModuleInfoCache: 401 KB; CacheEntry: 330 KB; rules::ProcessConditionsCache: 185 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 158 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33883 KB;
2026-03-26 16:26:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:26:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:26:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:26:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 430 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 154 KB; TcpIpConnectionsManager: 131 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33848 KB;
2026-03-26 16:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 481 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 185 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34017 KB;
2026-03-26 16:29:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:29:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:29:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:29:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 530 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 131 KB; BaseEvent: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34141 KB;
2026-03-26 16:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 151 KB; BaseEvent: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34319 KB;
2026-03-26 16:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 656 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 172 KB; cloudutils::CloudData: 160 KB; BaseEvent: 147 KB; BatchSerializer::EventsQueueTag: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34507 KB;
2026-03-26 16:31:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:31:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:31:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:31:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 680 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 160 KB; BaseEvent: 154 KB; BatchSerializer::EventsQueueTag: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34479 KB;
2026-03-26 16:33:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:25:59, To:, 2026-03-26 16:33:04, Duration (s):, 425, Events Per Second:, 2.307, Events:, 981, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 720, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 94, Livegrid:, 94, OriginUrl:, 0, Alarms:, 72, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 108673
2026-03-26 16:33:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s018ms.
2026-03-26 16:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 477 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 326 KB; TcpIpConnectionsManager: 162 KB; cloudutils::CloudData: 160 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34078 KB;
2026-03-26 16:34:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:34:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:34:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:34:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 480 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 328 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34046 KB;
2026-03-26 16:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 483 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 328 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34012 KB;
2026-03-26 16:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 483 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 328 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34005 KB;
2026-03-26 16:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:36:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 546 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 331 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34189 KB;
2026-03-26 16:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 574 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 394 KB; CacheEntry: 331 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34268 KB;
2026-03-26 16:39:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:39:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:39:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:39:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 691 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 101 KB; BaseEvent: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BatchSerializer::EventsQueueTag: 34 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34259 KB;
2026-03-26 16:40:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:33:25, To:, 2026-03-26 16:40:04, Duration (s):, 399, Events Per Second:, 1.933, Events:, 772, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 615, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 88399
2026-03-26 16:40:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s791ms.
2026-03-26 16:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33997 KB;
2026-03-26 16:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 628 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 200 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 161 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 32 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34198 KB;
2026-03-26 16:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:41:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 872 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 380 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 267 KB; cloudutils::CloudData: 161 KB; BaseEvent: 156 KB; BatchSerializer::EventsQueueTag: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34853 KB;
2026-03-26 16:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 1083 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 403 KB; TcpIpConnectionsManager: 336 KB; CacheEntry: 331 KB; BaseEvent: 255 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35077 KB;
2026-03-26 16:44:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:44:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:44:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:44:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 1395 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 423 KB; BaseEvent: 409 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 119 KB; BatchSerializer::EventsQueueTag: 112 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35598 KB;
2026-03-26 16:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 1639 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 523 KB; TcpIpConnectionsManager: 423 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 361 KB; CacheEntry: 331 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36229 KB;
2026-03-26 16:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 1686 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 548 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 403 KB; TcpIpConnectionsManager: 335 KB; CacheEntry: 331 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 151 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36274 KB;
2026-03-26 16:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:46:31 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:47:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:40:03, To:, 2026-03-26 16:47:04, Duration (s):, 421, Events Per Second:, 7.460, Events:, 3143, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2640, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 500, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 347980
2026-03-26 16:47:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s081ms.
2026-03-26 16:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 721 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; TcpIpConnectionsManager: 205 KB; cloudutils::CloudData: 161 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34460 KB;
2026-03-26 16:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 725 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 414 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34369 KB;
2026-03-26 16:49:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:49:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:49:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:49:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 727 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34362 KB;
2026-03-26 16:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 803 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 118 KB; rules::ProcessConditionsCache: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34218 KB;
2026-03-26 16:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 121 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34323 KB;
2026-03-26 16:51:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:51:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:51:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:51:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 851 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 121 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34314 KB;
2026-03-26 16:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; ProcessInfo: 900 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 115 KB; BaseEvent: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34424 KB;
2026-03-26 16:54:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:48:09, To:, 2026-03-26 16:54:04, Duration (s):, 355, Events Per Second:, 1.517, Events:, 539, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 428, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 27, Livegrid:, 27, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 61817
2026-03-26 16:54:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s818ms.
2026-03-26 16:54:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:54:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:54:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:54:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 403 KB; ProcessInfo: 384 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33770 KB;
2026-03-26 16:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 403 KB; ProcessInfo: 400 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33824 KB;
2026-03-26 16:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 403 KB; ProcessInfo: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33783 KB;
2026-03-26 16:56:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 16:56:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 16:56:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 16:56:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 16:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 405 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33782 KB;
2026-03-26 16:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 452 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33964 KB;
2026-03-26 16:59:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:59:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 16:59:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:59:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 16:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 477 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34004 KB;
2026-03-26 17:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 508 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34041 KB;
2026-03-26 17:01:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 16:54:45, To:, 2026-03-26 17:01:04, Duration (s):, 379, Events Per Second:, 0.901, Events:, 342, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 324, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 43370
2026-03-26 17:01:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s771ms.
2026-03-26 17:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 403 KB; ProcessInfo: 400 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33888 KB;
2026-03-26 17:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:01:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 403 KB; ProcessInfo: 400 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33847 KB;
2026-03-26 17:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 403 KB; ProcessInfo: 400 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33822 KB;
2026-03-26 17:04:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:04:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:04:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:04:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 424 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 252 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33895 KB;
2026-03-26 17:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 428 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 250 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33898 KB;
2026-03-26 17:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2312 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 428 KB; ModuleInfoCache: 403 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 250 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33903 KB;
2026-03-26 17:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:06:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 474 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 274 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34012 KB;
2026-03-26 17:08:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:01:01, To:, 2026-03-26 17:08:04, Duration (s):, 423, Events Per Second:, 0.531, Events:, 225, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 199, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 21, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29183
2026-03-26 17:08:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s661ms.
2026-03-26 17:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; ProcessInfo: 358 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33870 KB;
2026-03-26 17:09:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:09:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:09:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:09:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; ProcessInfo: 386 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 300 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33954 KB;
2026-03-26 17:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 440 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 284 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BaseEvent: 15 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33993 KB;
2026-03-26 17:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 505 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 348 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34189 KB;
2026-03-26 17:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:11:32 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 505 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 103 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34129 KB;
2026-03-26 17:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 505 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 93 KB; BaseEvent: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34126 KB;
2026-03-26 17:14:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:14:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:14:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:14:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 505 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 335 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 67 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BatchSerializer::EventsQueueTag: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34104 KB;
2026-03-26 17:15:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:08:48, To:, 2026-03-26 17:15:04, Duration (s):, 376, Events Per Second:, 1.315, Events:, 495, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 457, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60522
2026-03-26 17:15:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s785ms.
2026-03-26 17:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 366 KB; ProcessInfo: 349 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33908 KB;
2026-03-26 17:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 205 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 161 KB; BaseEvent: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34239 KB;
2026-03-26 17:16:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:16:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:16:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:16:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; ProcessInfo: 866 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 310 KB; BaseEvent: 243 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 100 KB; BatchSerializer::EventsQueueTag: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34709 KB;
2026-03-26 17:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2314 KB; ProcessInfo: 1164 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 418 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 403 KB; BaseEvent: 386 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35615 KB;
2026-03-26 17:19:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:19:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:19:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:19:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; ProcessInfo: 1330 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; BaseEvent: 471 KB; ModuleInfoCache: 403 KB; TcpIpConnectionsManager: 384 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35637 KB;
2026-03-26 17:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; ProcessInfo: 1360 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; BaseEvent: 480 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 285 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35599 KB;
2026-03-26 17:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; ProcessInfo: 1382 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 555 KB; BaseEvent: 485 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 216 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 130 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35547 KB;
2026-03-26 17:21:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:21:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:21:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:21:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:22:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:15:05, To:, 2026-03-26 17:22:04, Duration (s):, 419, Events Per Second:, 6.829, Events:, 2864, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 453, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 317395
2026-03-26 17:22:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s116ms.
2026-03-26 17:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 403 KB; ProcessInfo: 383 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33832 KB;
2026-03-26 17:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 412 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33910 KB;
2026-03-26 17:24:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:24:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:24:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:24:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 412 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33883 KB;
2026-03-26 17:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 450 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33949 KB;
2026-03-26 17:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 453 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33948 KB;
2026-03-26 17:26:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:26:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:26:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:26:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 453 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33946 KB;
2026-03-26 17:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 453 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33915 KB;
2026-03-26 17:29:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:22:03, To:, 2026-03-26 17:29:04, Duration (s):, 421, Events Per Second:, 0.467, Events:, 197, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 183, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 26063
2026-03-26 17:29:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s624ms.
2026-03-26 17:29:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:29:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:29:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:29:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 403 KB; ProcessInfo: 339 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 265 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33808 KB;
2026-03-26 17:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 403 KB; ProcessInfo: 346 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33834 KB;
2026-03-26 17:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 403 KB; ProcessInfo: 358 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 285 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33870 KB;
2026-03-26 17:31:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:31:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:31:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:31:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 403 KB; ProcessInfo: 359 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 283 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33850 KB;
2026-03-26 17:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 403 KB; ProcessInfo: 384 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 309 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33928 KB;
2026-03-26 17:34:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:34:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:34:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:34:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 411 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34000 KB;
2026-03-26 17:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 439 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 90 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34081 KB;
2026-03-26 17:36:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:29:05, To:, 2026-03-26 17:36:04, Duration (s):, 419, Events Per Second:, 1.009, Events:, 423, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 366, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 50387
2026-03-26 17:36:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s618ms.
2026-03-26 17:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 425 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 388 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34034 KB;
2026-03-26 17:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:36:33 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 502 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 126 KB; rules::ProcessConditionsCache: 80 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33870 KB;
2026-03-26 17:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 514 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 129 KB; rules::ProcessConditionsCache: 83 KB; BaseEvent: 35 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33890 KB;
2026-03-26 17:39:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:39:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:39:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:39:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 116 KB; rules::ProcessConditionsCache: 116 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34019 KB;
2026-03-26 17:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; ProcessInfo: 587 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 122 KB; TcpIpConnectionsManager: 80 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34001 KB;
2026-03-26 17:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2315 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 122 KB; TcpIpConnectionsManager: 69 KB; BaseEvent: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34004 KB;
2026-03-26 17:41:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:41:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:41:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:41:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2317 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 122 KB; TcpIpConnectionsManager: 64 KB; BaseEvent: 62 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33993 KB;
2026-03-26 17:43:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:36:02, To:, 2026-03-26 17:43:04, Duration (s):, 422, Events Per Second:, 1.399, Events:, 591, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 530, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72240
2026-03-26 17:43:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s783ms.
2026-03-26 17:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2317 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; ProcessInfo: 389 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33891 KB;
2026-03-26 17:44:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:44:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:44:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:44:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2317 KB; ProcessInfo: 631 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 226 KB; cloudutils::CloudData: 161 KB; BaseEvent: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34552 KB;
2026-03-26 17:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2317 KB; ProcessInfo: 812 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 318 KB; rules::ProcessConditionsCache: 249 KB; BaseEvent: 194 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34780 KB;
2026-03-26 17:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2317 KB; ProcessInfo: 847 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 325 KB; rules::ProcessConditionsCache: 234 KB; BaseEvent: 206 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 60 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34826 KB;
2026-03-26 17:46:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:46:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:46:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:46:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2317 KB; ProcessInfo: 895 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; BaseEvent: 233 KB; rules::ProcessConditionsCache: 232 KB; TcpIpConnectionsManager: 215 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 68 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34760 KB;
2026-03-26 17:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2317 KB; ProcessInfo: 942 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 261 KB; BaseEvent: 252 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 161 KB; BatchSerializer::EventsQueueTag: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34844 KB;
2026-03-26 17:49:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:49:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:49:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:49:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; ProcessInfo: 967 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 287 KB; BaseEvent: 267 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 143 KB; BatchSerializer::EventsQueueTag: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34886 KB;
2026-03-26 17:50:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:42:52, To:, 2026-03-26 17:50:04, Duration (s):, 432, Events Per Second:, 3.790, Events:, 1639, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 231, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 186492
2026-03-26 17:50:17 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 12s756ms.
2026-03-26 17:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 411 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 300 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33952 KB;
2026-03-26 17:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 442 KB; ModuleInfoCache: 404 KB; rules::ProcessConditionsCache: 333 KB; CacheEntry: 332 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34035 KB;
2026-03-26 17:51:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:51:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:51:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:51:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 450 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33993 KB;
2026-03-26 17:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 474 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 331 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 20 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34053 KB;
2026-03-26 17:54:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:54:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:54:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:54:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 478 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34048 KB;
2026-03-26 17:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 483 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 331 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34051 KB;
2026-03-26 17:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2318 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 533 KB; ModuleInfoCache: 404 KB; rules::ProcessConditionsCache: 381 KB; CacheEntry: 332 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 85 KB; BaseEvent: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34186 KB;
2026-03-26 17:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 17:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 17:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 17:56:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 17:57:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:50:08, To:, 2026-03-26 17:57:04, Duration (s):, 416, Events Per Second:, 0.975, Events:, 406, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 358, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48717
2026-03-26 17:57:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s830ms.
2026-03-26 17:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2320 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 404 KB; ProcessInfo: 387 KB; CacheEntry: 332 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 87 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34007 KB;
2026-03-26 17:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2320 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 437 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33763 KB;
2026-03-26 17:59:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:59:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 17:59:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:59:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 17:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 459 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 123 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33865 KB;
2026-03-26 18:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 472 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 102 KB; rules::ProcessConditionsCache: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33825 KB;
2026-03-26 18:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 108 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33924 KB;
2026-03-26 18:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:01:34 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 106 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33926 KB;
2026-03-26 18:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 74 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33986 KB;
2026-03-26 18:04:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 17:57:29, To:, 2026-03-26 18:04:04, Duration (s):, 395, Events Per Second:, 1.178, Events:, 466, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 426, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 56162
2026-03-26 18:04:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s823ms.
2026-03-26 18:04:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:04:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:04:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:04:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 404 KB; ProcessInfo: 365 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33709 KB;
2026-03-26 18:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 404 KB; ProcessInfo: 368 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33714 KB;
2026-03-26 18:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 404 KB; ProcessInfo: 368 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33707 KB;
2026-03-26 18:06:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:06:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:06:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:06:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 404 KB; ProcessInfo: 396 KB; CacheEntry: 332 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 160 KB; TcpIpConnectionsManager: 65 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33766 KB;
2026-03-26 18:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 404 KB; ProcessInfo: 402 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33786 KB;
2026-03-26 18:09:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:09:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:09:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:09:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 445 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33852 KB;
2026-03-26 18:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 619 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 467 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 182 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33995 KB;
2026-03-26 18:11:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:04:04, To:, 2026-03-26 18:11:04, Duration (s):, 420, Events Per Second:, 0.878, Events:, 369, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 344, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 46909
2026-03-26 18:11:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s784ms.
2026-03-26 18:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2321 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 681 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 420 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34015 KB;
2026-03-26 18:11:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:11:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:11:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:11:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2323 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 462 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 126 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 14 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34023 KB;
2026-03-26 18:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2323 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 462 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34009 KB;
2026-03-26 18:14:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:14:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:14:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:14:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2323 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 496 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 241 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34044 KB;
2026-03-26 18:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2323 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 499 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 230 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 93 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34008 KB;
2026-03-26 18:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2323 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 521 KB; ModuleInfoCache: 404 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 118 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34073 KB;
2026-03-26 18:16:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:16:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:16:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:16:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 549 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 95 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34124 KB;
2026-03-26 18:18:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:11:19, To:, 2026-03-26 18:18:04, Duration (s):, 405, Events Per Second:, 1.063, Events:, 431, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 402, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 51471
2026-03-26 18:18:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s806ms.
2026-03-26 18:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 415 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 294 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34002 KB;
2026-03-26 18:19:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:19:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:19:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:19:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 439 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 316 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34027 KB;
2026-03-26 18:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 445 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 322 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34032 KB;
2026-03-26 18:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 446 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 327 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34012 KB;
2026-03-26 18:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:21:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 470 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 331 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34040 KB;
2026-03-26 18:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 470 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 325 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34040 KB;
2026-03-26 18:24:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:24:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:24:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:24:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 492 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 325 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 37 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34091 KB;
2026-03-26 18:25:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:18:04, To:, 2026-03-26 18:25:04, Duration (s):, 420, Events Per Second:, 0.692, Events:, 291, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 266, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 36079
2026-03-26 18:25:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s628ms.
2026-03-26 18:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 404 KB; ProcessInfo: 356 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 327 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33884 KB;
2026-03-26 18:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2325 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 404 KB; ProcessInfo: 384 KB; rules::ProcessConditionsCache: 362 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33984 KB;
2026-03-26 18:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:26:35 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2326 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 433 KB; ModuleInfoCache: 404 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34079 KB;
2026-03-26 18:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2328 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 433 KB; ModuleInfoCache: 404 KB; rules::ProcessConditionsCache: 379 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34087 KB;
2026-03-26 18:29:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:29:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:29:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:29:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2328 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 458 KB; rules::ProcessConditionsCache: 406 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 100 KB; BaseEvent: 42 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34151 KB;
2026-03-26 18:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2328 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 465 KB; rules::ProcessConditionsCache: 414 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 67 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34144 KB;
2026-03-26 18:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2328 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 465 KB; rules::ProcessConditionsCache: 414 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 67 KB; BaseEvent: 45 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34149 KB;
2026-03-26 18:31:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:31:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:31:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:31:36 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:32:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:25:18, To:, 2026-03-26 18:32:04, Duration (s):, 406, Events Per Second:, 0.790, Events:, 321, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 279, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 35, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 39839
2026-03-26 18:32:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s640ms.
2026-03-26 18:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2328 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 404 KB; ProcessInfo: 361 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33591 KB;
2026-03-26 18:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2328 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 404 KB; ProcessInfo: 362 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::ProcessConditionsCache: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33603 KB;
2026-03-26 18:34:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:34:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:34:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:34:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2328 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 404 KB; ProcessInfo: 373 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 84 KB; rules::ProcessConditionsCache: 39 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33624 KB;
2026-03-26 18:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 404 KB; ProcessInfo: 377 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 69 KB; rules::ProcessConditionsCache: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33627 KB;
2026-03-26 18:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 404 KB; ProcessInfo: 402 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33681 KB;
2026-03-26 18:36:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:36:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:36:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:36:36 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 406 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 90 KB; rules::ProcessConditionsCache: 41 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33688 KB;
2026-03-26 18:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 452 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 141 KB; rules::ProcessConditionsCache: 94 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33857 KB;
2026-03-26 18:39:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:32:01, To:, 2026-03-26 18:39:04, Duration (s):, 423, Events Per Second:, 0.649, Events:, 275, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 270, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34015
2026-03-26 18:39:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s622ms.
2026-03-26 18:39:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:39:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:39:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:39:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 411 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 113 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33722 KB;
2026-03-26 18:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 418 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 51 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 13 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33729 KB;
2026-03-26 18:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 445 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 88 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33786 KB;
2026-03-26 18:41:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:41:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:41:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:41:36 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 468 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 93 KB; rules::ProcessConditionsCache: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33808 KB;
2026-03-26 18:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 493 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 125 KB; TcpIpConnectionsManager: 113 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33916 KB;
2026-03-26 18:44:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:44:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:44:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:44:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ProcessInfo: 493 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33859 KB;
2026-03-26 18:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; ProcessInfo: 715 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 160 KB; BaseEvent: 143 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34526 KB;
2026-03-26 18:46:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:39:21, To:, 2026-03-26 18:46:04, Duration (s):, 403, Events Per Second:, 3.599, Events:, 1452, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1242, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 209, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 163980
2026-03-26 18:46:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s745ms.
2026-03-26 18:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2329 KB; ProcessInfo: 873 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 303 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 160 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34621 KB;
2026-03-26 18:46:36 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:46:36 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:46:36 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:46:36 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 1017 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 404 KB; TcpIpConnectionsManager: 356 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; BaseEvent: 119 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; rules::ProcessConditionsCache: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34677 KB;
2026-03-26 18:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 1041 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 274 KB; cloudutils::CloudData: 160 KB; BaseEvent: 135 KB; rules::ProcessConditionsCache: 55 KB; BatchSerializer::EventsQueueTag: 36 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34670 KB;
2026-03-26 18:49:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:49:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:49:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:49:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 1125 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 226 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 160 KB; BaseEvent: 159 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34885 KB;
2026-03-26 18:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 1182 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; BaseEvent: 188 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; BatchSerializer::EventsQueueTag: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34884 KB;
2026-03-26 18:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 1229 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 207 KB; BaseEvent: 198 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 160 KB; BatchSerializer::EventsQueueTag: 58 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35013 KB;
2026-03-26 18:51:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:51:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:51:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:51:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 1254 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; BaseEvent: 208 KB; TcpIpConnectionsManager: 197 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 160 KB; BatchSerializer::EventsQueueTag: 63 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35010 KB;
2026-03-26 18:53:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:46:05, To:, 2026-03-26 18:53:04, Duration (s):, 419, Events Per Second:, 3.256, Events:, 1366, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1200, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 163, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 154030
2026-03-26 18:53:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s925ms.
2026-03-26 18:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 425 KB; ModuleInfoCache: 404 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 147 KB; TcpIpConnectionsManager: 138 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33830 KB;
2026-03-26 18:54:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:54:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:54:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:54:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 477 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33953 KB;
2026-03-26 18:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ProcessInfo: 506 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 102 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34016 KB;
2026-03-26 18:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 307 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 148 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34218 KB;
2026-03-26 18:56:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 18:56:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 18:56:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 18:56:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 18:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 257 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 152 KB; BaseEvent: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34195 KB;
2026-03-26 18:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 615 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 261 KB; TcpIpConnectionsManager: 175 KB; cloudutils::CloudData: 160 KB; BaseEvent: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34270 KB;
2026-03-26 18:59:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:59:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 177, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 18:59:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:59:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 18:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 663 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 294 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 160 KB; BaseEvent: 83 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34394 KB;
2026-03-26 19:00:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 18:53:46, To:, 2026-03-26 19:00:04, Duration (s):, 378, Events Per Second:, 1.799, Events:, 681, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 631, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 47, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 79911
2026-03-26 19:00:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s773ms.
2026-03-26 19:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 433 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 144 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33978 KB;
2026-03-26 19:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 433 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 270 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33948 KB;
2026-03-26 19:01:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:01:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:01:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:01:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 434 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 275 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33914 KB;
2026-03-26 19:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ProcessInfo: 436 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 275 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33899 KB;
2026-03-26 19:04:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:04:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:04:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:04:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ProcessInfo: 447 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 275 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33925 KB;
2026-03-26 19:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ProcessInfo: 449 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 277 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33935 KB;
2026-03-26 19:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 499 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 330 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34095 KB;
2026-03-26 19:06:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:06:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:06:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:06:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:07:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:00:08, To:, 2026-03-26 19:07:04, Duration (s):, 416, Events Per Second:, 0.444, Events:, 185, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 161, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 24248
2026-03-26 19:07:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s629ms.
2026-03-26 19:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 405 KB; ProcessInfo: 368 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 328 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33913 KB;
2026-03-26 19:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 418 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 49 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 6 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33751 KB;
2026-03-26 19:09:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:09:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:09:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:09:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 484 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33876 KB;
2026-03-26 19:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ProcessInfo: 514 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 148 KB; rules::ProcessConditionsCache: 75 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33930 KB;
2026-03-26 19:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 527 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 128 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33931 KB;
2026-03-26 19:11:37 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:11:37 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:11:37 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:11:37 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 102 KB; BaseEvent: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33973 KB;
2026-03-26 19:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; ProcessInfo: 611 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 154 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34122 KB;
2026-03-26 19:14:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:07:11, To:, 2026-03-26 19:14:04, Duration (s):, 413, Events Per Second:, 1.598, Events:, 661, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 614, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 46, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 78385
2026-03-26 19:14:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s776ms.
2026-03-26 19:14:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:14:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:14:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:14:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 414 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 160 KB; rules::ProcessConditionsCache: 156 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33809 KB;
2026-03-26 19:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 465 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 129 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33935 KB;
2026-03-26 19:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2331 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ProcessInfo: 490 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 160 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33964 KB;
2026-03-26 19:16:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:16:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:16:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:16:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ProcessInfo: 497 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33983 KB;
2026-03-26 19:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 527 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 214 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34039 KB;
2026-03-26 19:19:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:19:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:19:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:19:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; ProcessInfo: 646 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 354 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 161 KB; cloudutils::CloudData: 161 KB; BaseEvent: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34418 KB;
2026-03-26 19:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; ProcessInfo: 652 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 302 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 156 KB; BaseEvent: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34367 KB;
2026-03-26 19:21:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:14:18, To:, 2026-03-26 19:21:04, Duration (s):, 406, Events Per Second:, 1.729, Events:, 703, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 643, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 57, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 82103
2026-03-26 19:21:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s029ms.
2026-03-26 19:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 462 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 302 KB; TcpIpConnectionsManager: 164 KB; cloudutils::CloudData: 161 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34062 KB;
2026-03-26 19:21:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:21:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:21:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:21:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ProcessInfo: 464 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 301 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 105 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34000 KB;
2026-03-26 19:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 492 KB; ModuleInfoCache: 405 KB; rules::ProcessConditionsCache: 359 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 107 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34109 KB;
2026-03-26 19:24:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:24:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:24:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:24:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ProcessInfo: 502 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 304 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34053 KB;
2026-03-26 19:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 536 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34148 KB;
2026-03-26 19:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 330 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34175 KB;
2026-03-26 19:26:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:26:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:26:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:26:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; ProcessInfo: 635 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 209 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 161 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 67 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34266 KB;
2026-03-26 19:28:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:21:07, To:, 2026-03-26 19:28:04, Duration (s):, 417, Events Per Second:, 1.207, Events:, 504, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 479, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 62165
2026-03-26 19:28:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s772ms.
2026-03-26 19:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 440 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 109 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33875 KB;
2026-03-26 19:29:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:29:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:29:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:29:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 489 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33956 KB;
2026-03-26 19:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 136 KB; BaseEvent: 38 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34072 KB;
2026-03-26 19:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34031 KB;
2026-03-26 19:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:31:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 129 KB; TcpIpConnectionsManager: 103 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33975 KB;
2026-03-26 19:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 129 KB; TcpIpConnectionsManager: 65 KB; BaseEvent: 50 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33951 KB;
2026-03-26 19:34:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:34:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:34:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:34:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 133 KB; TcpIpConnectionsManager: 64 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33983 KB;
2026-03-26 19:35:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:28:04, To:, 2026-03-26 19:35:04, Duration (s):, 420, Events Per Second:, 0.892, Events:, 375, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 348, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 48913
2026-03-26 19:35:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s773ms.
2026-03-26 19:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 405 KB; CacheEntry: 333 KB; ProcessInfo: 330 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 135 KB; TcpIpConnectionsManager: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33687 KB;
2026-03-26 19:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 405 KB; ProcessInfo: 356 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 157 KB; TcpIpConnectionsManager: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33759 KB;
2026-03-26 19:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:36:38 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 405 KB; ProcessInfo: 358 KB; CacheEntry: 333 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33752 KB;
2026-03-26 19:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2332 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 405 KB; ProcessInfo: 365 KB; CacheEntry: 333 KB; cloudutils::CloudData: 161 KB; rules::ProcessConditionsCache: 159 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33767 KB;
2026-03-26 19:39:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:39:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:39:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:39:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2334 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 405 KB; ProcessInfo: 370 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33773 KB;
2026-03-26 19:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2334 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 421 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33864 KB;
2026-03-26 19:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2334 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ProcessInfo: 468 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 200 KB; cloudutils::CloudData: 161 KB; TcpIpConnectionsManager: 98 KB; BaseEvent: 44 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33976 KB;
2026-03-26 19:41:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:41:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:41:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:41:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:42:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:35:29, To:, 2026-03-26 19:42:04, Duration (s):, 395, Events Per Second:, 0.963, Events:, 381, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 352, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47591
2026-03-26 19:42:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s783ms.
2026-03-26 19:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3040 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; ProcessInfo: 417 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 200 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34798 KB;
2026-03-26 19:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3040 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; ProcessInfo: 421 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34827 KB;
2026-03-26 19:44:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:44:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:44:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:44:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3040 KB; ProcessInfo: 565 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 357 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 128 KB; BaseEvent: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35241 KB;
2026-03-26 19:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3040 KB; ProcessInfo: 785 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; TcpIpConnectionsManager: 216 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 197 KB; BaseEvent: 177 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35521 KB;
2026-03-26 19:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; ProcessInfo: 793 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; TcpIpConnectionsManager: 225 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 208 KB; BaseEvent: 179 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35556 KB;
2026-03-26 19:46:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:46:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:46:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:46:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; ProcessInfo: 821 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 276 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 189 KB; BaseEvent: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35635 KB;
2026-03-26 19:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; ProcessInfo: 832 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; rules::ProcessConditionsCache: 206 KB; BaseEvent: 190 KB; TcpIpConnectionsManager: 108 KB; BatchSerializer::EventsQueueTag: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35477 KB;
2026-03-26 19:49:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:42:33, To:, 2026-03-26 19:49:04, Duration (s):, 391, Events Per Second:, 3.064, Events:, 1200, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1015, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 182, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 135546
2026-03-26 19:49:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s924ms.
2026-03-26 19:49:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:49:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:49:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:49:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; ProcessInfo: 408 KB; rules::ProcessConditionsCache: 254 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 125 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34879 KB;
2026-03-26 19:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; ProcessInfo: 417 KB; rules::ProcessConditionsCache: 266 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34912 KB;
2026-03-26 19:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 496 KB; ProcessInfo: 443 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 297 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34966 KB;
2026-03-26 19:51:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:51:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:51:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:51:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 496 KB; ProcessInfo: 443 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 293 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34931 KB;
2026-03-26 19:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 496 KB; ProcessInfo: 455 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 326 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35004 KB;
2026-03-26 19:54:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:54:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:54:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:54:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 496 KB; ProcessInfo: 492 KB; CacheEntry: 432 KB; rules::ProcessConditionsCache: 337 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 95 KB; BaseEvent: 46 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35063 KB;
2026-03-26 19:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 151 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34888 KB;
2026-03-26 19:56:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:49:05, To:, 2026-03-26 19:56:04, Duration (s):, 419, Events Per Second:, 1.049, Events:, 440, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 53035
2026-03-26 19:56:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s774ms.
2026-03-26 19:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 3042 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 496 KB; CacheEntry: 432 KB; ProcessInfo: 417 KB; cloudutils::CloudData: 210 KB; TcpIpConnectionsManager: 151 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; BaseEvent: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34696 KB;
2026-03-26 19:56:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 19:56:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 19:56:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 19:56:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 19:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2339 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 418 KB; ModuleInfoCache: 396 KB; CacheEntry: 324 KB; cloudutils::CloudData: 162 KB; TcpIpConnectionsManager: 120 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 39 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33715 KB;
2026-03-26 19:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2348 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 443 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 163 KB; TcpIpConnectionsManager: 103 KB; rules::ProcessConditionsCache: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33788 KB;
2026-03-26 19:59:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:59:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 19:59:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:59:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 19:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2348 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 449 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 163 KB; TcpIpConnectionsManager: 77 KB; rules::ProcessConditionsCache: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33794 KB;
2026-03-26 20:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2356 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 508 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 163 KB; rules::ProcessConditionsCache: 138 KB; TcpIpConnectionsManager: 128 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33972 KB;
2026-03-26 20:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2356 KB; ProcessInfo: 558 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 163 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 54 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34068 KB;
2026-03-26 20:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:01:39 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2356 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 398 KB; CacheEntry: 327 KB; cloudutils::CloudData: 163 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34060 KB;
2026-03-26 20:03:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 19:56:04, To:, 2026-03-26 20:03:04, Duration (s):, 420, Events Per Second:, 1.089, Events:, 458, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 353, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 54686
2026-03-26 20:03:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s768ms.
2026-03-26 20:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2384 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 402 KB; ProcessInfo: 398 KB; CacheEntry: 331 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33841 KB;
2026-03-26 20:04:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:04:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:04:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:04:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2384 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 402 KB; ProcessInfo: 398 KB; CacheEntry: 331 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 57 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33800 KB;
2026-03-26 20:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2384 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 402 KB; ProcessInfo: 398 KB; CacheEntry: 331 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33798 KB;
2026-03-26 20:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2384 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 402 KB; ProcessInfo: 398 KB; CacheEntry: 331 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33799 KB;
2026-03-26 20:06:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:06:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:06:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:06:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2384 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 402 KB; ProcessInfo: 398 KB; CacheEntry: 331 KB; cloudutils::CloudData: 165 KB; rules::ProcessConditionsCache: 139 KB; TcpIpConnectionsManager: 56 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33799 KB;
2026-03-26 20:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2384 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ProcessInfo: 531 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 165 KB; TcpIpConnectionsManager: 148 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34144 KB;
2026-03-26 20:09:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:09:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:09:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:09:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2384 KB; ProcessInfo: 558 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 402 KB; CacheEntry: 331 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 174 KB; cloudutils::CloudData: 165 KB; BaseEvent: 47 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34218 KB;
2026-03-26 20:10:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:02:25, To:, 2026-03-26 20:10:04, Duration (s):, 459, Events Per Second:, 1.218, Events:, 560, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 536, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 67411
2026-03-26 20:10:05 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s800ms.
2026-03-26 20:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2389 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 531 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 221 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 165 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34154 KB;
2026-03-26 20:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2390 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 533 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34067 KB;
2026-03-26 20:11:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:11:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:11:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:11:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2390 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 533 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34040 KB;
2026-03-26 20:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2390 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 64 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34048 KB;
2026-03-26 20:14:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:14:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:14:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:14:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2390 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34080 KB;
2026-03-26 20:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2390 KB; ProcessInfo: 559 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 84 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34087 KB;
2026-03-26 20:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2390 KB; ProcessInfo: 564 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 19 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34122 KB;
2026-03-26 20:16:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:16:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:16:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:16:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:17:04 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:10:10, To:, 2026-03-26 20:17:04, Duration (s):, 414, Events Per Second:, 0.248, Events:, 103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 102, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 14845
2026-03-26 20:17:06 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s097ms.
2026-03-26 20:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2390 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; ProcessInfo: 345 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 70 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33882 KB;
2026-03-26 20:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 403 KB; ProcessInfo: 377 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 242 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 98 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33930 KB;
2026-03-26 20:19:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:19:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:19:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:19:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; ProcessInfo: 1044 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 403 KB; TcpIpConnectionsManager: 397 KB; CacheEntry: 332 KB; BaseEvent: 329 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 154 KB; BatchSerializer::EventsQueueTag: 89 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35217 KB;
2026-03-26 20:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; ProcessInfo: 1580 KB; TcpIpConnectionsManager: 613 KB; BaseEvent: 588 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; rules::ProcessConditionsCache: 341 KB; CacheEntry: 332 KB; cloudutils::CloudData: 166 KB; BatchSerializer::EventsQueueTag: 157 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36513 KB;
2026-03-26 20:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; ProcessInfo: 1818 KB; TcpIpConnectionsManager: 722 KB; BaseEvent: 690 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 244 KB; BatchSerializer::EventsQueueTag: 185 KB; cloudutils::CloudData: 166 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36908 KB;
2026-03-26 20:21:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:21:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:21:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:21:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; ProcessInfo: 1818 KB; BaseEvent: 697 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; TcpIpConnectionsManager: 422 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; BatchSerializer::EventsQueueTag: 188 KB; cloudutils::CloudData: 166 KB; rules::ProcessConditionsCache: 158 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36478 KB;
2026-03-26 20:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; ProcessInfo: 1843 KB; BaseEvent: 711 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; TcpIpConnectionsManager: 220 KB; BatchSerializer::EventsQueueTag: 193 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 166 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36353 KB;
2026-03-26 20:23:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:17:08, To:, 2026-03-26 20:23:47, Duration (s):, 399, Events Per Second:, 10.346, Events:, 4132, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3464, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 663, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457890
2026-03-26 20:23:49 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s124ms.
2026-03-26 20:24:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:24:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:24:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:24:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 462 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 134 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34020 KB;
2026-03-26 20:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2392 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 467 KB; ModuleInfoCache: 403 KB; CacheEntry: 332 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 166 KB; TcpIpConnectionsManager: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34004 KB;
2026-03-26 20:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2403 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 471 KB; ModuleInfoCache: 405 KB; CacheEntry: 334 KB; rules::ProcessConditionsCache: 247 KB; cloudutils::CloudData: 167 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34060 KB;
2026-03-26 20:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:26:40 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2450 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 496 KB; ModuleInfoCache: 413 KB; CacheEntry: 341 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 170 KB; TcpIpConnectionsManager: 75 KB; BaseEvent: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34226 KB;
2026-03-26 20:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2467 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 521 KB; ModuleInfoCache: 415 KB; CacheEntry: 343 KB; rules::ProcessConditionsCache: 301 KB; cloudutils::CloudData: 171 KB; TcpIpConnectionsManager: 97 KB; BaseEvent: 96 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34355 KB;
2026-03-26 20:29:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:29:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:29:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:29:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2467 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 415 KB; CacheEntry: 343 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 171 KB; TcpIpConnectionsManager: 120 KB; BaseEvent: 101 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 32 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34379 KB;
2026-03-26 20:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2479 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 416 KB; CacheEntry: 345 KB; rules::ProcessConditionsCache: 290 KB; cloudutils::CloudData: 171 KB; BaseEvent: 112 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 38 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34423 KB;
2026-03-26 20:30:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:23:46, To:, 2026-03-26 20:30:47, Duration (s):, 421, Events Per Second:, 1.343, Events:, 566, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 305, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 119, Livegrid:, 119, OriginUrl:, 0, Alarms:, 22, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 62860
2026-03-26 20:30:49 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s967ms.
2026-03-26 20:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2481 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 416 KB; ProcessInfo: 370 KB; CacheEntry: 345 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 171 KB; TcpIpConnectionsManager: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34083 KB;
2026-03-26 20:31:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:31:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:31:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:31:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2481 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 416 KB; ProcessInfo: 399 KB; CacheEntry: 345 KB; rules::ProcessConditionsCache: 318 KB; cloudutils::CloudData: 172 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34135 KB;
2026-03-26 20:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2481 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 424 KB; ModuleInfoCache: 416 KB; CacheEntry: 345 KB; rules::ProcessConditionsCache: 342 KB; cloudutils::CloudData: 172 KB; TcpIpConnectionsManager: 85 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34215 KB;
2026-03-26 20:34:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:34:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:34:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:34:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2482 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ProcessInfo: 447 KB; ModuleInfoCache: 417 KB; CacheEntry: 345 KB; rules::ProcessConditionsCache: 344 KB; cloudutils::CloudData: 172 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34267 KB;
2026-03-26 20:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2482 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 508 KB; ModuleInfoCache: 417 KB; rules::ProcessConditionsCache: 414 KB; CacheEntry: 345 KB; cloudutils::CloudData: 172 KB; TcpIpConnectionsManager: 123 KB; BaseEvent: 59 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34457 KB;
2026-03-26 20:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2482 KB; ProcessInfo: 571 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 417 KB; CacheEntry: 345 KB; cloudutils::CloudData: 172 KB; TcpIpConnectionsManager: 167 KB; rules::ProcessConditionsCache: 81 KB; BaseEvent: 78 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34259 KB;
2026-03-26 20:36:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:36:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:36:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:36:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2482 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 417 KB; CacheEntry: 345 KB; cloudutils::CloudData: 172 KB; TcpIpConnectionsManager: 151 KB; BaseEvent: 82 KB; rules::ProcessConditionsCache: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 37 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34226 KB;
2026-03-26 20:37:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:31:01, To:, 2026-03-26 20:37:47, Duration (s):, 406, Events Per Second:, 1.407, Events:, 572, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 507, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 56, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 66181
2026-03-26 20:37:49 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s150ms.
2026-03-26 20:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2482 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 472 KB; ModuleInfoCache: 417 KB; CacheEntry: 345 KB; cloudutils::CloudData: 172 KB; TcpIpConnectionsManager: 138 KB; rules::ProcessConditionsCache: 86 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34040 KB;
2026-03-26 20:39:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:39:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:39:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:39:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2525 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 172 KB; TcpIpConnectionsManager: 116 KB; BaseEvent: 61 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34335 KB;
2026-03-26 20:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2525 KB; ProcessInfo: 665 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 356 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 203 KB; cloudutils::CloudData: 175 KB; BaseEvent: 90 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 77 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34790 KB;
2026-03-26 20:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 666 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 207 KB; cloudutils::CloudData: 175 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 99 KB; BaseEvent: 93 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34785 KB;
2026-03-26 20:41:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:41:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:41:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:41:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 682 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 312 KB; TcpIpConnectionsManager: 208 KB; cloudutils::CloudData: 175 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 110 KB; BaseEvent: 97 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34806 KB;
2026-03-26 20:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 709 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 122 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34633 KB;
2026-03-26 20:44:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:44:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:44:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:44:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 713 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 156 KB; BaseEvent: 124 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 56 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34625 KB;
2026-03-26 20:44:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:38:21, To:, 2026-03-26 20:44:47, Duration (s):, 386, Events Per Second:, 2.160, Events:, 835, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 672, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 40, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 94453
2026-03-26 20:44:49 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s441ms.
2026-03-26 20:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 446 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 216 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 164 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34232 KB;
2026-03-26 20:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ProcessInfo: 470 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 194 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 116 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34183 KB;
2026-03-26 20:46:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:46:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:46:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:46:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ProcessInfo: 518 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 231 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 133 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 43 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34321 KB;
2026-03-26 20:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 519 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 123 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34320 KB;
2026-03-26 20:49:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:49:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:49:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:49:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 105 KB; BaseEvent: 52 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34378 KB;
2026-03-26 20:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 262 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 80 KB; BaseEvent: 55 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34371 KB;
2026-03-26 20:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 812 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 193 KB; BaseEvent: 176 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34795 KB;
2026-03-26 20:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:51:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:51:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:44:59, To:, 2026-03-26 20:51:47, Duration (s):, 408, Events Per Second:, 3.549, Events:, 1450, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1228, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 221, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 163375
2026-03-26 20:51:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s937ms.
2026-03-26 20:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 985 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 343 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 103 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34982 KB;
2026-03-26 20:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 1103 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 422 KB; TcpIpConnectionsManager: 418 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 175 KB; BaseEvent: 147 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 47 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35357 KB;
2026-03-26 20:54:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:54:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:54:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:54:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 1103 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 325 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 175 KB; BaseEvent: 151 KB; BatchSerializer::EventsQueueTag: 43 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35204 KB;
2026-03-26 20:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 1130 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 166 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 48 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35134 KB;
2026-03-26 20:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 1132 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 175 KB; BaseEvent: 168 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35081 KB;
2026-03-26 20:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 20:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 20:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 20:56:41 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 20:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 1158 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 256 KB; BaseEvent: 185 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35137 KB;
2026-03-26 20:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; ProcessInfo: 1160 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 256 KB; BaseEvent: 187 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 74 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35137 KB;
2026-03-26 20:58:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:51:47, To:, 2026-03-26 20:58:47, Duration (s):, 420, Events Per Second:, 2.632, Events:, 1107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 935, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 161, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 126066
2026-03-26 20:58:49 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s121ms.
2026-03-26 20:59:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:59:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 20:59:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:59:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 20:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 422 KB; ProcessInfo: 387 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 298 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34200 KB;
2026-03-26 21:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2526 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 447 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 374 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 121 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34386 KB;
2026-03-26 21:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 515 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 370 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 129 KB; BaseEvent: 53 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34491 KB;
2026-03-26 21:01:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:01:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:01:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:01:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; ProcessInfo: 562 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 418 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 136 KB; BaseEvent: 77 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34615 KB;
2026-03-26 21:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; ProcessInfo: 564 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 416 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 113 KB; BaseEvent: 79 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34616 KB;
2026-03-26 21:04:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:04:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:04:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:04:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; ProcessInfo: 587 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 107 KB; BaseEvent: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 54 KB; rules::ProcessConditionsCache: 46 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34302 KB;
2026-03-26 21:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; ProcessInfo: 613 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; BaseEvent: 104 KB; TcpIpConnectionsManager: 85 KB; rules::ProcessConditionsCache: 69 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34352 KB;
2026-03-26 21:05:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 20:58:53, To:, 2026-03-26 21:05:47, Duration (s):, 414, Events Per Second:, 1.826, Events:, 757, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 668, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 78, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 88007
2026-03-26 21:05:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s784ms.
2026-03-26 21:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; ProcessInfo: 398 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 110 KB; rules::ProcessConditionsCache: 71 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33986 KB;
2026-03-26 21:06:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:06:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:06:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:06:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; ProcessInfo: 403 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 107 KB; rules::ProcessConditionsCache: 91 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34024 KB;
2026-03-26 21:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; ProcessInfo: 405 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 95 KB; rules::ProcessConditionsCache: 73 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 33995 KB;
2026-03-26 21:09:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:09:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:09:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:09:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 453 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 84 KB; TcpIpConnectionsManager: 72 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 11 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34061 KB;
2026-03-26 21:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 481 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 115 KB; TcpIpConnectionsManager: 97 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34124 KB;
2026-03-26 21:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 503 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 132 KB; TcpIpConnectionsManager: 110 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34229 KB;
2026-03-26 21:11:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:11:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:11:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:11:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ProcessInfo: 528 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 123 KB; rules::ProcessConditionsCache: 115 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34209 KB;
2026-03-26 21:12:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:05:47, To:, 2026-03-26 21:12:47, Duration (s):, 420, Events Per Second:, 0.877, Events:, 369, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 357, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 47627
2026-03-26 21:12:48 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s787ms.
2026-03-26 21:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 422 KB; ProcessInfo: 400 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 120 KB; TcpIpConnectionsManager: 108 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34022 KB;
2026-03-26 21:14:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:14:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:14:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:14:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ProcessInfo: 430 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; TcpIpConnectionsManager: 111 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34101 KB;
2026-03-26 21:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 436 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 144 KB; TcpIpConnectionsManager: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 50 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34083 KB;
2026-03-26 21:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ProcessInfo: 464 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 168 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 49 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34164 KB;
2026-03-26 21:16:42 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:16:42 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:16:42 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:16:42 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 512 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 102 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 52 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34301 KB;
2026-03-26 21:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 512 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 217 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 95 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 59 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34306 KB;
2026-03-26 21:19:06 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:19:06 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:19:06 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:19:06 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 512 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 92 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 61 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34305 KB;
2026-03-26 21:19:47 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:12:53, To:, 2026-03-26 21:19:47, Duration (s):, 414, Events Per Second:, 0.781, Events:, 324, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 275, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 44, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 38521
2026-03-26 21:19:50 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s203ms.
2026-03-26 21:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 422 KB; ProcessInfo: 359 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 67 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34058 KB;
2026-03-26 21:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 433 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 384 KB; CacheEntry: 352 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 79 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34412 KB;
2026-03-26 21:21:43 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:21:43 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:21:43 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:21:43 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 445 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 419 KB; CacheEntry: 352 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 162 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 96 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34509 KB;
2026-03-26 21:23:58 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 458 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 169 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34340 KB;
2026-03-26 21:24:20 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:24:26 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 458 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 159 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34332 KB;
2026-03-26 21:24:44 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:24:48 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:24:48 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:25:22 7967327fc6c0 Error: Failure to obtain banned hashes version. Failed to process a request to/from ESET Endpoint Security/Antivirus. RUN_LOOP_ERROR RUN_LOOP_TIMEOUT (2)
2026-03-26 21:25:24 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2528 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 458 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34325 KB;
2026-03-26 21:25:32 7967327fc6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. banHashes: Failed to process a request to/from ESET Endpoint Security/Antivirus. RUN_LOOP_ERROR RUN_LOOP_TIMEOUT (2)
2026-03-26 21:26:25 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 458 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 208 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 152 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34326 KB;
2026-03-26 21:26:45 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:26:45 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:26:45 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:26:45 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:27:23 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ProcessInfo: 458 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34329 KB;
2026-03-26 21:27:58 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:20:05, To:, 2026-03-26 21:26:47, Duration (s):, 402, Events Per Second:, 0.474, Events:, 191, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 188, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 29441
2026-03-26 21:28:08 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s479ms.
2026-03-26 21:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 422 KB; ProcessInfo: 393 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34226 KB;
2026-03-26 21:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 422 KB; ProcessInfo: 393 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34226 KB;
2026-03-26 21:29:48 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 422 KB; ProcessInfo: 395 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 141 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34233 KB;
2026-03-26 21:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 428 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34499 KB;
2026-03-26 21:32:03 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:32:03 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:32:03 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:32:03 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 428 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34505 KB;
2026-03-26 21:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 428 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34505 KB;
2026-03-26 21:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 428 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 327 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34499 KB;
2026-03-26 21:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:35:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:22:03, To:, 2026-03-26 21:32:18, Duration (s):, 615, Events Per Second:, 0.093, Events:, 57, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 52, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 0, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 9969
2026-03-26 21:35:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s643ms.
2026-03-26 21:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 424 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34492 KB;
2026-03-26 21:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28740 KB; ModuleMetadata: 2529 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 424 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 328 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34492 KB;
2026-03-26 21:37:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:37:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:37:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:37:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2529 KB; ProcessInfo: 608 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 352 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; BaseEvent: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34912 KB;
2026-03-26 21:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2529 KB; ProcessInfo: 801 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; TcpIpConnectionsManager: 397 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 164 KB; BaseEvent: 151 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 12 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35142 KB;
2026-03-26 21:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2529 KB; ProcessInfo: 1053 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; TcpIpConnectionsManager: 489 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 387 KB; CacheEntry: 352 KB; BaseEvent: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 77 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35868 KB;
2026-03-26 21:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2529 KB; ProcessInfo: 1257 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 422 KB; TcpIpConnectionsManager: 407 KB; BaseEvent: 357 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35920 KB;
2026-03-26 21:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2529 KB; ProcessInfo: 1360 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; BaseEvent: 410 KB; TcpIpConnectionsManager: 353 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 321 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 116 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36148 KB;
2026-03-26 21:42:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:25:45, To:, 2026-03-26 21:42:02, Duration (s):, 977, Events Per Second:, 2.649, Events:, 2590, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2226, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 363, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 296683
2026-03-26 21:42:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:42:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:42:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:42:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:42:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s120ms.
2026-03-26 21:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2529 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 318 KB; TcpIpConnectionsManager: 282 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35039 KB;
2026-03-26 21:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2529 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 318 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34947 KB;
2026-03-26 21:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 853 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 316 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 141 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34903 KB;
2026-03-26 21:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 903 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 369 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 151 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35055 KB;
2026-03-26 21:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 376 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 157 KB; BaseEvent: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35071 KB;
2026-03-26 21:47:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:47:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:47:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:47:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 957 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 60 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34838 KB;
2026-03-26 21:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 1006 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 106 KB; BaseEvent: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34963 KB;
2026-03-26 21:49:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:42:01, To:, 2026-03-26 21:49:02, Duration (s):, 421, Events Per Second:, 1.210, Events:, 510, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 452, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 57, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 62674
2026-03-26 21:49:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s833ms.
2026-03-26 21:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 546 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 246 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 168 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34587 KB;
2026-03-26 21:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 708 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 550 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34617 KB;
2026-03-26 21:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 670 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 553 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34561 KB;
2026-03-26 21:52:04 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:52:04 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:52:04 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:52:04 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 672 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 157 KB; rules::ProcessConditionsCache: 130 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34550 KB;
2026-03-26 21:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 673 KB; ProcessInfo: 578 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 146 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34604 KB;
2026-03-26 21:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 654 KB; ProcessInfo: 605 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 156 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34663 KB;
2026-03-26 21:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 637 KB; ProcessInfo: 613 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 161 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34681 KB;
2026-03-26 21:56:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:49:02, To:, 2026-03-26 21:56:02, Duration (s):, 420, Events Per Second:, 0.571, Events:, 240, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 211, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 34337
2026-03-26 21:56:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s456ms.
2026-03-26 21:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 599 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 433 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34389 KB;
2026-03-26 21:57:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 21:57:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 21:57:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 21:57:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 21:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 433 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 200 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 138 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34363 KB;
2026-03-26 21:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 481 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 234 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 5 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34505 KB;
2026-03-26 21:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 519 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 175 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34582 KB;
2026-03-26 21:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 21:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 21:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 273 KB; TcpIpConnectionsManager: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 175 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34716 KB;
2026-03-26 22:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 300 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; TcpIpConnectionsManager: 187 KB; cloudutils::CloudData: 175 KB; BaseEvent: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34769 KB;
2026-03-26 22:02:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:02:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:02:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:02:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 605 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 175 KB; BaseEvent: 65 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34799 KB;
2026-03-26 22:03:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 21:56:07, To:, 2026-03-26 22:03:02, Duration (s):, 415, Events Per Second:, 1.148, Events:, 477, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 48, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57223
2026-03-26 22:03:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s640ms.
2026-03-26 22:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ProcessInfo: 480 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 339 KB; TcpIpConnectionsManager: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34589 KB;
2026-03-26 22:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 528 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 350 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34688 KB;
2026-03-26 22:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 572 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 175 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34806 KB;
2026-03-26 22:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 326 KB; rules::ProcessConditionsCache: 317 KB; BaseEvent: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35363 KB;
2026-03-26 22:07:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:07:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:07:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:07:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 1161 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 422 KB; TcpIpConnectionsManager: 415 KB; CacheEntry: 352 KB; BaseEvent: 331 KB; rules::ProcessConditionsCache: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 89 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35777 KB;
2026-03-26 22:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 1360 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; TcpIpConnectionsManager: 472 KB; BaseEvent: 429 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 115 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35995 KB;
2026-03-26 22:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 1417 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; BaseEvent: 456 KB; ModuleInfoCache: 422 KB; TcpIpConnectionsManager: 377 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 122 KB; rules::ProcessConditionsCache: 87 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 36029 KB;
2026-03-26 22:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:10:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:03:02, To:, 2026-03-26 22:10:02, Duration (s):, 420, Events Per Second:, 6.466, Events:, 2720, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2291, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 428, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 302296
2026-03-26 22:10:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s200ms.
2026-03-26 22:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 796 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 97 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34714 KB;
2026-03-26 22:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 822 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; TcpIpConnectionsManager: 177 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 130 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34731 KB;
2026-03-26 22:12:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:12:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:12:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:12:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 834 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 123 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34707 KB;
2026-03-26 22:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 835 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 123 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; BaseEvent: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34717 KB;
2026-03-26 22:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 248 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 175 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35002 KB;
2026-03-26 22:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 941 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 231 KB; rules::ProcessConditionsCache: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 175 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35043 KB;
2026-03-26 22:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 254 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 156 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35024 KB;
2026-03-26 22:17:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:10:09, To:, 2026-03-26 22:17:02, Duration (s):, 413, Events Per Second:, 1.163, Events:, 481, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 457, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 23, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57723
2026-03-26 22:17:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s782ms.
2026-03-26 22:17:05 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:17:05 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:17:05 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:17:05 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 519 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 164 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34486 KB;
2026-03-26 22:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 543 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 212 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34505 KB;
2026-03-26 22:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 544 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 158 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34455 KB;
2026-03-26 22:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 584 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 175 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34563 KB;
2026-03-26 22:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 588 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 191 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 164 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34552 KB;
2026-03-26 22:22:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:22:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:22:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:22:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 638 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 245 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 175 KB; BaseEvent: 55 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34710 KB;
2026-03-26 22:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 643 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 248 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 161 KB; BaseEvent: 56 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34702 KB;
2026-03-26 22:24:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:17:02, To:, 2026-03-26 22:24:02, Duration (s):, 420, Events Per Second:, 1.041, Events:, 438, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 392, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 45, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 52112
2026-03-26 22:24:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s160ms.
2026-03-26 22:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 503 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 294 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34625 KB;
2026-03-26 22:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 594 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 323 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 175 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34717 KB;
2026-03-26 22:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 596 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 323 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 175 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34722 KB;
2026-03-26 22:27:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:27:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:27:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:27:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; ProcessInfo: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 325 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 167 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34713 KB;
2026-03-26 22:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 606 KB; ProcessInfo: 602 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 208 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 175 KB; BaseEvent: 37 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34513 KB;
2026-03-26 22:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 627 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 55 KB; BaseEvent: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34506 KB;
2026-03-26 22:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 637 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 70 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34541 KB;
2026-03-26 22:31:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:24:13, To:, 2026-03-26 22:31:02, Duration (s):, 409, Events Per Second:, 1.145, Events:, 469, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 434, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 34, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57336
2026-03-26 22:31:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s850ms.
2026-03-26 22:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ProcessInfo: 500 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 84 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34357 KB;
2026-03-26 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:32:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 73 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34336 KB;
2026-03-26 22:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 527 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 174 KB; rules::ProcessConditionsCache: 98 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34476 KB;
2026-03-26 22:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2531 KB; ProcessInfo: 597 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 422 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 193 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 157 KB; BaseEvent: 45 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34581 KB;
2026-03-26 22:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; ProcessInfo: 624 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 175 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34659 KB;
2026-03-26 22:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; ProcessInfo: 625 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; TcpIpConnectionsManager: 185 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 175 KB; BaseEvent: 61 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34657 KB;
2026-03-26 22:37:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:37:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:37:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:37:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; ProcessInfo: 631 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34616 KB;
2026-03-26 22:38:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:30:54, To:, 2026-03-26 22:38:02, Duration (s):, 428, Events Per Second:, 1.327, Events:, 569, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 497, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 69, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68600
2026-03-26 22:38:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s779ms.
2026-03-26 22:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 472 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 236 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34462 KB;
2026-03-26 22:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ProcessInfo: 540 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 271 KB; TcpIpConnectionsManager: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34614 KB;
2026-03-26 22:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 546 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 242 KB; TcpIpConnectionsManager: 203 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34587 KB;
2026-03-26 22:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; ProcessInfo: 581 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 266 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 175 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34647 KB;
2026-03-26 22:42:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:42:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:42:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:42:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; ProcessInfo: 797 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 259 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; cloudutils::CloudData: 175 KB; BaseEvent: 136 KB; rules::ProcessConditionsCache: 78 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34892 KB;
2026-03-26 22:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2532 KB; ProcessInfo: 945 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 312 KB; rules::ProcessConditionsCache: 254 KB; BaseEvent: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 60 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35369 KB;
2026-03-26 22:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 973 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 303 KB; rules::ProcessConditionsCache: 273 KB; BaseEvent: 223 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 175 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35426 KB;
2026-03-26 22:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:45:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:38:02, To:, 2026-03-26 22:45:02, Duration (s):, 420, Events Per Second:, 3.480, Events:, 1464, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1253, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 206, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 166614
2026-03-26 22:45:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s257ms.
2026-03-26 22:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 700 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 228 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34820 KB;
2026-03-26 22:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 709 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 556 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 304 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34772 KB;
2026-03-26 22:47:06 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:47:06 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:47:06 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:47:06 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 790 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 383 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 195 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 175 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34989 KB;
2026-03-26 22:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 218 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 175 KB; BaseEvent: 42 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34738 KB;
2026-03-26 22:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 844 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; cloudutils::CloudData: 175 KB; BaseEvent: 50 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34738 KB;
2026-03-26 22:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 903 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 215 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 96 KB; BaseEvent: 78 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34887 KB;
2026-03-26 22:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 907 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 208 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 94 KB; BaseEvent: 80 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34889 KB;
2026-03-26 22:52:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:45:24, To:, 2026-03-26 22:52:02, Duration (s):, 398, Events Per Second:, 1.567, Events:, 625, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 552, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 72, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 72528
2026-03-26 22:52:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s529ms.
2026-03-26 22:52:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:52:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:52:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:52:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 496 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 172 KB; rules::ProcessConditionsCache: 121 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34368 KB;
2026-03-26 22:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 503 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 154 KB; rules::ProcessConditionsCache: 125 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34367 KB;
2026-03-26 22:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 528 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 161 KB; rules::ProcessConditionsCache: 149 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34478 KB;
2026-03-26 22:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 558 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; rules::ProcessConditionsCache: 180 KB; TcpIpConnectionsManager: 179 KB; cloudutils::CloudData: 175 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 19 KB; ExtendedTcpIpConnectionInfo: 10 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34524 KB;
2026-03-26 22:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 578 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 192 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 158 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34541 KB;
2026-03-26 22:57:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 22:57:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 22:57:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 22:57:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 22:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 591 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 197 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 158 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34552 KB;
2026-03-26 22:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 594 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 180 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 149 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 12 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34537 KB;
2026-03-26 22:59:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:52:06, To:, 2026-03-26 22:59:02, Duration (s):, 416, Events Per Second:, 0.811, Events:, 338, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 311, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 41179
2026-03-26 22:59:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s665ms.
2026-03-26 22:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 439 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 164 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34361 KB;
2026-03-26 22:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 22:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 22:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:00:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ProcessInfo: 517 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 258 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 175 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34573 KB;
2026-03-26 23:01:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 540 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 256 KB; TcpIpConnectionsManager: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 175 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34616 KB;
2026-03-26 23:02:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:02:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:02:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:02:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:02:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 269 KB; TcpIpConnectionsManager: 205 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34672 KB;
2026-03-26 23:03:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 590 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 175 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34728 KB;
2026-03-26 23:04:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 613 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 302 KB; TcpIpConnectionsManager: 184 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 175 KB; BaseEvent: 67 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34763 KB;
2026-03-26 23:04:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:04:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:04:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:04:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:05:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; ProcessInfo: 619 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 298 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 170 KB; BaseEvent: 71 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34761 KB;
2026-03-26 23:06:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 22:59:21, To:, 2026-03-26 23:06:02, Duration (s):, 401, Events Per Second:, 1.376, Events:, 553, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 490, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 60, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 65331
2026-03-26 23:06:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s807ms.
2026-03-26 23:06:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 472 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 169 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34548 KB;
2026-03-26 23:07:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:07:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:07:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:07:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:07:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 475 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 326 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34520 KB;
2026-03-26 23:08:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 492 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34556 KB;
2026-03-26 23:09:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 539 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 341 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 152 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34633 KB;
2026-03-26 23:09:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:09:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:09:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:09:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:10:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 341 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 192 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 149 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 15 KB; BaseEvent: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34660 KB;
2026-03-26 23:11:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; ProcessInfo: 549 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 339 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 148 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 15 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34644 KB;
2026-03-26 23:12:07 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:12:07 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:12:07 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:12:07 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:12:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ProcessInfo: 552 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; rules::ProcessConditionsCache: 344 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 143 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 15 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34656 KB;
2026-03-26 23:13:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:06:37, To:, 2026-03-26 23:13:02, Duration (s):, 385, Events Per Second:, 0.710, Events:, 274, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 262, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 11, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 35433
2026-03-26 23:13:03 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 0s684ms.
2026-03-26 23:13:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 437 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 366 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 151 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34557 KB;
2026-03-26 23:14:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 462 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 393 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 201 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 165 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 17 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34668 KB;
2026-03-26 23:14:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:14:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:14:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:14:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:15:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 467 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 393 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 199 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 165 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34684 KB;
2026-03-26 23:16:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 467 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 391 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 202 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 154 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 4 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34694 KB;
2026-03-26 23:17:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:17:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:17:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:17:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:17:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 494 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 421 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 207 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 149 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34761 KB;
2026-03-26 23:18:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 556 KB; ProcessInfo: 509 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 213 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 68 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34448 KB;
2026-03-26 23:19:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 543 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 199 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 198 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 62 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34506 KB;
2026-03-26 23:19:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:19:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:19:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:19:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:20:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:13:08, To:, 2026-03-26 23:20:02, Duration (s):, 414, Events Per Second:, 0.755, Events:, 313, File:, 6, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 274, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 30, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 37629
2026-03-26 23:20:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s681ms.
2026-03-26 23:20:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 449 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; TcpIpConnectionsManager: 190 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34289 KB;
2026-03-26 23:21:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 544 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 244 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 136 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 20 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34574 KB;
2026-03-26 23:22:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:22:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:22:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:22:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:22:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 547 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 204 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 123 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34540 KB;
2026-03-26 23:23:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; ProcessInfo: 564 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 118 KB; BaseEvent: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 16 KB; ExtendedTcpIpConnectionInfo: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34544 KB;
2026-03-26 23:24:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 586 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; TcpIpConnectionsManager: 182 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 125 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 19 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34540 KB;
2026-03-26 23:24:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:24:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:24:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:24:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:25:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 613 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 184 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 147 KB; BaseEvent: 69 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34614 KB;
2026-03-26 23:26:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 613 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 164 KB; rules::ProcessConditionsCache: 147 KB; BaseEvent: 71 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34604 KB;
2026-03-26 23:27:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:20:04, To:, 2026-03-26 23:27:02, Duration (s):, 418, Events Per Second:, 1.149, Events:, 481, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 52, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 57323
2026-03-26 23:27:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s416ms.
2026-03-26 23:27:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:27:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:27:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:27:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:27:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 1071 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 433 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 174 KB; rules::ProcessConditionsCache: 152 KB; TcpIpConnectionsManager: 144 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34829 KB;
2026-03-26 23:28:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ProcessInfo: 455 KB; ModuleInfoCache: 423 KB; CacheEntry: 352 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 149 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34337 KB;
2026-03-26 23:29:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ProcessInfo: 461 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 156 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BaseEvent: 4 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34360 KB;
2026-03-26 23:29:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:29:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:29:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:29:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:30:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 464 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 191 KB; cloudutils::CloudData: 174 KB; TcpIpConnectionsManager: 162 KB; rules::ProcessConditionsCache: 154 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34385 KB;
2026-03-26 23:31:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 663 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 371 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 216 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 174 KB; BaseEvent: 102 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34988 KB;
2026-03-26 23:32:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:32:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:32:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:32:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:32:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 878 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 576 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 351 KB; rules::ProcessConditionsCache: 265 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 206 KB; BaseEvent: 184 KB; cloudutils::CloudData: 174 KB; BatchSerializer::EventsQueueTag: 52 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35351 KB;
2026-03-26 23:33:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 1117 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; TcpIpConnectionsManager: 449 KB; ModuleInfoCache: 423 KB; rules::ProcessConditionsCache: 421 KB; CacheEntry: 353 KB; BaseEvent: 305 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 174 KB; BatchSerializer::EventsQueueTag: 85 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35955 KB;
2026-03-26 23:34:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:27:05, To:, 2026-03-26 23:34:02, Duration (s):, 417, Events Per Second:, 4.457, Events:, 1862, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1584, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 277, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 207905
2026-03-26 23:34:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s596ms.
2026-03-26 23:34:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 948 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; rules::ProcessConditionsCache: 426 KB; ModuleInfoCache: 423 KB; TcpIpConnectionsManager: 380 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 174 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35335 KB;
2026-03-26 23:34:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:34:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:34:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:34:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:35:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 1001 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 290 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34987 KB;
2026-03-26 23:36:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 1004 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 197 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 156 KB; rules::ProcessConditionsCache: 80 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34869 KB;
2026-03-26 23:37:08 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:37:08 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:37:08 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:37:08 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:37:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 1014 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 166 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34866 KB;
2026-03-26 23:38:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; TcpIpConnectionsManager: 192 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 115 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 13 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34989 KB;
2026-03-26 23:39:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 1119 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 104 KB; BaseEvent: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35078 KB;
2026-03-26 23:39:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:39:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:39:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:39:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:40:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; ProcessInfo: 1129 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 200 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 175 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35081 KB;
2026-03-26 23:41:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:34:09, To:, 2026-03-26 23:41:02, Duration (s):, 413, Events Per Second:, 1.196, Events:, 495, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 468, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 24, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 60072
2026-03-26 23:41:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s966ms.
2026-03-26 23:41:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2535 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ProcessInfo: 497 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 188 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 169 KB; rules::ProcessConditionsCache: 94 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34346 KB;
2026-03-26 23:42:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:42:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:42:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:42:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:42:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 499 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 144 KB; rules::ProcessConditionsCache: 102 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34356 KB;
2026-03-26 23:43:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 502 KB; ModuleInfoCache: 423 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 175 KB; TcpIpConnectionsManager: 133 KB; rules::ProcessConditionsCache: 108 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34364 KB;
2026-03-26 23:44:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 552 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 157 KB; TcpIpConnectionsManager: 156 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34524 KB;
2026-03-26 23:44:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:44:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:44:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:44:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:45:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 685 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 555 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 286 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 186 KB; cloudutils::CloudData: 176 KB; BaseEvent: 82 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34922 KB;
2026-03-26 23:46:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 756 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; rules::ProcessConditionsCache: 337 KB; TcpIpConnectionsManager: 261 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 180 KB; cloudutils::CloudData: 176 KB; BaseEvent: 120 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35095 KB;
2026-03-26 23:47:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:47:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:47:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:47:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:47:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 950 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 339 KB; BaseEvent: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 181 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 163 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 18 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35296 KB;
2026-03-26 23:48:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:41:13, To:, 2026-03-26 23:48:02, Duration (s):, 409, Events Per Second:, 3.819, Events:, 1565, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1318, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 244, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 175481
2026-03-26 23:48:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s589ms.
2026-03-26 23:48:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 875 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 330 KB; rules::ProcessConditionsCache: 315 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 184 KB; cloudutils::CloudData: 176 KB; rules::CachedConditionEvaluationCtx: 23 KB; BaseEvent: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35104 KB;
2026-03-26 23:49:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 969 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleInfoCache: 424 KB; TcpIpConnectionsManager: 359 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 53 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 14 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35010 KB;
2026-03-26 23:49:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:49:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:49:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:49:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:50:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 1000 KB; rules::AncestorEvaluations: 556 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 285 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 189 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 101 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 18 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35037 KB;
2026-03-26 23:51:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 1006 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 230 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 182 KB; cloudutils::CloudData: 176 KB; BaseEvent: 56 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 23 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34931 KB;
2026-03-26 23:52:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:52:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:52:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:52:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:52:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 1053 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 207 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 196 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 130 KB; BaseEvent: 62 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 35066 KB;
2026-03-26 23:53:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 1053 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 210 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 183 KB; cloudutils::CloudData: 176 KB; BaseEvent: 72 KB; rules::ProcessConditionsCache: 51 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 23 KB; ProcessInfoCommandLineTag: 7 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34989 KB;
2026-03-26 23:54:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; ProcessInfo: 1056 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 187 KB; TcpIpConnectionsManager: 185 KB; cloudutils::CloudData: 176 KB; BaseEvent: 73 KB; rules::ProcessConditionsCache: 51 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 7 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34977 KB;
2026-03-26 23:54:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:54:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:54:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:54:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:55:02 7967594126c0 Info: Events Statistics, From:, 2026-03-26 23:48:05, To:, 2026-03-26 23:55:02, Duration (s):, 417, Events Per Second:, 1.402, Events:, 586, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 549, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 36, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 68500
2026-03-26 23:55:04 796759c136c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s661ms.
2026-03-26 23:55:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; ProcessInfo: 462 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; TcpIpConnectionsManager: 198 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 185 KB; cloudutils::CloudData: 176 KB; rules::ProcessConditionsCache: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34294 KB;
2026-03-26 23:56:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 555 KB; ProcessInfo: 465 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 190 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 152 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34256 KB;
2026-03-26 23:57:09 796742bff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-26 23:57:09 796742bff6c0 Info: RulesEngineMemoryUsage. conditions size: 23693
2026-03-26 23:57:09 796742bff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-26 23:57:09 796742bff6c0 Info: RulesEngineMemoryUsage. End
2026-03-26 23:57:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ProcessInfo: 465 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 193 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 151 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34245 KB;
2026-03-26 23:58:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ProcessInfo: 468 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 194 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 136 KB; rules::ProcessConditionsCache: 48 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 8 KB; ProcessInfoCommandLineTag: 6 KB; BaseEvent: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34240 KB;
2026-03-26 23:59:22 796740bfb6c0 Info: Allocations: rules::RuleEvaluationCtx: 28752 KB; ModuleMetadata: 2539 KB; rules::AncestorEvaluations: 555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ProcessInfo: 472 KB; ModuleInfoCache: 424 KB; CacheEntry: 353 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 195 KB; cloudutils::CloudData: 176 KB; TcpIpConnectionsManager: 134 KB; rules::ProcessConditionsCache: 53 KB; rules::CachedConditionEvaluationCtx: 23 KB; ExtendedTcpIpConnectionInfo: 7 KB; BaseEvent: 7 KB; ProcessInfoCommandLineTag: 6 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; (anonymous namespace)::ProcessOperationsCache<in6_addr>: 0 KB; Total: 34251 KB;
2026-03-26 23:59:49 796741bfd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:59:49 796741bfd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 176, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-26 23:59:49 796741bfd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-26 23:59:49 796741bfd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)